{"id":"https://openalex.org/W2307512429","doi":"https://doi.org/10.1109/tsmca.2011.2162500","title":"Intelligence Analyses and the Insider Threat","display_name":"Intelligence Analyses and the Insider Threat","publication_year":2011,"publication_date":"2011-09-01","ids":{"openalex":"https://openalex.org/W2307512429","doi":"https://doi.org/10.1109/tsmca.2011.2162500","mag":"2307512429"},"language":"en","primary_location":{"id":"doi:10.1109/tsmca.2011.2162500","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsmca.2011.2162500","pdf_url":null,"source":{"id":"https://openalex.org/S4210201610","display_name":"IEEE Transactions on Systems Man and Cybernetics - Part A Systems and Humans","issn_l":"1083-4427","issn":["1083-4427","1558-2426"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5054636708","display_name":"Eugene Santos","orcid":"https://orcid.org/0000-0003-2923-5113"},"institutions":[{"id":"https://openalex.org/I107672454","display_name":"Dartmouth College","ror":"https://ror.org/049s0rh22","country_code":"US","type":"education","lineage":["https://openalex.org/I107672454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Eugene Santos","raw_affiliation_strings":["Thayer School of Engineering, Dartmouth College, Hanover, NH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thayer School of Engineering, Dartmouth College, Hanover, NH, USA","institution_ids":["https://openalex.org/I107672454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5048582530","display_name":"Hien Nguyen","orcid":"https://orcid.org/0000-0001-8940-3778"},"institutions":[{"id":"https://openalex.org/I183533211","display_name":"University of Wisconsin\u2013Whitewater","ror":"https://ror.org/049hrzs50","country_code":"US","type":"education","lineage":["https://openalex.org/I183533211"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Hien Nguyen","raw_affiliation_strings":["University of Wisconsin, Whitewater, Whitewater, WI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin, Whitewater, Whitewater, WI, USA","institution_ids":["https://openalex.org/I183533211"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100420016","display_name":"F. Richard Yu","orcid":"https://orcid.org/0000-0003-1006-7594"},"institutions":[{"id":"https://openalex.org/I107672454","display_name":"Dartmouth College","ror":"https://ror.org/049s0rh22","country_code":"US","type":"education","lineage":["https://openalex.org/I107672454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Fei Yu","raw_affiliation_strings":["Thayer School of Engineering, Dartmouth College, Hanover, NH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thayer School of Engineering, Dartmouth College, Hanover, NH, USA","institution_ids":["https://openalex.org/I107672454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110793886","display_name":"Keum Joo Kim","orcid":null},"institutions":[{"id":"https://openalex.org/I107672454","display_name":"Dartmouth College","ror":"https://ror.org/049s0rh22","country_code":"US","type":"education","lineage":["https://openalex.org/I107672454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Keum Joo Kim","raw_affiliation_strings":["Thayer School of Engineering, Dartmouth College, Hanover, NH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thayer School of Engineering, Dartmouth College, Hanover, NH, USA","institution_ids":["https://openalex.org/I107672454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5053160046","display_name":"Deqing Li","orcid":null},"institutions":[{"id":"https://openalex.org/I107672454","display_name":"Dartmouth College","ror":"https://ror.org/049s0rh22","country_code":"US","type":"education","lineage":["https://openalex.org/I107672454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Deqing Li","raw_affiliation_strings":["Thayer School of Engineering, Dartmouth College, Hanover, NH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thayer School of Engineering, Dartmouth College, Hanover, NH, USA","institution_ids":["https://openalex.org/I107672454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045144172","display_name":"John Wilkinson","orcid":"https://orcid.org/0000-0002-8245-7981"},"institutions":[{"id":"https://openalex.org/I107672454","display_name":"Dartmouth College","ror":"https://ror.org/049s0rh22","country_code":"US","type":"education","lineage":["https://openalex.org/I107672454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"John T. Wilkinson","raw_affiliation_strings":["Thayer School of Engineering, Dartmouth College, Hanover, NH, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Thayer School of Engineering, Dartmouth College, Hanover, NH, USA","institution_ids":["https://openalex.org/I107672454"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036238212","display_name":"Adam Olson","orcid":null},"institutions":[{"id":"https://openalex.org/I183533211","display_name":"University of Wisconsin\u2013Whitewater","ror":"https://ror.org/049hrzs50","country_code":"US","type":"education","lineage":["https://openalex.org/I183533211"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Adam Olson","raw_affiliation_strings":["University of