{"id":"https://openalex.org/W2113484497","doi":"https://doi.org/10.1109/tsmcb.2009.2033564","title":"Maintaining Defender's Reputation in Anomaly Detection Against Insider Attacks","display_name":"Maintaining Defender's Reputation in Anomaly Detection Against Insider Attacks","publication_year":2009,"publication_date":"2009-12-01","ids":{"openalex":"https://openalex.org/W2113484497","doi":"https://doi.org/10.1109/tsmcb.2009.2033564","mag":"2113484497","pmid":"https://pubmed.ncbi.nlm.nih.gov/19933017"},"language":"en","primary_location":{"id":"doi:10.1109/tsmcb.2009.2033564","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsmcb.2009.2033564","pdf_url":null,"source":{"id":"https://openalex.org/S4210170378","display_name":"IEEE Transactions on Systems Man and Cybernetics Part B (Cybernetics)","issn_l":"1083-4419","issn":["1083-4419","1941-0492"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Systems, Man, and Cybernetics, Part B (Cybernetics)","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","pubmed"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109846291","display_name":"Nan Zhang","orcid":"https://orcid.org/0000-0002-1804-0858"},"institutions":[{"id":"https://openalex.org/I193531525","display_name":"George Washington University","ror":"https://ror.org/00y4zzh67","country_code":"US","type":"education","lineage":["https://openalex.org/I193531525"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nan Zhang","raw_affiliation_strings":["Department of Computer Science, George Washington University, Washington, DC 20052, USA. nzhang10@gwu.edu","Department of Computer Science , George Washington University , Washington, DC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, George Washington University, Washington, DC 20052, USA. nzhang10@gwu.edu","institution_ids":["https://openalex.org/I193531525"]},{"raw_affiliation_string":"Department of Computer Science , George Washington University , Washington, DC, USA","institution_ids":["https://openalex.org/I193531525"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002139930","display_name":"Wei Yu","orcid":"https://orcid.org/0000-0003-4522-7340"},"institutions":[{"id":"https://openalex.org/I4322298","display_name":"Towson University","ror":"https://ror.org/044w7a341","country_code":"US","type":"education","lineage":["https://openalex.org/I4322298"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Wei Yu","raw_affiliation_strings":["Department of Computer and Information Sciences, Towson University, Towson, MD, USA","[Dept. of Comput. & Inf. Sci., Towson Univ., Towson, MD, USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer and Information Sciences, Towson University, Towson, MD, USA","institution_ids":["https://openalex.org/I4322298"]},{"raw_affiliation_string":"[Dept. of Comput. & Inf. Sci., Towson Univ., Towson, MD, USA]","institution_ids":["https://openalex.org/I4322298"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063375840","display_name":"Xinwen Fu","orcid":"https://orcid.org/0000-0003-2391-7789"},"institutions":[{"id":"https://openalex.org/I133738476","display_name":"University of Massachusetts Lowell","ror":"https://ror.org/03hamhx47","country_code":"US","type":"education","lineage":["https://openalex.org/I133738476"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Xinwen Fu","raw_affiliation_strings":["Department of Computer Science, University of Massachusetts, Lowell, MA, USA","Department of Computer Science, University of Massachusetts Lowell, Lowell MA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, University of Massachusetts, Lowell, MA, USA","institution_ids":["https://openalex.org/I133738476"]},{"raw_affiliation_string":"Department of Computer Science, University of Massachusetts Lowell, Lowell MA, USA","institution_ids":["https://openalex.org/I133738476"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5050881965","display_name":"Sajal K. Das","orcid":"https://orcid.org/0000-0002-9471-0868"},"institutions":[{"id":"https://openalex.org/I189196454","display_name":"The University of Texas at Arlington","ror":"https://ror.org/019kgqr73","country_code":"US","type":"education","lineage":["https://openalex.org/I189196454"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sajal K Das","raw_affiliation_strings":["Department of Computer Science and Engineering, University of Texas, Arlington, Arlington, TX, USA","[Department of Computer Science & Engineering, University of Texas at Arlington, Arlington, TX, USA]"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, University of Texas, Arlington, Arlington, TX, USA","institution_ids":["https://openalex.org/I189196454"]},{"raw_affiliation_string":"[Department of Computer Science & Engineering, University of Texas at Arlington, Arlington, TX, USA]","institution_ids":["https://openalex.org/I189196454"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.8144,"has_fulltext":false,"cited_by_count":35,"citation_normalized_percentile":{"value":0.86471053,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":98},"biblio":{"volume":"40","issue":"3","first_page":"597","last_page":"611"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reputation","display_name":"Reputation","score":0.8833117485046387},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.8380471467971802},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.8268086314201355},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.7252843379974365},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6785928010940552},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.6612502932548523},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6340382695198059},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5340176224708557},{"id":"https://openalex.org/keywords/internet-privacy","display_name":"Internet