{"id":"https://openalex.org/W3020736316","doi":"https://doi.org/10.1109/access.2020.2989739","title":"Empirical Detection Techniques of Insider Threat Incidents","display_name":"Empirical Detection Techniques of Insider Threat Incidents","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3020736316","doi":"https://doi.org/10.1109/access.2020.2989739","mag":"3020736316"},"language":"en","primary_location":{"id":"doi:10.1109/access.2020.2989739","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2989739","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09076665.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09076665.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042889892","display_name":"Rakan A. Alsowail","orcid":null},"institutions":[{"id":"https://openalex.org/I28022161","display_name":"King Saud University","ror":"https://ror.org/02f81g417","country_code":"SA","type":"education","lineage":["https://openalex.org/I28022161"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Rakan A. Alsowail","raw_affiliation_strings":["Deanship of Common First Year, King Saud University, Riyadh, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Deanship of Common First Year, King Saud University, Riyadh, Saudi Arabia","institution_ids":["https://openalex.org/I28022161"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5069238097","display_name":"Taher Al\u2010Shehari","orcid":"https://orcid.org/0000-0002-9783-919X"},"institutions":[{"id":"https://openalex.org/I28022161","display_name":"King Saud University","ror":"https://ror.org/02f81g417","country_code":"SA","type":"education","lineage":["https://openalex.org/I28022161"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Taher Al-Shehari","raw_affiliation_strings":["Deanship of Common First Year, King Saud University, Riyadh, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-9783-919X","affiliations":[{"raw_affiliation_string":"Deanship of Common First Year, King Saud University, Riyadh, Saudi Arabia","institution_ids":["https://openalex.org/I28022161"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":5.5697,"has_fulltext":true,"cited_by_count":37,"citation_normalized_percentile":{"value":0.96125355,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"8","issue":null,"first_page":"78385","last_page":"78402"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10994","display_name":"Terrorism, Counterterrorism, and Political Violence","score":0.9807000160217285,"subfield":{"id":"https://openalex.org/subfields/3312","display_name":"Sociology and Political Science"},"field":{"id":"https://openalex.org/fields/33","display_name":"Social Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.9292033910751343},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.7633387446403503},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.7190862894058228},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7164129614830017},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7003040909767151},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.4593423306941986},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.4170108437538147},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.32020115852355957},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.2855643033981323},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.08517807722091675}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.9292033910751343},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.7633387446403503},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.7190862894058228},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7164129614830017},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7003040909767151},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.4593423306941986},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.4170108437538147},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.32020115852355957},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.2855643033981323},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.08517807722091675},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2020.2989739","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2989739","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09076665.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:6825bf5133974bc3b762b67817836d0c","is_oa":true,"landing_page_url":"https://doaj.org/article/6825bf5133974bc3b762b67817836d0c","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 8, Pp 78385-78402 (2020)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2020.2989739","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2989739","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09076665.