{"id":"https://openalex.org/W3019933808","doi":"https://doi.org/10.1109/access.2020.2990195","title":"A Review of Insider Threat Detection Approaches With IoT Perspective","display_name":"A Review of Insider Threat Detection Approaches With IoT Perspective","publication_year":2020,"publication_date":"2020-01-01","ids":{"openalex":"https://openalex.org/W3019933808","doi":"https://doi.org/10.1109/access.2020.2990195","mag":"3019933808"},"language":"en","primary_location":{"id":"doi:10.1109/access.2020.2990195","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2990195","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09078082.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"review","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09078082.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076261793","display_name":"Aram Kim","orcid":"https://orcid.org/0000-0003-1030-3534"},"institutions":[{"id":"https://openalex.org/I2802571394","display_name":"Korea Institute of Nuclear Safety","ror":"https://ror.org/04zmybf18","country_code":"KR","type":"facility","lineage":["https://openalex.org/I2802571394"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Aram Kim","raw_affiliation_strings":["Korea Institue of Nuclear Nonproliferation and Control, Daejeon, South Korea"],"raw_orcid":"https://orcid.org/0000-0003-1030-3534","affiliations":[{"raw_affiliation_string":"Korea Institue of Nuclear Nonproliferation and Control, Daejeon, South Korea","institution_ids":["https://openalex.org/I2802571394"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022052283","display_name":"Junhyoung Oh","orcid":"https://orcid.org/0000-0003-0783-852X"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Junhyoung Oh","raw_affiliation_strings":["School of Information Security, Korea University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0000-0003-0783-852X","affiliations":[{"raw_affiliation_string":"School of Information Security, Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032694131","display_name":"Jinho Ryu","orcid":"https://orcid.org/0000-0002-4782-7692"},"institutions":[{"id":"https://openalex.org/I2802571394","display_name":"Korea Institute of Nuclear Safety","ror":"https://ror.org/04zmybf18","country_code":"KR","type":"facility","lineage":["https://openalex.org/I2802571394"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Jinho Ryu","raw_affiliation_strings":["Korea Institue of Nuclear Nonproliferation and Control, Daejeon, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-4782-7692","affiliations":[{"raw_affiliation_string":"Korea Institue of Nuclear Nonproliferation and Control, Daejeon, South Korea","institution_ids":["https://openalex.org/I2802571394"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100767530","display_name":"Kyungho Lee","orcid":"https://orcid.org/0000-0002-5183-5927"},"institutions":[{"id":"https://openalex.org/I197347611","display_name":"Korea University","ror":"https://ror.org/047dqcg40","country_code":"KR","type":"education","lineage":["https://openalex.org/I197347611"]}],"countries":["KR"],"is_corresponding":false,"raw_author_name":"Kyungho Lee","raw_affiliation_strings":["School of Information Security, Korea University, Seoul, South Korea"],"raw_orcid":"https://orcid.org/0000-0002-5183-5927","affiliations":[{"raw_affiliation_string":"School of Information Security, Korea University, Seoul, South Korea","institution_ids":["https://openalex.org/I197347611"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":12.5318,"has_fulltext":true,"cited_by_count":86,"citation_normalized_percentile":{"value":0.98610633,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"8","issue":null,"first_page":"78847","last_page":"78867"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9965000152587891,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.8202894330024719},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.7272666692733765},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6672177314758301},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6643433570861816},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5616024732589722},{"id":"https://openalex.org/keywords/government","display_name":"Government (linguistics)","score":0.4886646568775177},{"id":"https://openalex.org/keywords/perspective","display_name":"Perspective (graphical)","score":0.46736618876457214},{"id":"https://openalex.org/keywords/application-layer","display_name":"Application layer","score":0.44983088970184326},{"id":"https://openalex.org/keywords/risk-analysis","display_name":"Risk analysis (engineering)","score":0.34042632579803467},{"id":"https://openalex.org/keywords/business","display_name":"Business","score":0.28025537729263306},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.12053844332695007}],"concepts":[{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.8202894330024719},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.7272666692733765},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6672177314758301},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6643433570861816},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5616024732589722},{"id":"https://openalex.org/C2778137410","wikidata":"https://www.wikidata.org/wiki/Q2732820","display_name":"Government (linguistics)","level":2,"score":0.4886646568775177},{"id":"https://openalex.org/C12713177","wikidata":"https://www.wikidata.org/wiki/Q1900281","display_name":"Perspective (graphical)","level":2,"score":0.46736618876457214},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.44983088970184326},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.34042632579803467},{"id":"https://openalex.org/C144133560","wikidata":"https://www.wikidata.org/wiki/Q4830453","display_name":"Business","level":0,"score":0.28025537729263306},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.12053844332695007},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2020.2990195","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2990195","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09078082.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:21a34f264854456ba7abd00094a988cf","is_oa":true,"landing_page_url":"https://doaj.org/article/21a34f264854456ba7abd00094a988cf","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 8, Pp 78847-78867 (2020)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2020.2990195","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2020.2990195","pdf_url":"https://ieeexplore.ieee.org/ielx7/6287639/8948470/09078082.pdf","source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"public-domain","license_id":"https://openalex.org/licenses/public-domain","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G8929168862","display_name":null,"funder_award_id":"10.13039/501100003630","funder_id":"https://openalex.org/F4320322037","funder_display_name":"Nuclear Safety and Security Commission"}],"funders":[{"id":"https://openalex.org/F4320322037","display_name":"Nuclear Safety and Security Commission","ror":"https://ror.org/05qk3ge34"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3019933808.pdf","grobid_xml":"https://content.openalex.org/works/W3019933808.grobid-xml"},"referenced_works_count":112,"referenced_works":["https://openalex.org/W33933511","https://openalex.org/W61534595","https://openalex.org/W76547152","https://openalex.org/W240281376","https://openalex.org/W246652017","https://openalex.org/W1458873377","https://openalex.org/W1481547447","https://openalex.org/W1482499876","https://openalex.org/W1499966149","https://openalex.org/W1516506771","https://openalex.org/W1519565400","https://openalex.org/W1554355812","https://openalex.org/W1572811218","https://openalex.org/W1591370845","https://openalex.org/W1654306951","https://openalex.org/W1678518841","https://openalex.org/W1755227063","https://openalex.org/W1821612322","https://openalex.org/W1859925930","https://openalex.org/W1898491644","https://openalex.org/W1973704753","https://openalex.org/W1981158329","https://openalex.org/W1983068751","https://openalex.org/W1986566755","https://openalex.org/W1991210879","https://openalex.org/W1995976200","https://openalex.org/W1996641605","https://openalex.org/W2009033060","https://openalex.org/W2013946142","https://openalex.org/W2029375650","https://openalex.org/W2034794430","https://openalex.org/W2045346246","https://openalex.org/W2047668391","https://openalex.org/W2053003065","https://openalex.org/W2060690494","https://openalex.org/W2067531116","https://openalex.org/W2071744657","https://openalex.org/W2092284459","https://openalex.org/W2106192381","https://openalex.org/W2106353924","https://openalex.org/W2113154117","https://openalex.org/W2113997717","https://openalex.org/W2116286374","https://openalex.org/W2118152987","https://openalex.org/W2122646361","https://openalex.org/W2129594729","https://openalex.org/W2129813388","https://openalex.org/W2140910804","https://openalex.org/W2141752622","https://openalex.org/W2142638723","https://openalex.org/W2145813919","https://openalex.org/W2147263871","https://openalex.org/W2155100223","https://openalex.org/W2156542272","https://openalex.org/W2163345053","https://openalex.org/W2166657964","https