{"id":"https://openalex.org/W2906797967","doi":"https://doi.org/10.1109/icsai.2018.8599422","title":"Improved Detection of User Malicious Behavior through Log Mining based on IHMM","display_name":"Improved Detection of User Malicious Behavior through Log Mining based on IHMM","publication_year":2018,"publication_date":"2018-11-01","ids":{"openalex":"https://openalex.org/W2906797967","doi":"https://doi.org/10.1109/icsai.2018.8599422","mag":"2906797967"},"language":"en","primary_location":{"id":"doi:10.1109/icsai.2018.8599422","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icsai.2018.8599422","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 5th International Conference on Systems and Informatics (ICSAI)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5100767202","display_name":"Chenchen Liu","orcid":"https://orcid.org/0000-0001-7749-0640"},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chenchen Liu","raw_affiliation_strings":["Hubei Key Laboratory of Broadband Wireless, Communication and Sensor Networks Wuhan University of Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Broadband Wireless, Communication and Sensor Networks Wuhan University of Technology, Wuhan, China","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101612650","display_name":"Yi Zhong","orcid":"https://orcid.org/0000-0002-6233-5362"},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yi Zhong","raw_affiliation_strings":["Hubei Key Laboratory of Broadband Wireless, Communication and Sensor Networks Wuhan University of Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Broadband Wireless, Communication and Sensor Networks Wuhan University of Technology, Wuhan, China","institution_ids":["https://openalex.org/I196699116"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103211112","display_name":"Yuanli Wang","orcid":"https://orcid.org/0000-0002-9685-1859"},"institutions":[{"id":"https://openalex.org/I196699116","display_name":"Wuhan University of Technology","ror":"https://ror.org/03fe7t173","country_code":"CN","type":"education","lineage":["https://openalex.org/I196699116"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuanli Wang","raw_affiliation_strings":["Hubei Key Laboratory of Broadband Wireless, Communication and Sensor Networks Wuhan University of Technology, Wuhan, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hubei Key Laboratory of Broadband Wireless, Communication and Sensor Networks Wuhan University of Technology, Wuhan, China","institution_ids":["https://openalex.org/I196699116"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I196699116"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":"43","issue":null,"first_page":"1193","last_page":"1198"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9986000061035156,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12205","display_name":"Time Series Analysis and Forecasting","score":0.9940000176429749,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7916904091835022},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.6176243424415588},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6164836287498474},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.5836787223815918},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.573315441608429},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.5728548765182495},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5279509425163269},{"id":"https://openalex.org/keywords/matching","display_name":"Matching (statistics)","score":0.4779067933559418},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.47470608353614807},{"id":"https://openalex.org/keywords/hidden-markov-model","display_name":"Hidden Markov model","score":0.4356471002101898},{"id":"https://openalex.org/keywords/pattern-matching","display_name":"Pattern matching","score":0.4228302240371704},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.36047500371932983},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.3098994493484497}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7916904091835022},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.6176243424415588},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6164836287498474},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.5836787223815918},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.573315441608429},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5728548765182495},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5279509425163269},{"id":"https://openalex.org/C165064840","wikidata":"https://www.wikidata.org/wiki/Q1321061","display_name":"Matching (statistics)","level":2,"score":0.4779067933559418},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.47470608353614807},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.4356471002101898},{"id":"https://openalex.org/C68859911","wikidata":"https://www.wikidata.org/wiki/Q1503724","display_name":"Pattern matching","level":2,"score":0.4228302240371704},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36047500371932983},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3098994493484497},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icsai.2018.8599422","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icsai.2018.8599422","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2018 5th International Conference on Systems and Informatics (ICSAI)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16","score":0.8100000023841858}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":4,"referenced_works":["https://openalex.org/W2355092801","https://openalex.org/W2364484022","https://openalex.org/W2884243230","https://openalex.org/W2888160480"],"related_works":["https://openalex.org/W2061466315","https://openalex.org/W2943461603","https://openalex.org/W2376886931","https://openalex.org/W2010561419","https://openalex.org/W2374845301","https://openalex.org/W2351448539","https://openalex.org/W2377397587","https://openalex.org/W1977863481","https://openalex.org/W2384741105","https://openalex.org/W1495178644"],"abstract_inverted_index":{"In":[0,23],"the":[1,4,94,102,116,127,144,147,158,163,184,211,219],"intelligence":[2],"community,":[3],"presence":[5],"of":[6,80,96,109,118,133,143,176,193,198],"malicious":[7,33,44],"insiders":[8],"poses":[9],"a":[10,28,42,174,214],"severe":[11],"threat":[12],"to":[13,37,58,63,140,151,189,204],"information":[14],"security":[15,40,67],"and":[16,85,115,165,208,218],"any":[17],"decision":[18],"relying":[19],"on":[20,50,87],"such":[21],"information.":[22],"this":[24],"paper,":[25],"we":[26,56,182],"propose":[27],"novel":[29],"methodology":[30],"that":[31,142,157],"detects":[32],"people":[34],"who":[35],"attempt":[36],"destroy":[38],"internal":[39,107],"through":[41],"certain":[43,135],"operation.":[45],"This":[46],"detection":[47,70],"method":[48],"relies":[49],"each":[51,131],"user's":[52],"working":[53],"style,":[54],"which":[55,90,169],"assume":[57],"be":[59,152,171],"consistent":[60],"from":[61],"task":[62],"task.":[64],"No":[65],"matter":[66],"audit,":[68],"intrusion":[69],"or":[71],"other":[72,145],"abnormal":[73,206],"behavior":[74,160],"mining,":[75],"it":[76],"is":[77,137,149],"static.":[78],"Most":[79],"them":[81,119],"use":[82,183],"pattern":[83],"matching":[84],"rely":[86],"average":[88],"ratios,":[89],"not":[91],"only":[92],"neglect":[93],"characteristics":[95],"network":[97,111,159,194],"but":[98],"also":[99],"cannot":[100],"show":[101],"entire":[103],"process":[104],"dynamically.":[105],"The":[106],"rules":[108],"many":[110],"operations":[112],"are":[113,124,202],"cryptic,":[114],"frequency":[117],"in":[120,167],"different":[121],"time":[122],"periods":[123],"different.":[125],"If":[126],"frequency,":[128],"measured":[129],"by":[130],"index":[132],"one":[134],"period,":[136],"directly":[138],"used":[139,203],"measure":[141],"periods,":[146],"result":[148],"likely":[150],"inaccurate.":[153],"Many":[154],"documents":[155],"believed":[156],"data":[161,179,201],"has":[162,213,223],"continuity":[164],"regularity":[166],"time,":[168],"can":[170],"described":[172],"as":[173],"set":[175],"time-varying":[177],"discrete":[178],"sequences.":[180],"Therefore,":[181],"improved":[185],"Hidden":[186],"Markov":[187],"Model(IHMM)":[188],"construct":[190],"dynamic":[191],"transformation":[192],"behavior.":[195],"After":[196],"sets":[197],"off-line":[199],"sample":[200],"identify":[205],"behaviors":[207],"normal":[209],"behaviors,":[210],"algorithm":[212],"higher":[215],"correct":[216],"rate,":[217],"overall":[220],"audit":[221],"system":[222],"better":[224],"performance.":[225]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1},{"year":2022,"cited_by_count":1},{"year":2021,"cited_by_count":1}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}