privacy","score":0.34065717458724976},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2210446298122406},{"id":"https://openalex.org/keywords/law","display_name":"Law","score":0.0602533221244812}],"concepts":[{"id":"https://openalex.org/C48798503","wikidata":"https://www.wikidata.org/wiki/Q877546","display_name":"Reputation","level":2,"score":0.8833117485046387},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.8380471467971802},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.8268086314201355},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.7252843379974365},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6785928010940552},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6612502932548523},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6340382695198059},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5340176224708557},{"id":"https://openalex.org/C108827166","wikidata":"https://www.wikidata.org/wiki/Q175975","display_name":"Internet privacy","level":1,"score":0.34065717458724976},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2210446298122406},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0602533221244812},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D000465","descriptor_name":"Algorithms","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D003661","descriptor_name":"Decision Support Techniques","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D003661","descriptor_name":"Decision Support Techniques","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D003661","descriptor_name":"Decision Support Techniques","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D005607","descriptor_name":"Fraud","qualifier_ui":"Q000517","qualifier_name":"prevention & control","is_major_topic":false},{"descriptor_ui":"D005607","descriptor_name":"Fraud","qualifier_ui":"Q000517","qualifier_name":"prevention & control","is_major_topic":false},{"descriptor_ui":"D005607","descriptor_name":"Fraud","qualifier_ui":"Q000517","qualifier_name":"prevention & control","is_major_topic":false},{"descriptor_ui":"D005716","descriptor_name":"Game Theory","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D005716","descriptor_name":"Game Theory","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D005716","descriptor_name":"Game Theory","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D008962","descriptor_name":"Models, Theoretical","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D008962","descriptor_name":"Models, Theoretical","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D008962","descriptor_name":"Models, Theoretical","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true},{"descriptor_ui":"D016494","descriptor_name":"Computer Security","qualifier_ui":null,"qualifier_name":null,"is_major_topic":true}],"locations_count":2,"locations":[{"id":"doi:10.1109/tsmcb.2009.2033564","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tsmcb.2009.2033564","pdf_url":null,"source":{"id":"https://openalex.org/S4210170378","display_name":"IEEE Transactions on Systems Man and Cybernetics Part B (Cybernetics)","issn_l":"1083-4419","issn":["1083-4419","1941-0492"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Systems, Man, and Cybernetics, Part B (Cybernetics)","raw_type":"journal-article"},{"id":"pmid:19933017","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/19933017","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE transactions on systems, man, and cybernetics. Part B, Cybernetics : a publication of the IEEE Systems, Man, and Cybernetics Society","raw_type":null}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, Justice and strong institutions","score":0.7900000214576721}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W35375872","https://openalex.org/W88694106","https://openalex.org/W1491829350","https://openalex.org/W1498416659","https://openalex.org/W1513692834","https://openalex.org/W1520962408","https://openalex.org/W1532487366","https://openalex.org/W1586753295","https://openalex.org/W1964929377","https://openalex.org/W1964972187","https://openalex.org/W1968909445","https://openalex.org/W2045814518","https://openalex.org/W2048465382","https://openalex.org/W2058738459","https://openalex.org/W2068471093","https://openalex.org/W2069886897","https://openalex.org/W2073276729","https://openalex.org/W2095738877","https://openalex.org/W2096334334","https://openalex.org/W2101173463","https://openalex.org/W2122744359","https://openalex.org/W2130234299","https://openalex.org/W2136791672","https://openalex.org/W2137057595","https://openalex.org/W2138209477","https://openalex.org/W2139263187","https://openalex.org/W2156392926","https://openalex.org/W2157578436","https://openalex.org/W2161754059","https://openalex.org/W2163189802","https://openalex.org/W2310541422","https://openalex.org/W2408741607","https://openalex.org/W6603729080","https://openalex.org/W6629667934","https://openalex.org/W6662798339","https://openalex.org/W6714061199"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"We":[0],"address":[1],"issues":[2],"related":[3],"to":[4,29],"establishing":[5],"a":[6],"defender's":[7],"reputation":[8,55],"in":[9,69,101],"anomaly":[10,96],"detection":[11,97,107],"against":[12,98],"two":[13,51],"types":[14],"of":[15,43,61,95,103],"attackers:":[16],"1)":[17],"smart":[18,62,72],"insiders,":[19],"who":[20,36],"learn":[21],"from":[22],"historic":[23],"attacks":[24,40,100],"and":[25,32,64,74,82,108],"adapt":[26],"their":[27,39],"strategies":[28],"avoid":[30],"detection/punishment,":[31],"2)":[33],"na\u00efve":[34,75],"attackers,":[35],"blindly":[37],"launch":[38],"without":[41],"knowledge":[42],"the":[44,65,93,104],"history.":[45],"In":[46],"this":[47],"paper,":[48],"we":[49],"propose":[50],"novel":[52],"algorithms":[53,89],"for":[54,57,67],"establishment--one":[56],"systems":[58,68],"solely":[59],"consisting":[60],"insiders":[63,73],"other":[66],"which":[70],"both":[71],"attackers":[76],"are":[77],"present.":[78],"The":[79],"theoretical":[80],"analysis":[81],"performance":[83,94],"evaluation":[84],"show":[85],"that":[86],"our":[87],"reputation-establishment":[88],"can":[90],"significantly":[91],"improve":[92],"insider":[99],"terms":[102],"tradeoff":[105],"between":[106],"false":[109],"positives.":[110]},"counts_by_year":[{"year":2024,"cited_by_count":2},{"year":2021,"cited_by_count":6},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":5},{"year":2017,"cited_by_count":3},{"year":2016,"cited_by_count":2},{"year":2015,"cited_by_count":2},{"year":2014,"cited_by_count":1},{"year":2013,"cited_by_count":4},{"year":2012,"cited_by_count":4}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}