{"id":"https://openalex.org/W3000484093","doi":"https://doi.org/10.1109/tbdata.2020.2964169","title":"Visual Analytics of Anomalous User Behaviors: A Survey","display_name":"Visual Analytics of Anomalous User Behaviors: A Survey","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3000484093","doi":"https://doi.org/10.1109/tbdata.2020.2964169","mag":"3000484093"},"language":"en","primary_location":{"id":"doi:10.1109/tbdata.2020.2964169","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tbdata.2020.2964169","pdf_url":"https://ieeexplore.ieee.org/ielx7/6687317/9733003/08950124.pdf","source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://ieeexplore.ieee.org/ielx7/6687317/9733003/08950124.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101908670","display_name":"Yang Shi","orcid":"https://orcid.org/0000-0002-1065-4038"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yang Shi","raw_affiliation_strings":["Tongji University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009512812","display_name":"Yuyin Liu","orcid":"https://orcid.org/0000-0002-4995-832X"},"institutions":[{"id":"https://openalex.org/I177725633","display_name":"Chinese University of Hong Kong","ror":"https://ror.org/00t33hh48","country_code":"CN","type":"education","lineage":["https://openalex.org/I177725633"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuyin Liu","raw_affiliation_strings":["Chinese University of Hong Kong, China"],"affiliations":[{"raw_affiliation_string":"Chinese University of Hong Kong, China","institution_ids":["https://openalex.org/I177725633"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068043486","display_name":"Hanghang Tong","orcid":"https://orcid.org/0000-0003-4405-3887"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hanghang Tong","raw_affiliation_strings":["University of Illinois at Urbana-Champaign, Champaign, IL, USA"],"affiliations":[{"raw_affiliation_string":"University of Illinois at Urbana-Champaign, Champaign, IL, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073158087","display_name":"Jingrui He","orcid":"https://orcid.org/0000-0002-6429-6272"},"institutions":[{"id":"https://openalex.org/I157725225","display_name":"University of Illinois Urbana-Champaign","ror":"https://ror.org/047426m28","country_code":"US","type":"education","lineage":["https://openalex.org/I157725225"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jingrui He","raw_affiliation_strings":["University of Illinois at Urbana-Champaign, Champaign, IL, USA"],"affiliations":[{"raw_affiliation_string":"University of Illinois at Urbana-Champaign, Champaign, IL, USA","institution_ids":["https://openalex.org/I157725225"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069696335","display_name":"Gang Yan","orcid":"https://orcid.org/0000-0002-7494-9353"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gang Yan","raw_affiliation_strings":["Tongji University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5000474356","display_name":"Nan Cao","orcid":"https://orcid.org/0000-0003-1316-7515"},"institutions":[{"id":"https://openalex.org/I116953780","display_name":"Tongji University","ror":"https://ror.org/03rc6as71","country_code":"CN","type":"education","lineage":["https://openalex.org/I116953780"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nan Cao","raw_affiliation_strings":["Tongji University, Shanghai, China"],"affiliations":[{"raw_affiliation_string":"Tongji University, Shanghai, China","institution_ids":["https://openalex.org/I116953780"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5101908670"],"corresponding_institution_ids":["https://openalex.org/I116953780"],"apc_list":null,"apc_paid":null,"fwci":1.9629,"has_fulltext":true,"cited_by_count":29,"citation_normalized_percentile":{"value":0.88352508,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":99},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11819","display_name":"Data-Driven Disease Surveillance","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/2713","display_name":"Epidemiology"},"field":{"id":"https://openalex.org/fields/27","display_name":"Medicine"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/visual-analytics","display_name":"Visual analytics","score":0.843532919883728},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7935737371444702},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.6945596933364868},{"id":"https://openalex.org/keywords/visualization","display_name":"Visualization","score":0.6000263094902039},{"id":"https://openalex.org/keywords/database-transaction","display_name":"Database transaction","score":0.5507439970970154},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.528253436088562},{"id":"https://openalex.org/keywords/information-visualization","display_name":"Information visualization","score":0.47894102334976196},{"id":"https://openalex.org/keywords/data-visualization","display_name":"Data visualization","score":0.4521489441394806},{"id":"https://openalex.org/keywords/work","display_name":"Work (physics)","score":0.4180116355419159},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.38690799474716187},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.32161375880241394},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.164025217294693},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.10123312473297119}],"concepts":[{"id":"https://openalex.org/C59732488","wikidata":"https://www.wikidata.org/wiki/Q2528440","display_name":"Visual analytics","level":3,"score":0.843532919883728},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7935737371444702},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.6945596933364868},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.6000263094902039},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.5507439970970154},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.528253436088562},{"id":"https://openalex.org/C185578843","wikidata":"https://www.wikidata.org/wiki/Q10609775","display_name":"Information visualization","level":3,"score":0.47894102334976196},{"id":"https://openalex.org/C172367668","wikidata":"https://www.wikidata.org/wiki/Q6504956","display_name":"Data visualization","level":3,"score":0.4521489441394806},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.4180116355419159},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.38690799474716187},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.32161375880241394},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.164025217294693},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.10123312473297119},{"id":"https://openalex.org/C78519656","wikidata":"https://www.wikidata.org/wiki/Q101333","display_name":"Mechanical engineering","level":1,"score":0.0},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tbdata.2020.2964169","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tbdata.2020.2964169","pdf_url":"https://ieeexplore.ieee.org/ielx7/6687317/9733003/08950124.pdf","source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tbdata.2020.2964169","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tbdata.2020.2964169","pdf_url":"https://ieeexplore.ieee.org/ielx7/6687317/9733003/08950124.pdf","source":{"id":"https://openalex.org/S2491400915","display_name":"IEEE Transactions on Big Data","issn_l":"2332-7790","issn":["2332-7790","2372-2096"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Big Data","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5899999737739563,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G120147344","display_name":null,"funder_award_id":"61602306","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G1490481123","display_name":null,"funder_award_id":"1939725","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2022463623","display_name":null,"funder_award_id":"1813464","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G2376276132","display_name":null,"funder_award_id":"China","funder_id":"https://openalex.org/F4320335787","funder_display_name":"Fundamental Research Funds for the Central Universities"},{"id":"https://openalex.org/G3972479025","display_name":null,"funder_award_id":"1715385","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"},{"id":"https://openalex.org/G5475301337","display_name":null,"funder_award_id":"18022","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G5803616887","display_name":null,"funder_award_id":"61802283","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7286171126","display_name":null,"funder_award_id":"1947203","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"},{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335787","display_name":"Fundamental Research Funds for the Central Universities","ror":null}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3000484093.pdf","grobid_xml":"https://content.openalex.org/works/W3000484093.grobid-xml"},"referenced_works_count":119,"referenced_works":["https://openalex.org/W1559591149","https://openalex.org/W1897729025","https://openalex.org/W1946632051","https://openalex.org/W1948184167","https://openalex.org/W1965769239","https://openalex.org/W1969745267","https://openalex.org/W1973803644","https://openalex.org/W1979559890","https://openalex.org/W1983576710","https://openalex.org/W1986257701","https://openalex.org/W1990312804","https://openalex.org/W1991092611","https://openalex.org/W1991480559","https://openalex.org/W1999058284","https://openalex.org/W2007087405","https://openalex.org/W2007237397","https://openalex.org/W2009662901","https://openalex.org/W2009664208","https://openalex.org/W2010273307","https://openalex.org/W2017232808","https://openalex.org/W2021001446","https://openalex.org/W2021395685","https://openalex.org/W2021648931","https://openalex.org/W2028770253","https://openalex.org/W2032516371","https://openalex.org/W2032624390","https://openalex.org/W2037598541","https://openalex.org/W2044459325","https://openalex.org/W2045414949","https://openalex.org/W2048018384","https://openalex.org/W2049231004","https://openalex.org/W2056638635","https://openalex.org/W2058062952","https://openalex.org/W2068963126","https://openalex.org/W2073156145","https://openalex.org/W2073677159","https://openalex.org/W2074629355","https://openalex.org/W2075639792","https://openalex.org/W2084939613","https://openalex.org/W2086261171","https://openalex.org/W2089554624","https://openalex.org/W2093726264