{"id":"https://openalex.org/W2584505300","doi":"https://doi.org/10.1109/tdsc.2017.2768533","title":"A System Architecture for the Detection of Insider Attacks in Big Data Systems","display_name":"A System Architecture for the Detection of Insider Attacks in Big Data Systems","publication_year":2017,"publication_date":"2017-11-01","ids":{"openalex":"https://openalex.org/W2584505300","doi":"https://doi.org/10.1109/tdsc.2017.2768533","mag":"2584505300"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2017.2768533","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2017.2768533","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5088469412","display_name":"Santosh Aditham","orcid":"https://orcid.org/0000-0003-1310-1655"},"institutions":[{"id":"https://openalex.org/I2613432","display_name":"University of South Florida","ror":"https://ror.org/032db5x82","country_code":"US","type":"education","lineage":["https://openalex.org/I2613432"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Santosh Aditham","raw_affiliation_strings":["Department of Computer Science and Engineering, University of South Florida, Tampa, FL"],"raw_orcid":"https://orcid.org/0000-0003-1310-1655","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of South Florida, Tampa, FL","institution_ids":["https://openalex.org/I2613432"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027665366","display_name":"N. Ranganathan","orcid":null},"institutions":[{"id":"https://openalex.org/I2613432","display_name":"University of South Florida","ror":"https://ror.org/032db5x82","country_code":"US","type":"education","lineage":["https://openalex.org/I2613432"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nagarajan Ranganathan","raw_affiliation_strings":["Department of Computer Science and Engineering, University of South Florida, Tampa, FL"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of South Florida, Tampa, FL","institution_ids":["https://openalex.org/I2613432"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I2613432"],"apc_list":null,"apc_paid":null,"fwci":2.5312,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.91183437,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":99},"biblio":{"volume":"15","issue":"6","first_page":"974","last_page":"987"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8504801988601685},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.7058071494102478},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6630498170852661},{"id":"https://openalex.org/keywords/spark","display_name":"SPARK (programming language)","score":0.5990827679634094},{"id":"https://openalex.org/keywords/workflow","display_name":"Workflow","score":0.5590572953224182},{"id":"https://openalex.org/keywords/replication","display_name":"Replication (statistics)","score":0.5223511457443237},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.5211451053619385},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.47861117124557495},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.43465182185173035},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.4140230715274811},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.3564448952674866},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.20358332991600037},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16607382893562317}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8504801988601685},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.7058071494102478},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6630498170852661},{"id":"https://openalex.org/C2781215313","wikidata":"https://www.wikidata.org/wiki/Q3493345","display_name":"SPARK (programming language)","level":2,"score":0.5990827679634094},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.5590572953224182},{"id":"https://openalex.org/C12590798","wikidata":"https://www.wikidata.org/wiki/Q3933199","display_name":"Replication (statistics)","level":2,"score":0.5223511457443237},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.5211451053619385},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.47861117124557495},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.43465182185173035},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.4140230715274811},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3564448952674866},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.20358332991600037},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16607382893562317},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2017.2768533","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2017.2768533","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6499999761581421,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320310598","display_name":"Amazon Web Services","ror":"https://ror.org/04mv4n011"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":41,"referenced_works":["https://openalex.org/W21821940","https://openalex.org/W33933511","https://openalex.org/W227257839","https://openalex.org/W1538465742","https://openalex.org/W1590050693","https://openalex.org/W1592090113","https://openalex.org/W1598064945","https://openalex.org/W1851456423","https://openalex.org/W1886188425","https://openalex.org/W1892254776","https://openalex.org/W1967379706","https://openalex.org/W2000414759","https://openalex.org/W2007326055","https://openalex.org/W2012398243","https://openalex.org/W2014169107","https://openalex.org/W2023349464","https://openalex.org/W2051046095","https://openalex.org/W2072102701","https://openalex.org/W2096632950","https://openalex.org/W2101173463","https://openalex.org/W2106539366","https://openalex.org/W2109219878","https://openalex.org/W2116276920","https://openalex.org/W2138001464","https://openalex.org/W2166602595","https://openalex.org/W2189465200","https://openalex.org/W2200316594","https://openalex.org/W2204772115","https://openalex.org/W2294199940","https://openalex.org/W2613576226","https://openalex.org/W2995564009","https://openalex.org/W3121224842","https://openalex.org/W4240738830","https://openalex.org/W6600891308","https://openalex.org/W6601460426","https://openalex.org/W6608938013","https://openalex.org/W6635409250","https://openalex.org/W6676126365","https://openalex.org/W6687322159","https://openalex.org/W6687946197","https://openalex.org/W6696594408"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"In":[0,19,74],"big":[1,38,42,196],"data":[2,12,43,95,197],"systems,":[3],"the":[4,17,37,48,54,67,92,100,121,127,137,143,150,163,173],"infrastructure":[5,55],"is":[6,25,45],"such":[7,20],"that":[8,162],"large":[9],"amounts":[10],"of":[11,36,71,94,129,145,172],"are":[13],"hosted":[14],"away":[15],"from":[16,56],"users.":[18],"a":[21,28,32,79,106,112,177],"system":[22,81,104,165,188,198],"information":[23],"security":[24,187],"considered":[26],"as":[27],"major":[29],"challenge.":[30],"From":[31],"customer":[33],"perspective,":[34],"one":[35],"risks":[39],"in":[40,46,66,83,99,120,136],"adopting":[41],"systems":[44],"trusting":[47],"provider":[49],"who":[50],"designs":[51],"and":[52,111,158,179,192],"owns":[53],"accessing":[57],"user":[58],"data.":[59],"Yet":[60],"there":[61],"does":[62],"not":[63],"exist":[64],"much":[65],"literature":[68],"on":[69,96,155],"detection":[70,109],"insider":[72,85],"attacks.":[73],"this":[75],"work,":[76],"we":[77],"propose":[78],"new":[80],"architecture":[82],"which":[84],"attacks":[86],"can":[87,189],"be":[88,190],"detected":[89],"by":[90],"utilizing":[91],"replication":[93],"various":[97],"nodes":[98],"system.":[101,122,138],"The":[102,123,139,185],"proposed":[103,164,186],"uses":[105],"two-step":[107],"attack":[108],"algorithm":[110],"secure":[113],"communication":[114],"protocol":[115],"to":[116,167,175,200],"analyze":[117,176],"processes":[118],"executing":[119],"first":[124],"step":[125,141],"involves":[126,142],"construction":[128],"control":[130],"instruction":[131,147],"sequences":[132,148],"for":[133,194],"each":[134],"process":[135],"second":[140],"matching":[144],"these":[146],"among":[149],"replica":[151],"nodes.":[152],"Initial":[153],"experiments":[154],"real-world":[156],"hadoop":[157],"spark":[159],"tests":[160],"show":[161],"needs":[166],"consider":[168],"only":[169],"20":[170],"percent":[171,182],"code":[174],"program":[178],"incurs":[180],"3.28":[181],"time":[183],"overhead.":[184],"implemented":[191],"built":[193],"any":[195],"due":[199],"its":[201],"extrinsic":[202],"workflow.":[203]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":2},{"year":2023,"cited_by_count":3},{"year":2022,"cited_by_count":4},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":8},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":1},{"year":2016,"cited_by_count":1}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2025-10-10T00:00:00"}