://openalex.org/W2171080494","https://openalex.org/W2206700814","https://openalex.org/W2217797905","https://openalex.org/W2255638286","https://openalex.org/W2285910409","https://openalex.org/W2291432160","https://openalex.org/W2345008625","https://openalex.org/W2346044633","https://openalex.org/W2494508777","https://openalex.org/W2512189246","https://openalex.org/W2525989728","https://openalex.org/W2538737552","https://openalex.org/W2542582667","https://openalex.org/W2558122757","https://openalex.org/W2562055072","https://openalex.org/W2580290980","https://openalex.org/W2585284559","https://openalex.org/W2591863697","https://openalex.org/W2762692271","https://openalex.org/W2787099510","https://openalex.org/W2799758613","https://openalex.org/W2808709910","https://openalex.org/W2884342610","https://openalex.org/W2884984219","https://openalex.org/W2888160480","https://openalex.org/W2893159502","https://openalex.org/W2895832704","https://openalex.org/W2912868009","https://openalex.org/W2928207750","https://openalex.org/W2942149066","https://openalex.org/W2949170220","https://openalex.org/W2963673968","https://openalex.org/W3002827238","https://openalex.org/W3003457445","https://openalex.org/W3122401678","https://openalex.org/W3122864121","https://openalex.org/W3124215730","https://openalex.org/W4244705237","https://openalex.org/W4247092506","https://openalex.org/W4288083473","https://openalex.org/W6603089473","https://openalex.org/W6609229046","https://openalex.org/W6609434929","https://openalex.org/W6628614853","https://openalex.org/W6629566846","https://openalex.org/W6631229894","https://openalex.org/W6637329777","https://openalex.org/W6684679328","https://openalex.org/W6689003634","https://openalex.org/W6704161608","https://openalex.org/W6732432556","https://openalex.org/W6733151841","https://openalex.org/W6734071730","https://openalex.org/W6745040976","https://openalex.org/W6761953300","https://openalex.org/W6773009211"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730","https://openalex.org/W2063508592"],"abstract_inverted_index":{"Security":[0],"professionals,":[1],"government":[2],"agencies,":[3],"and":[4,32,96,105,120,127,145,170,175,185],"corporate":[5],"organizations":[6],"have":[7],"found":[8],"an":[9],"inherent":[10],"need":[11],"to":[12,30,167],"prevent":[13,31],"or":[14],"mitigate":[15,33],"attacks":[16],"from":[17],"insider":[18,24,79,92],"threats.":[19],"Accordingly,":[20],"active":[21],"research":[22,173],"on":[23,102,117],"threat":[25,80],"detection":[26],"has":[27],"been":[28],"conducted":[29],"adverse":[34],"effects":[35],"such":[36],"as":[37],"leakage":[38],"of":[39,52,77,89,91,123,132,142,196],"valuable":[40],"information":[41],"that":[42,137],"may":[43],"be":[44],"caused":[45],"by":[46],"insiders.":[47],"Along":[48],"with":[49,94],"the":[50,60,98,118,121,134,139,143,152,156,181,188,194],"growth":[51],"Internet-of-Things":[53],"(IoT),":[54],"new":[55],"security":[56,62],"challenges":[57],"arise":[58],"in":[59,75,155],"existing":[61],"frameworks.":[63],"Attack":[64],"surfaces":[65],"are":[66,191],"significantly":[67],"enlarged":[68],"which":[69],"could":[70],"cause":[71],"a":[72,87],"severe":[73],"risk":[74],"terms":[76],"company":[78],"management.":[81],"In":[82],"this":[83],"work,":[84],"we":[85,171],"provide":[86],"generalization":[88],"aspects":[90],"threats":[93],"IoT":[95,114,124,157,189],"analyze":[97],"surveyed":[99],"literature":[100],"based":[101,116],"both":[103],"private":[104],"public":[106],"sources.":[107],"We":[108,159],"then":[109],"examine":[110],"data":[111,140,164],"sources":[112,165],"considering":[113],"environments":[115],"characteristics":[119],"structure":[122],"(perceptual,":[125],"network,":[126],"application":[128,146],"layers).":[129],"The":[130],"result":[131],"reviewing":[133],"study":[135],"shows":[136],"using":[138],"source":[141],"network":[144],"layer":[147,154,198],"is":[148],"more":[149],"suitable":[150],"than":[151],"perceptual":[153],"environment.":[158],"also":[160],"categorized":[161],"each":[162,178,197],"layer's":[163],"according":[166],"their":[168],"features,":[169],"investigated":[172],"objectives":[174],"methods":[176],"for":[177,183],"category.":[179],"Finally,":[180],"potential":[182],"utilization":[184],"limitations":[186],"under":[187],"environment":[190],"presented":[192],"at":[193],"end":[195],"examination.":[199]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":20},{"year":2023,"cited_by_count":21},{"year":2022,"cited_by_count":10},{"year":2021,"cited_by_count":9},{"year":2020,"cited_by_count":5}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}