{"id":"https://openalex.org/W2964493783","doi":"https://doi.org/10.1109/isba.2019.8778466","title":"User Behavior Profiling using Ensemble Approach for Insider Threat Detection","display_name":"User Behavior Profiling using Ensemble Approach for Insider Threat Detection","publication_year":2019,"publication_date":"2019-01-01","ids":{"openalex":"https://openalex.org/W2964493783","doi":"https://doi.org/10.1109/isba.2019.8778466","mag":"2964493783"},"language":"en","primary_location":{"id":"doi:10.1109/isba.2019.8778466","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isba.2019.8778466","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE 5th International Conference on Identity, Security, and Behavior Analysis (ISBA)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101655473","display_name":"Malvika Singh","orcid":"https://orcid.org/0000-0003-4313-4239"},"institutions":[{"id":"https://openalex.org/I122964287","display_name":"National Institute of Technology Tiruchirappalli","ror":"https://ror.org/047x65e68","country_code":"IN","type":"education","lineage":["https://openalex.org/I122964287"]},{"id":"https://openalex.org/I150312865","display_name":"Institute for Development and Research in Banking Technology","ror":"https://ror.org/00ta0g865","country_code":"IN","type":"government","lineage":["https://openalex.org/I150312865"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Malvika Singh","raw_affiliation_strings":["IDRBT and NIT-Trichy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IDRBT and NIT-Trichy","institution_ids":["https://openalex.org/I150312865","https://openalex.org/I122964287"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112070114","display_name":"B. M. Mehtre","orcid":null},"institutions":[{"id":"https://openalex.org/I150312865","display_name":"Institute for Development and Research in Banking Technology","ror":"https://ror.org/00ta0g865","country_code":"IN","type":"government","lineage":["https://openalex.org/I150312865"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"B.M. Mehtre","raw_affiliation_strings":["IDRBT-Hyderabad"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IDRBT-Hyderabad","institution_ids":["https://openalex.org/I150312865"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5112490529","display_name":"S. Sangeetha","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"S. Sangeetha","raw_affiliation_strings":["NIT-Trichy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"NIT-Trichy","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7893,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.91307037,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"8"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.9240210056304932},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8213082551956177},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.7527477741241455},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7207112312316895},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6051643490791321},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4975633919239044},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.49030497670173645},{"id":"https://openalex.org/keywords/outlier","display_name":"Outlier","score":0.473734974861145},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.40385979413986206},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.32526788115501404}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.9240210056304932},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8213082551956177},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.7527477741241455},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7207112312316895},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6051643490791321},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4975633919239044},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49030497670173645},{"id":"https://openalex.org/C79337645","wikidata":"https://www.wikidata.org/wiki/Q779824","display_name":"Outlier","level":2,"score":0.473734974861145},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40385979413986206},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.32526788115501404},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isba.2019.8778466","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isba.2019.8778466","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2019 IEEE 5th International Conference on Identity, Security, and Behavior Analysis (ISBA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.800000011920929,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W42722137","https://openalex.org/W61807067","https://openalex.org/W63951635","https://openalex.org/W1591801644","https://openalex.org/W1804908000","https://openalex.org/W2064675550","https://openalex.org/W2122646361","https://openalex.org/W2131970275","https://openalex.org/W2142638723","https://openalex.org/W2146196597","https://openalex.org/W2166017159","https://openalex.org/W2402144811","https://openalex.org/W2535642622","https://openalex.org/W2538737552","https://openalex.org/W2560162835","https://openalex.org/W2585284559","https://openalex.org/W2761599262","https://openalex.org/W2787422226","https://openalex.org/W2953384591","https://openalex.org/W2963673968","https://openalex.org/W4298388032","https://openalex.org/W6602518401","https://openalex.org/W6602615279","https://openalex.org/W6635446068","https://openalex.org/W6638359738","https://openalex.org/W6681545543","https://openalex.org/W6684593723","https://openalex.org/W6713134421","https://openalex.org/W6733151841","https://openalex.org/W6745040976","https://openalex.org/W6748371706"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"The":[0,133],"greatest":[1],"threat":[2],"towards":[3],"securing":[4],"the":[5,13,17,21,24,28,50,107,111,142,146],"organization":[6,22,29],"and":[7,39,69,95,153],"its":[8],"assets":[9],"are":[10],"no":[11],"longer":[12],"attackers":[14],"attacking":[15],"beyond":[16],"network":[18,47],"walls":[19],"of":[20,148,155],"but":[23],"insiders":[25],"present":[26,80],"within":[27,44],"with":[30,136,162],"malicious":[31,42],"intent.":[32],"Existing":[33],"approaches":[34],"helps":[35],"to":[36,67,75,105],"monitor,":[37],"detect":[38,76,106,141],"prevent":[40],"any":[41],"activities":[43],"an":[45,81],"organization's":[46],"while":[48],"ignoring":[49],"human":[51],"behavior":[52,64,72,112,118],"impact":[53],"on":[54,62,115,150,157],"security.":[55],"In":[56],"this":[57],"paper":[58],"we":[59],"have":[60],"focused":[61],"user":[63,71],"profiling":[65],"approach":[66,86],"monitor":[68],"analyze":[70],"action":[73],"sequence":[74],"insider":[77,143,167],"threats.":[78,168],"We":[79,120],"ensemble":[82],"hybrid":[83],"machine":[84],"learning":[85],"using":[87,123],"Multi":[88],"State":[89],"Long":[90],"Short":[91],"Term":[92],"Memory":[93],"(MSLSTM)":[94],"Convolution":[96],"Neural":[97],"Networks":[98],"(CNN)":[99],"based":[100,114],"time":[101],"series":[102],"anomaly":[103],"detection":[104],"additive":[108],"outliers":[109],"in":[110],"patterns":[113],"their":[116],"spatial-temporal":[117],"features.":[119],"find":[121],"that":[122],"Multistate":[124,137],"LSTM":[125,138],"is":[126],"better":[127],"than":[128],"basic":[129],"single":[130],"state":[131],"LSTM.":[132],"proposed":[134],"method":[135],"can":[139],"successfully":[140],"threats":[144],"providing":[145],"AUC":[147,154],"0.9042":[149],"train":[151],"data":[152,159],"0.9047":[156],"test":[158],"when":[160],"trained":[161],"publically":[163],"available":[164],"dataset":[165],"for":[166]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":7},{"year":2023,"cited_by_count":7},{"year":2022,"cited_by_count":7},{"year":2021,"cited_by_count":3},{"year":2020,"cited_by_count":4},{"year":2019,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}