{"id":"https://openalex.org/W4411205334","doi":"https://doi.org/10.1109/isdfs65363.2025.11012066","title":"Scalable and Ethical Insider Threat Detection through Data Synthesis and Analysis by LLMs","display_name":"Scalable and Ethical Insider Threat Detection through Data Synthesis and Analysis by LLMs","publication_year":2025,"publication_date":"2025-04-24","ids":{"openalex":"https://openalex.org/W4411205334","doi":"https://doi.org/10.1109/isdfs65363.2025.11012066"},"language":"en","primary_location":{"id":"doi:10.1109/isdfs65363.2025.11012066","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs65363.2025.11012066","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 13th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5115560582","display_name":"Haywood Gelman","orcid":null},"institutions":[{"id":"https://openalex.org/I125467818","display_name":"Dakota State University","ror":"https://ror.org/016yv6y68","country_code":"US","type":"education","lineage":["https://openalex.org/I125467818"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Haywood Gelman","raw_affiliation_strings":["The Beacom College of Computer and Cyber Sciences, Dakota State University,Madison,SD,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Beacom College of Computer and Cyber Sciences, Dakota State University,Madison,SD,USA","institution_ids":["https://openalex.org/I125467818"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035192241","display_name":"John D. Hastings","orcid":null},"institutions":[{"id":"https://openalex.org/I125467818","display_name":"Dakota State University","ror":"https://ror.org/016yv6y68","country_code":"US","type":"education","lineage":["https://openalex.org/I125467818"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John D. Hastings","raw_affiliation_strings":["The Beacom College of Computer and Cyber Sciences, Dakota State University,Madison,SD,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Beacom College of Computer and Cyber Sciences, Dakota State University,Madison,SD,USA","institution_ids":["https://openalex.org/I125467818"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I125467818"],"apc_list":null,"apc_paid":null,"fwci":8.9413,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.97449686,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":95,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9714000225067139,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9714000225067139,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9024999737739563,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.8746198415756226},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6374456882476807},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5755372047424316},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.5352998375892639},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47469156980514526},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.27436885237693787},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.1082620918750763},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.07039424777030945}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.8746198415756226},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6374456882476807},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5755372047424316},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.5352998375892639},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47469156980514526},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.27436885237693787},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.1082620918750763},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.07039424777030945}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isdfs65363.2025.11012066","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs65363.2025.11012066","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 13th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W26305611","https://openalex.org/W4399147188"],"abstract_inverted_index":{"Insider":[0],"threats":[1],"wield":[2],"an":[3],"outsized":[4],"influence":[5],"on":[6,122],"orga-nizations,":[7],"disproportionate":[8],"to":[9,16,22,37,54,161,180],"their":[10],"small":[11],"numbers.":[12],"This":[13,44],"is":[14,92,120],"due":[15],"the":[17,47,154,157],"internal":[18],"access":[19],"insiders":[20],"have":[21],"systems,":[23],"information,":[24],"and":[25,56,143,165,176],"infrastructure.":[26],"Signals":[27],"for":[28,49,130,169],"such":[29],"risks":[30],"may":[31],"be":[32],"found":[33,139],"in":[34,107,132],"anonymous":[35],"submissions":[36],"public":[38],"web-based":[39],"job":[40,62,80],"search":[41],"site":[42,63],"reviews.":[43,64],"research":[45,71],"studies":[46],"potential":[48],"large":[50],"language":[51],"models":[52],"(LLMs)":[53],"analyze":[55],"detect":[57],"insider":[58,162,170],"threat":[59,116,163],"sentiment":[60,87,171],"within":[61],"Addressing":[65],"ethical":[66,175],"data":[67,74,124,148,181],"collection":[68],"concerns,":[69],"this":[70],"utilizes":[72],"synthetic":[73,126,147],"generation":[75],"using":[76],"LLMs":[77,91,101,160],"alongside":[78],"existing":[79],"review":[81],"datasets.":[82],"A":[83],"comparative":[84],"analysis":[85,138],"of":[86,115,159],"scores":[88],"generated":[89],"by":[90,173],"benchmarked":[93],"against":[94],"expert":[95],"human":[96,105],"scoring.":[97],"Findings":[98],"reveal":[99],"that":[100],"demonstrate":[102,156],"alignment":[103],"with":[104,146],"evaluations":[106],"most":[108],"cases,":[109],"thus":[110],"effectively":[111],"identifying":[112],"nuanced":[113],"indicators":[114],"sentiment.":[117],"The":[118],"performance":[119],"lower":[121,151],"human-generated":[123,142],"than":[125],"data,":[127],"suggesting":[128],"areas":[129],"improvement":[131],"evaluating":[133],"real-world":[134],"data.":[135],"Text":[136],"diversity":[137],"differences":[140],"between":[141],"LLM-generated":[144],"datasets,":[145],"exhibiting":[149],"somewhat":[150],"diversity.":[152],"Overall,":[153],"results":[155],"applicability":[158],"detection,":[164],"a":[166],"scalable":[167],"solution":[168],"testing":[172],"overcoming":[174],"logistical":[177],"barriers":[178],"tied":[179],"acquisition.":[182]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-06-26T08:34:08.712188","created_date":"2025-10-10T00:00:00"}