Wisconsin, Whitewater, Whitewater, WI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin, Whitewater, Whitewater, WI, USA","institution_ids":["https://openalex.org/I183533211"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001599077","display_name":"Russell Jacob","orcid":null},"institutions":[{"id":"https://openalex.org/I43579087","display_name":"University of Wisconsin\u2013Milwaukee","ror":"https://ror.org/031q21x57","country_code":"US","type":"education","lineage":["https://openalex.org/I43579087"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jacob Russell","raw_affiliation_strings":["University of Wisconsin, Milwaukee, Milwaukee, WI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin, Milwaukee, Milwaukee, WI, USA","institution_ids":["https://openalex.org/I43579087"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5026292470","display_name":"Brittany Clark","orcid":null},"institutions":[{"id":"https://openalex.org/I183533211","display_name":"University of Wisconsin\u2013Whitewater","ror":"https://ror.org/049hrzs50","country_code":"US","type":"education","lineage":["https://openalex.org/I183533211"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brittany Clark","raw_affiliation_strings":["University of Wisconsin, Whitewater, Whitewater, WI, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Wisconsin, Whitewater, Whitewater, WI, USA","institution_ids":["https://openalex.org/I183533211"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":9,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.4628,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.8476879,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"42","issue":"2","first_page":"331","last_page":"347"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9976999759674072,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7409895062446594},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.6984871625900269},{"id":"https://openalex.org/keywords/normalization","display_name":"Normalization (sociology)","score":0.6972752809524536},{"id":"https://openalex.org/keywords/consistency","display_name":"Consistency (knowledge bases)","score":0.60079026222229},{"id":"https://openalex.org/keywords/task","display_name":"Task (project management)","score":0.5975991487503052},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.592090904712677},{"id":"https://openalex.org/keywords/intelligence-analysis","display_name":"Intelligence analysis","score":0.5852303504943848},{"id":"https://openalex.org/keywords/process","display_name":"Process (computing)","score":0.5000720024108887},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.44508808851242065},{"id":"https://openalex.org/keywords/perception","display_name":"Perception","score":0.41412490606307983},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.33685430884361267},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3360890746116638},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.10701534152030945},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.07976743578910828}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7409895062446594},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.6984871625900269},{"id":"https://openalex.org/C136886441","wikidata":"https://www.wikidata.org/wiki/Q926129","display_name":"Normalization (sociology)","level":2,"score":0.6972752809524536},{"id":"https://openalex.org/C2776436953","wikidata":"https://www.wikidata.org/wiki/Q5163215","display_name":"Consistency (knowledge bases)","level":2,"score":0.60079026222229},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.5975991487503052},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.592090904712677},{"id":"https://openalex.org/C517642484","wikidata":"https://www.wikidata.org/wiki/Q2388514","display_name":"Intelligence analysis","level":2,"score":0.5852303504943848},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.5000720024108887},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.44508808851242065},{"id":"https://openalex.org/C26760741","wikidata":"https://www.wikidata.org/wiki/Q160402","display_name":"Perception","level":2,"score":0.41412490606307983},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33685430884361267},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3360890746116638},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.10701534152030945},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.07976743578910828},{"id":"https://openalex.org/C201995342","wikidata":"https://www.wikidata.org/wiki/Q682496","display_name":"Systems engineering","level":1,"score":0.0},{"id":"https://openalex.org/C19165224","wikidata":"https://www.wikidata.org/wiki/Q23404","display_name":"Anthropology","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C144024400","wikidata":"https://www.wikidata.org/wiki/Q21201","display_name":"Sociology","level":0,"score":0.0},{"id":"https://openalex.org/C169760540","wikidata":"https://www.wikidata.org/wiki/Q207011","display_name":"Neuroscience","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tsmca.2011.2162500","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsmca.2011.2162500","pdf_url":null,"source":{"id":"https://openalex.org/S4210201610","display_name":"IEEE Transactions on Systems Man and Cybernetics - Part A Systems and Humans","issn_l":"1083-4427","issn":["1083-4427","1558-2426"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Systems, Man, and