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.75}],"awards":[{"id":"https://openalex.org/G7945351755","display_name":null,"funder_award_id":"RG-1441-401","funder_id":"https://openalex.org/F4320321145","funder_display_name":"King Saud University"}],"funders":[{"id":"https://openalex.org/F4320321145","display_name":"King Saud University","ror":"https://ror.org/02f81g417"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3020736316.pdf","grobid_xml":"https://content.openalex.org/works/W3020736316.grobid-xml"},"referenced_works_count":82,"referenced_works":["https://openalex.org/W33933511","https://openalex.org/W908371000","https://openalex.org/W1458873377","https://openalex.org/W1481547447","https://openalex.org/W1516506771","https://openalex.org/W1516813203","https://openalex.org/W1520397516","https://openalex.org/W1654306951","https://openalex.org/W1678518841","https://openalex.org/W1684492806","https://openalex.org/W1760565668","https://openalex.org/W1898491644","https://openalex.org/W1966347356","https://openalex.org/W1969795119","https://openalex.org/W1975843001","https://openalex.org/W1985995090","https://openalex.org/W1987442832","https://openalex.org/W1995919426","https://openalex.org/W1995976200","https://openalex.org/W1998711561","https://openalex.org/W2001702225","https://openalex.org/W2002577405","https://openalex.org/W2006376235","https://openalex.org/W2010725470","https://openalex.org/W2013946142","https://openalex.org/W2023509821","https://openalex.org/W2025519999","https://openalex.org/W2027115557","https://openalex.org/W2033599479","https://openalex.org/W2044936748","https://openalex.org/W2047668391","https://openalex.org/W2053003065","https://openalex.org/W2067120103","https://openalex.org/W2068244095","https://openalex.org/W2084491912","https://openalex.org/W2085901425","https://openalex.org/W2096632950","https://openalex.org/W2100407515","https://openalex.org/W2113997717","https://openalex.org/W2123120907","https://openalex.org/W2123521920","https://openalex.org/W2123941465","https://openalex.org/W2126340581","https://openalex.org/W2129018774","https://openalex.org/W2133990480","https://openalex.org/W2137061487","https://openalex.org/W2137911502","https://openalex.org/W2138209477","https://openalex.org/W2144584907","https://openalex.org/W2156098321","https://openalex.org/W2160319865","https://openalex.org/W2161349318","https://openalex.org/W2171080494","https://openalex.org/W2187521864","https://openalex.org/W2204970668","https://openalex.org/W2255638286","https://openalex.org/W2271567685","https://openalex.org/W2307512429","https://openalex.org/W2315113356","https://openalex.org/W2320569038","https://openalex.org/W2493819142","https://openalex.org/W2512189246","https://openalex.org/W2531696050","https://openalex.org/W2560665552","https://openalex.org/W2580290980","https://openalex.org/W2615509554","https://openalex.org/W2790664081","https://openalex.org/W2885794295","https://openalex.org/W2963673968","https://openalex.org/W2991792334","https://openalex.org/W3124215730","https://openalex.org/W4236135181","https://openalex.org/W4246793006","https://openalex.org/W4285719527","https://openalex.org/W4294215472","https://openalex.org/W6630821155","https://openalex.org/W6637329777","https://openalex.org/W6637902766","https://openalex.org/W6649564924","https://openalex.org/W6652820514","https://openalex.org/W6745040976","https://openalex.org/W6751019081"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730"],"abstract_inverted_index":{"Vital":[0],"organizations":[1],"have":[2,35],"faced":[3],"increasing":[4],"challenges":[5,164],"of":[6,24,42,98,138,149],"how":[7],"to":[8,19,39,107,111,142,170],"defend":[9],"against":[10,66,118],"insider":[11,25,54,67,119,150],"threats":[12,26],"that":[13,51,83,94,175],"may":[14],"cause":[15],"a":[16,36,91],"severe":[17],"damage":[18],"their":[20],"assets.":[21],"The":[22,136],"nature":[23],"is":[27,141],"more":[28,172],"challenging":[29],"than":[30],"external":[31],"threats,":[32],"as":[33],"insiders":[34],"privileged":[37],"access":[38],"sensitive":[40],"assets":[41],"an":[43],"organization.":[44],"In":[45],"fact,":[46],"there":[47],"are":[48,84,104,116,190],"several":[49],"studies":[50],"reviewed":[52],"the":[53,64,109,113,147,154,163],"threat":[55,68,120],"detection":[56,81,100,114,155],"approaches":[57,82,115],"from":[58],"taxonomical":[59],"and":[60,132,165,179],"theoretical":[61],"perspectives.":[62],"However,":[63],"protection":[65,125],"incidents":[69,121],"requires":[70],"empirical":[71,80,87,99],"defense":[72],"solutions.":[73],"Hence,":[74],"our":[75],"study":[76],"uniquely":[77],"focuses":[78],"on":[79],"validated":[85],"with":[86],"results.":[88],"We":[89],"propose":[90],"10-question":[92],"model":[93],"highlights":[95,162],"different":[96],"prospective":[97],"approaches.":[101],"Significant":[102],"factors":[103],"also":[105,161,191],"proposed":[106],"reveal":[108],"extent":[110],"which":[112],"effective":[117,173],"(e.g.,":[122],"feature":[123],"domains,":[124],"coverage,":[126],"classification":[127],"techniques,":[128],"simulated":[129],"scenarios,":[130],"performance":[131],"accuracy":[133],"metrics,":[134],"etc.).":[135],"objective":[137],"this":[139],"paper":[140],"enhance":[143],"researchers'":[144],"efforts":[145],"in":[146,157],"domain":[148],"attack":[151,182],"by":[152],"systemizing":[153],"techniques":[156],"comparable":[158],"manner.":[159],"It":[160],"gaps":[166],"for":[167,186],"further":[168],"research":[169,188],"institute":[171],"solutions":[174],"can":[176],"predict,":[177],"detect,":[178],"prevent":[180],"emerging":[181],"incidents.":[183],"Some":[184],"recommendations":[185],"future":[187],"directions":[189],"presented.":[192]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":10},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}