","https://openalex.org/W2094909208","https://openalex.org/W2095627337","https://openalex.org/W2096905990","https://openalex.org/W2097257601","https://openalex.org/W2103611099","https://openalex.org/W2104592282","https://openalex.org/W2105942355","https://openalex.org/W2107771570","https://openalex.org/W2109067458","https://openalex.org/W2109552221","https://openalex.org/W2111122424","https://openalex.org/W2111726016","https://openalex.org/W2121096237","https://openalex.org/W2121662355","https://openalex.org/W2121869993","https://openalex.org/W2122646361","https://openalex.org/W2125532767","https://openalex.org/W2128721751","https://openalex.org/W2132068130","https://openalex.org/W2134511994","https://openalex.org/W2134687635","https://openalex.org/W2138647480","https://openalex.org/W2141763166","https://openalex.org/W2142865875","https://openalex.org/W2144006900","https://openalex.org/W2144615061","https://openalex.org/W2145436368","https://openalex.org/W2146486625","https://openalex.org/W2149194102","https://openalex.org/W2150941206","https://openalex.org/W2152202842","https://openalex.org/W2152245018","https://openalex.org/W2153463096","https://openalex.org/W2155032534","https://openalex.org/W2157530472","https://openalex.org/W2160642151","https://openalex.org/W2161133721","https://openalex.org/W2166069449","https://openalex.org/W2167538453","https://openalex.org/W2167978925","https://openalex.org/W2172017522","https://openalex.org/W2224609888","https://openalex.org/W2225771498","https://openalex.org/W2286850974","https://openalex.org/W2294608516","https://openalex.org/W2401331596","https://openalex.org/W2417648990","https://openalex.org/W2462625002","https://openalex.org/W2510476599","https://openalex.org/W2523776954","https://openalex.org/W2586788875","https://openalex.org/W2592288498","https://openalex.org/W2610773131","https://openalex.org/W2625126745","https://openalex.org/W2751378044","https://openalex.org/W2752209909","https://openalex.org/W2753693229","https://openalex.org/W2794862351","https://openalex.org/W2804365752","https://openalex.org/W2805981484","https://openalex.org/W2806878878","https://openalex.org/W2807467296","https://openalex.org/W2888139811","https://openalex.org/W2888693151","https://openalex.org/W2894279555","https://openalex.org/W2910068345","https://openalex.org/W2910225264","https://openalex.org/W3101985387","https://openalex.org/W3105682467","https://openalex.org/W4244148219","https://openalex.org/W4247957653","https://openalex.org/W4254245176","https://openalex.org/W4255459720","https://openalex.org/W4256522398","https://openalex.org/W6636464392","https://openalex.org/W6735187304","https://openalex.org/W6758101687"],"related_works":["https://openalex.org/W4210310791","https://openalex.org/W2362367986","https://openalex.org/W2062940763","https://openalex.org/W2151177154","https://openalex.org/W2937343495","https://openalex.org/W2080934634","https://openalex.org/W2112083262","https://openalex.org/W2013467770","https://openalex.org/W2138584026","https://openalex.org/W2156440763"],"abstract_inverted_index":{"With":[0],"the":[1,7,78,128],"pervasive":[2],"use":[3],"of":[4,10,25,54,86,124,138],"information":[5],"technologies,":[6],"increasing":[8],"availability":[9],"data":[11,87],"provides":[12],"new":[13],"opportunities":[14],"for":[15,104,142],"understanding":[16],"user":[17,22,56,140],"behaviors.":[18],"Unearthing":[19],"anomalies":[20],"in":[21,51,81,84,116],"behavior":[23],"is":[24],"particular":[26],"importance":[27],"as":[28,35],"it":[29],"helps":[30],"signal":[31],"harmful":[32],"incidents":[33],"such":[34],"network":[36,70],"intrusions,":[37],"terrorist":[38],"activities,":[39],"and":[40,58,72,91,106,131],"financial":[41,73],"frauds.":[42],"In":[43],"this":[44],"article,":[45],"we":[46,121],"survey":[47,99],"state-of-the-art":[48],"research":[49,79,114],"work":[50,80],"visual":[52,136],"analytics":[53,137],"anomalous":[55],"behaviors":[57,141],"classify":[59],"them":[60],"into":[61],"four":[62],"application":[63,118],"domains,":[64],"which":[65],"are":[66],"social":[67],"interaction,":[68],"travel,":[69],"communication,":[71],"transaction.":[74],"We":[75,95],"further":[76],"examine":[77],"each":[82],"category":[83],"terms":[85],"types,":[88],"visualization":[89],"techniques,":[90],"interactive":[92],"analysis":[93],"methods.":[94],"hope":[96],"that":[97],"our":[98],"can":[100],"provide":[101],"systematic":[102],"guidelines":[103],"researchers":[105],"practitioners":[107],"to":[108,112],"find":[109],"effective":[110],"solutions":[111],"their":[113],"problems":[115],"specific":[117],"domains.":[119],"Finally,":[120],"discuss":[122],"trends":[123],"academic":[125],"interest":[126],"over":[127],"past":[129],"decades":[130],"suggest":[132],"potential":[133],"directions":[134],"across":[135],"these":[139],"future":[143],"research.":[144]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":3},{"year":2023,"cited_by_count":5},{"year":2022,"cited_by_count":3},{"year":2021,"cited_by_count":10},{"year":2020,"cited_by_count":2},{"year":2019,"cited_by_count":1},{"year":2012,"cited_by_count":1}],"updated_date":"2026-04-16T08:26:57.006410","created_date":"2025-10-10T00:00:00"}