Cybernetics - Part A: Systems and Humans","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.8199999928474426,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W33933511","https://openalex.org/W39805166","https://openalex.org/W91476413","https://openalex.org/W168451370","https://openalex.org/W1483434081","https://openalex.org/W1525062087","https://openalex.org/W1528820597","https://openalex.org/W1545915796","https://openalex.org/W1572873263","https://openalex.org/W1572900211","https://openalex.org/W1574901103","https://openalex.org/W1586753295","https://openalex.org/W1593643728","https://openalex.org/W1657362120","https://openalex.org/W1678518841","https://openalex.org/W1832277845","https://openalex.org/W1842429384","https://openalex.org/W1941427975","https://openalex.org/W1973704753","https://openalex.org/W1991520194","https://openalex.org/W2020241340","https://openalex.org/W2022832284","https://openalex.org/W2038166792","https://openalex.org/W2045812729","https://openalex.org/W2070233106","https://openalex.org/W2079818165","https://openalex.org/W2086429059","https://openalex.org/W2094509566","https://openalex.org/W2100280670","https://openalex.org/W2123941465","https://openalex.org/W2127839526","https://openalex.org/W2130523241","https://openalex.org/W2132816365","https://openalex.org/W2138209477","https://openalex.org/W2142638723","https://openalex.org/W2144584907","https://openalex.org/W2155822737","https://openalex.org/W2156542272","https://openalex.org/W2332565117","https://openalex.org/W2408741607","https://openalex.org/W2613605840","https://openalex.org/W3037124152","https://openalex.org/W3105682467","https://openalex.org/W3136767761","https://openalex.org/W6631545040","https://openalex.org/W6632702134","https://openalex.org/W6634177610","https://openalex.org/W6636847367","https://openalex.org/W6638441982","https://openalex.org/W6670664483","https://openalex.org/W6714061199"],"related_works":["https://openalex.org/W4205304595","https://openalex.org/W1499596878","https://openalex.org/W2075012963","https://openalex.org/W2600341711","https://openalex.org/W2984824917","https://openalex.org/W2161754059","https://openalex.org/W1489373009","https://openalex.org/W2001702225","https://openalex.org/W2411226021","https://openalex.org/W1986566755"],"abstract_inverted_index":{"In":[0,52,94,206],"the":[1,4,17,134,197,207,209],"intelligence":[2,73],"community,":[3],"existence":[5],"of":[6,101,114,120,170,199,211,235],"a":[7,11,57,105,111,168,232],"malicious":[8,36,62,131,185,204,212],"insider":[9],"poses":[10],"severe":[12],"threat":[13],"to":[14,16,23,50,66,87,92,96,165,175,184,230],"information,":[15],"actual":[18],"analytic":[19],"process,":[20],"and,":[21],"ultimately,":[22],"any":[24,151],"decision-making":[25],"process":[26],"relying":[27],"on":[28,79,118],"such":[29],"information":[30],"and":[31,146,172,178,220,225],"analyses.":[32],"An":[33],"analyst":[34,116,141],"with":[35,215,224],"intent":[37],"can":[38],"create":[39],"irreversible":[40],"short-term,":[41],"as":[42,44],"well":[43],"long-term,":[45],"damage":[46],"that":[47,60,108,125,181,189],"is":[48,127,142,155,160,173,182,218],"hard":[49],"detect.":[51],"this":[53,190],"paper,":[54],"we":[55,85,103],"propose":[56],"novel":[58],"methodology":[59],"detects":[61],"analysts":[63,171],"who":[64],"attempt":[65],"manipulate":[67],"decision":[68],"makers'":[69],"perceptions":[70],"through":[71],"their":[72,121],"reports.":[74],"This":[75],"detection":[76,135,192],"method":[77,136],"relies":[78],"each":[80,115],"analyst's":[81,99],"working":[82],"style,":[83],"which":[84,162],"assume":[86],"be":[88],"consistent":[89,139],"from":[90],"task":[91],"task.":[93],"order":[95,229],"measure":[97],"an":[98,140,148],"degree":[100],"consistency,":[102],"employ":[104],"user-modeling":[106],"technique":[107],"automatically":[109],"builds":[110],"computational":[112],"model":[113],"based":[117],"observation":[119],"activities.":[122],"We":[123,187],"hypothesize":[124],"inconsistency":[126,154,180],"mainly":[128],"caused":[129],"by":[130],"actions.":[132,186],"Therefore,":[133],"evaluates":[137],"how":[138],"across":[143,167],"different":[144],"tasks":[145],"raises":[147],"alert":[149],"if":[150],"significantly":[152],"large":[153],"detected.":[156],"A":[157],"normalization":[158,227],"procedure":[159],"employed":[161],"allows":[163],"us":[164],"compare":[166],"group":[169],"shown":[174],"reduce":[176],"noise":[177],"amplify":[179],"due":[183],"show":[188],"improves":[191],"performance.":[193],"Our":[194],"experiments":[195],"demonstrate":[196],"effectiveness":[198],"our":[200,236],"approach":[201],"in":[202,228],"detecting":[203],"insiders.":[205],"experiments,":[208],"percentage":[210],"insiders":[213],"grouped":[214],"legitimate":[216],"ones":[217],"varied,":[219],"results":[221],"are":[222],"collected":[223],"without":[226],"provide":[231],"comprehensive":[233],"analysis":[234],"approach.":[237]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":2},{"year":2020,"cited_by_count":5},{"year":2019,"cited_by_count":4},{"year":2018,"cited_by_count":2},{"year":2015,"cited_by_count":1},{"year":2014,"cited_by_count":3},{"year":2012,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}