{"id":"https://openalex.org/W2302571425","doi":"https://doi.org/10.1109/jiot.2015.2459049","title":"BLITHE: Behavior Rule-Based Insider Threat Detection for Smart Grid","display_name":"BLITHE: Behavior Rule-Based Insider Threat Detection for Smart Grid","publication_year":2015,"publication_date":"2015-07-21","ids":{"openalex":"https://openalex.org/W2302571425","doi":"https://doi.org/10.1109/jiot.2015.2459049","mag":"2302571425"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2015.2459049","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2015.2459049","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5002156345","display_name":"Haiyong Bao","orcid":"https://orcid.org/0000-0002-6411-1338"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]},{"id":"https://openalex.org/I75059550","display_name":"Zhejiang Gongshang University","ror":"https://ror.org/0569mkk41","country_code":"CN","type":"education","lineage":["https://openalex.org/I75059550"]}],"countries":["CN","SG"],"is_corresponding":false,"raw_author_name":"Haiyong Bao","raw_affiliation_strings":["School of Computer Science and Information Engineering, Zhejiang Gongshang University, Hangzhou, China","School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Information Engineering, Zhejiang Gongshang University, Hangzhou, China","institution_ids":["https://openalex.org/I75059550"]},{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070447777","display_name":"Rongxing Lu","orcid":"https://orcid.org/0000-0001-5720-0941"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Rongxing Lu","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100423730","display_name":"Beibei Li","orcid":"https://orcid.org/0000-0002-0485-1975"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Beibei Li","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083185861","display_name":"Ruilong Deng","orcid":"https://orcid.org/0000-0002-8158-150X"},"institutions":[{"id":"https://openalex.org/I172675005","display_name":"Nanyang Technological University","ror":"https://ror.org/02e7b5302","country_code":"SG","type":"education","lineage":["https://openalex.org/I172675005"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Ruilong Deng","raw_affiliation_strings":["School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, Nanyang Technological University, Singapore","institution_ids":["https://openalex.org/I172675005"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":5.6771,"has_fulltext":false,"cited_by_count":57,"citation_normalized_percentile":{"value":0.9605613,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":99},"biblio":{"volume":"3","issue":"2","first_page":"190","last_page":"205"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":1.0,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":1.0,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8260518312454224},{"id":"https://openalex.org/keywords/smart-grid","display_name":"Smart grid","score":0.5976977944374084},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.539691686630249},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.49548065662384033},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4850863516330719},{"id":"https://openalex.org/keywords/grid","display_name":"Grid","score":0.48168787360191345},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4570479691028595},{"id":"https://openalex.org/keywords/grading","display_name":"Grading (engineering)","score":0.42886820435523987},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.39536532759666443},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33733123540878296},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.2828000783920288},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09345659613609314}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8260518312454224},{"id":"https://openalex.org/C10558101","wikidata":"https://www.wikidata.org/wiki/Q689855","display_name":"Smart grid","level":2,"score":0.5976977944374084},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.539691686630249},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49548065662384033},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4850863516330719},{"id":"https://openalex.org/C187691185","wikidata":"https://www.wikidata.org/wiki/Q2020720","display_name":"Grid","level":2,"score":0.48168787360191345},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4570479691028595},{"id":"https://openalex.org/C2777286243","wikidata":"https://www.wikidata.org/wiki/Q5591926","display_name":"Grading (engineering)","level":2,"score":0.42886820435523987},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.39536532759666443},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33733123540878296},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.2828000783920288},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09345659613609314},{"id":"https://openalex.org/C147176958","wikidata":"https://www.wikidata.org/wiki/Q77590","display_name":"Civil