{"id":"https://openalex.org/W4312917774","doi":"https://doi.org/10.1109/ijcnn55064.2022.9892163","title":"SeqA-ITD: User Behavior Sequence Augmentation for Insider Threat Detection at Multiple Time Granularities","display_name":"SeqA-ITD: User Behavior Sequence Augmentation for Insider Threat Detection at Multiple Time Granularities","publication_year":2022,"publication_date":"2022-07-18","ids":{"openalex":"https://openalex.org/W4312917774","doi":"https://doi.org/10.1109/ijcnn55064.2022.9892163"},"language":"en","primary_location":{"id":"doi:10.1109/ijcnn55064.2022.9892163","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn55064.2022.9892163","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"2022 International Joint Conference on Neural Networks (IJCNN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5017410659","display_name":"Fangtao Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Fangtao Zhang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101243381","display_name":"Xiu Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I4210165038","display_name":"University of Chinese Academy of Sciences","ror":"https://ror.org/05qbk4x57","country_code":"CN","type":"education","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210165038"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiu Ma","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China","School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"School of Cyber Security, University of Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210165038"]},{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101637573","display_name":"Weiqing Huang","orcid":"https://orcid.org/0000-0002-9155-4177"},"institutions":[{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]},{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"funder","lineage":["https://openalex.org/I19820366"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weiqing Huang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China","Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]},{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5017410659"],"corresponding_institution_ids":["https://openalex.org/I19820366","https://openalex.org/I4210156404","https://openalex.org/I4210165038"],"apc_list":null,"apc_paid":null,"fwci":1.7295,"has_fulltext":false,"cited_by_count":8,"citation_normalized_percentile":{"value":0.85400445,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.998199999332428,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.9476187825202942},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.774910569190979},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6809679269790649},{"id":"https://openalex.org/keywords/audit","display_name":"Audit","score":0.5399631857872009},{"id":"https://openalex.org/keywords/sequence","display_name":"Sequence (biology)","score":0.5290766358375549},{"id":"https://openalex.org/keywords/sequential-pattern-mining","display_name":"Sequential Pattern Mining","score":0.47607606649398804},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.380361944437027},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.34016406536102295},{"id":"https://openalex.org/keywords/accounting","display_name":"Accounting","score":0.07481971383094788}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.9476187825202942},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.774910569190979},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6809679269790649},{"id":"https://openalex.org/C199521495","wikidata":"https://www.wikidata.org/wiki/Q181487","display_name":"Audit","level":2,"score":0.5399631857872009},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.5290766358375549},{"id":"https://openalex.org/C149490388","wikidata":"https://www.wikidata.org/wiki/Q1718507","display_name":"Sequential Pattern Mining","level":2,"score":0.47607606649398804},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.380361944437027},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34016406536102295},{"id":"https://openalex.org/C121955636","wikidata":"https://www.wikidata.org/wiki/Q4116214","display_name":"Accounting","level":1,"score":0.07481971383094788},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.0},{"id":"https://openalex.org/C54355233","wikidata":"https://www.wikidata.org/wiki/Q7162","display_name":"Genetics","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ijcnn55064.2022.9892163","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ijcnn55064.2022.9892163","pdf_url":null,"source":{"id":"https://openalex.org/S4363607707","display_name":"2022 International Joint Conference on Neural Networks (IJCNN)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2022 International Joint Conference on Neural Networks (IJCNN)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7400000095367432}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":35,"referenced_works":["https://openalex.org/W2104933073","https://openalex.org/W2148143831","https://openalex.org/W2538737552","https://openalex.org/W2581637843","https://openalex.org/W2593383075","https://openalex.org/W2766651896","https://openalex.org/W2808320263","https://openalex.org/W2808709910","https://openalex.org/W2884984219","https://openalex.org/W2963464069","https://openalex.org/W2963673968","https://openalex.org/W2964268978","https://openalex.org/W2964304846","https://openalex.org/W2974724911","https://openalex.org/W2985983260","https://openalex.org/W3008932301","https://openalex.org/W3011124515","https://openalex.org/W3011330084","https://openalex.org/W3043266264","https://openalex.org/W3044818515","https://openalex.org/W3093545390","https://openalex.org/W3114329625","https://openalex.org/W3130625521","https://openalex.org/W3133055724","https://openalex.org/W3190213853","https://openalex.org/W4200292123","https://openalex.org/W4320013936","https://openalex.org/W6675634716","https://openalex.org/W6734351891","https://openalex.org/W6745040976","https://openalex.org/W6746340649","https://openalex.org/W6752999876","https://openalex.org/W6767770064","https://openalex.org/W6781122717","https://openalex.org/W6791222398"],"related_works":["https://openalex.org/W2595526431","https://openalex.org/W2373673987","https://openalex.org/W2884289887","https://openalex.org/W2360627962","https://openalex.org/W2353468268","https://openalex.org/W4312917774","https://openalex.org/W3117449682","https://openalex.org/W2971385873","https://openalex.org/W4234503049","https://openalex.org/W171814657"],"abstract_inverted_index":{"Insider":[0,71],"threat":[1,150],"problems":[2],"have":[3],"occurred":[4],"frequently":[5],"and":[6,32,61,84,91,110,152],"caused":[7],"significant":[8],"damage":[9],"to":[10,26,66,94,118],"organizations.":[11],"Many":[12],"existing":[13],"techniques":[14],"represent":[15],"the":[16,28,68,108,124,135],"user":[17,41,58,81,88],"activities":[18],"recorded":[19],"in":[20,147],"audit":[21],"data":[22,25],"as":[23],"sequential":[24,92],"capture":[27],"differences":[29],"between":[30],"benign":[31],"malicious":[33,52,87],"users'":[34],"behavior.":[35],"However,":[36],"multi-granular":[37,100],"temporal":[38,78,90,97,112,116],"information":[39,79],"of":[40,126,145],"activity":[42],"has":[43],"not":[44],"been":[45],"explored":[46],"adequately,":[47],"especially":[48],"for":[49],"these":[50],"rare":[51],"samples.":[53],"This":[54],"paper":[55],"focuses":[56],"on":[57,70,134],"behavior":[59,82],"Sequences":[60],"proposes":[62],"an":[63,143],"Augmentation":[64],"framework":[65],"boost":[67],"performance":[69],"Threat":[72],"Detection":[73],"(SeqA-ITD).":[74],"SeqA-ITD":[75],"first":[76],"embeds":[77],"into":[80],"sequences":[83,113],"then":[85],"captures":[86],"behavior's":[89],"patterns":[93],"generate":[95],"discrete":[96],"sequences.":[98],"A":[99],"enhanced":[101],"Long":[102],"Short-Term":[103],"Memory":[104],"(LSTM)":[105],"model":[106,141],"learns":[107],"original":[109],"generated":[111],"with":[114],"distinct":[115],"granularities":[117],"detect":[119],"abnormal":[120],"ones.":[121],"To":[122],"verify":[123],"effectiveness":[125],"our":[127],"proposed":[128,140],"method,":[129],"we":[130],"conduct":[131],"comparison":[132],"experiments":[133],"Cert":[136],"4.2":[137],"dataset.":[138],"Our":[139],"achieves":[142],"F1-score":[144],"0.9585":[146],"day-level":[148],"insider":[149],"detection":[151],"outperforms":[153],"baselines.":[154]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":1}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}