engineering","level":1,"score":0.0},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2015.2459049","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2015.2459049","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.550000011920929,"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320322927","display_name":"Zhejiang University","ror":"https://ror.org/00a2xv884"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W38537450","https://openalex.org/W192309743","https://openalex.org/W1495373176","https://openalex.org/W1569468020","https://openalex.org/W1571403844","https://openalex.org/W1927595310","https://openalex.org/W1974921713","https://openalex.org/W1980529734","https://openalex.org/W1982466846","https://openalex.org/W1987380082","https://openalex.org/W1988352342","https://openalex.org/W1996268772","https://openalex.org/W1996287559","https://openalex.org/W2013613544","https://openalex.org/W2017179140","https://openalex.org/W2019260697","https://openalex.org/W2021767337","https://openalex.org/W2028569720","https://openalex.org/W2034362794","https://openalex.org/W2038651258","https://openalex.org/W2055817410","https://openalex.org/W2056451850","https://openalex.org/W2060310801","https://openalex.org/W2067792375","https://openalex.org/W2074513827","https://openalex.org/W2083169843","https://openalex.org/W2095495737","https://openalex.org/W2112821826","https://openalex.org/W2115020891","https://openalex.org/W2116065364","https://openalex.org/W2118344793","https://openalex.org/W2130427718","https://openalex.org/W2134909299","https://openalex.org/W2136992183","https://openalex.org/W2145880203","https://openalex.org/W2153570961","https://openalex.org/W2153676086","https://openalex.org/W2154663898","https://openalex.org/W2160625801","https://openalex.org/W2162240407","https://openalex.org/W2163675471","https://openalex.org/W2322524800","https://openalex.org/W2500834297","https://openalex.org/W2534206551","https://openalex.org/W2537682469","https://openalex.org/W2559773779","https://openalex.org/W4214484041","https://openalex.org/W4240453364","https://openalex.org/W4299370734","https://openalex.org/W6640452826","https://openalex.org/W6677760773"],"related_works":["https://openalex.org/W4285132775","https://openalex.org/W3167347940","https://openalex.org/W4285172160","https://openalex.org/W2378211422","https://openalex.org/W2766781562","https://openalex.org/W2976051608","https://openalex.org/W308359497","https://openalex.org/W4285356110","https://openalex.org/W2984000590","https://openalex.org/W4321353415"],"abstract_inverted_index":{"In":[0,141],"this":[1],"paper,":[2],"we":[3,160],"propose":[4],"a":[5,58,80],"behavior":[6,44,51,67,77],"rule-based":[7],"methodology":[8],"for":[9,98,151,169],"insider":[10],"threat":[11],"(BLITHE)":[12],"detection":[13,129],"of":[14,26,29,53,93,100,109,112,167],"data":[15,146],"monitor":[16],"devices":[17],"in":[18,148,173],"smart":[19,175],"grid,":[20],"where":[21],"the":[22,34,50,73,76,91,94,106,165],"continuity":[23],"and":[24,39,82,121,131,138,156],"accuracy":[25,130],"operations":[27],"are":[28,46],"vital":[30],"importance.":[31],"Based":[32],"on":[33,65,72,144],"dc":[35],"power":[36,154],"flow":[37],"model":[38],"state":[40,166],"estimation":[41],"model,":[42],"three":[43],"rules":[45],"extracted":[47],"to":[48,134],"depict":[49],"norms":[52],"each":[54,113],"device,":[55],"such":[56],"that":[57,61,162],"device":[59],"(trustee)":[60],"is":[62,86,115],"being":[63],"monitored":[64],"its":[66],"can":[68],"be":[69],"easily":[70],"checked":[71],"deviation":[74],"from":[75,118],"specification.":[78],"Specifically,":[79],"rule-weight":[81],"compliance-distance-based":[83],"grading":[84,96],"strategy":[85,97],"designed,":[87],"which":[88,124],"greatly":[89],"improves":[90],"effectiveness":[92],"traditional":[95],"evaluation":[99],"trustees.":[101],"The":[102],"statistical":[103],"property,":[104],"i.e.,":[105],"mathematical":[107],"expectation":[108],"compliance":[110],"degree":[111],"trustee,":[114],"particularly":[116],"analyzed":[117],"both":[119],"theoretical":[120],"practical":[122],"perspectives,":[123],"achieves":[125],"satisfactory":[126],"tradeoff":[127],"between":[128],"false":[132],"alarms":[133],"detect":[135],"more":[136],"sophisticated":[137],"hidden":[139],"attackers.":[140],"addition,":[142],"based":[143],"real":[145],"run":[147],"POWER":[149],"WORLD":[150],"IEEE":[152],"benchmark":[153],"systems,":[155],"through":[157],"comparative":[158],"analysis,":[159],"demonstrate":[161],"BLITHE":[163],"outperforms":[164],"arts":[168],"detecting":[170],"abnormal":[171],"behaviors":[172],"pervasive":[174],"grid":[176],"applications.":[177]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":5},{"year":2024,"cited_by_count":6},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":4},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":5},{"year":2018,"cited_by_count":6},{"year":2017,"cited_by_count":7},{"year":2016,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}