{"id":"https://openalex.org/W1995976200","doi":"https://doi.org/10.1145/2487575.2488213","title":"Detecting insider threats in a real corporate database of computer usage activity","display_name":"Detecting insider threats in a real corporate database of computer usage activity","publication_year":2013,"publication_date":"2013-08-11","ids":{"openalex":"https://openalex.org/W1995976200","doi":"https://doi.org/10.1145/2487575.2488213","mag":"1995976200"},"language":"en","primary_location":{"id":"doi:10.1145/2487575.2488213","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2487575.2488213","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM SIGKDD international conference on Knowledge discovery and data mining","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047494178","display_name":"Ted E. Senator","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ted E. Senator","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039188546","display_name":"Henry G. Goldberg","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Henry G. Goldberg","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029271331","display_name":"Alex Memory","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Memory","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044855102","display_name":"William T. Young","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William T. Young","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063365524","display_name":"Brad Rees","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brad Rees","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110719839","display_name":"Robert D. Pierce","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert Pierce","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112451650","display_name":"Daniel Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Huang","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011857653","display_name":"Matthew Reardon","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Matthew Reardon","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076610730","display_name":"David A. Bader","orcid":"https://orcid.org/0000-0002-7380-5876"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David A. Bader","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039834058","display_name":"Edmond Chow","orcid":"https://orcid.org/0000-0003-0474-3752"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Edmond Chow","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070348998","display_name":"Irfan Essa","orcid":"https://orcid.org/0000-0002-6236-2969"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Irfan Essa","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061152584","display_name":"Joshua P. Jones","orcid":"https://orcid.org/0000-0002-3518-2639"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joshua Jones","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041832308","display_name":"Vinay Bettadapura","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vinay Bettadapura","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020153026","display_name":"Duen Horng Chau","orcid":"https://orcid.org/0000-0001-9824-3323"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Duen Horng Chau","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086521826","display_name":"Oded Green","orcid":"https://orcid.org/0000-0003-3658-1233"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Oded Green","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114888641","display_name":"Oguz Kaya","orcid":"https://orcid.org/0000-0002-4444-1516"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Oguz Kaya","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111945406","display_name":"Anita Zakrzewska","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anita Zakrzewska","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052396585","display_name":"Erica Briscoe","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Erica Briscoe","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000413290","display_name":"Rudolph IV L. Mappus","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rudolph IV L. Mappus","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068909868","display_name":"Robert McColl","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert McColl","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061147708","display_name":"Lora G. Weiss","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lora Weiss","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074537073","display_name":"Thomas G. Dietterich","orcid":"https://orcid.org/0000-0002-8223-8586"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Thomas G. Dietterich","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030052689","display_name":"Alan Fern","orcid":"https://orcid.org/0000-0001-5851-8935"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alan Fern","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066210234","display_name":"Weng\u2010Keen Wong","orcid":"https://orcid.org/0000-0002-6673-343X"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Weng--Keen Wong","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032161214","display_name":"Shubhomoy Das","orcid":null},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shubhomoy Das","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037706300","display_name":"Andrew Emmott","orcid":null},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andrew Emmott","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081015851","display_name":"Jed Irvine","orcid":null},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jed Irvine","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109785805","display_name":"Jay-Yoon Lee","orcid":null},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jay-Yoon Lee","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015996266","display_name":"Danai Koutra","orcid":"https://orcid.org/0000-0002-3206-8179"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Danai Koutra","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035605036","display_name":"Christos Faloutsos","orcid":"https://orcid.org/0000-0003-2996-9790"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christos Faloutsos","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002750757","display_name":"Daniel D. Corkill","orcid":null},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Corkill","raw_affiliation_strings":["University of Massachusetts, Amherst, MA, USA","University of Massachusetts, Amherst, MA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA#TAB#","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075116755","display_name":"Lisa Friedland","orcid":"https://orcid.org/0000-0002-6043-2249"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lisa Friedland","raw_affiliation_strings":["University of Massachusetts, Amherst, MA, USA","University of Massachusetts, Amherst, MA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA#TAB#","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045637946","display_name":"Amanda Gentzel","orcid":null},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amanda Gentzel","raw_affiliation_strings":["University of Massachusetts, Amherst, MA, USA","University of Massachusetts, Amherst, MA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA#TAB#","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006681132","display_name":"David Jensen","orcid":"https://orcid.org/0000-0001-5653-3349"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Jensen","raw_affiliation_strings":["University of Massachusetts, Amherst, MA, USA","University of Massachusetts, Amherst, MA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA#TAB#","institution_ids":["https://openalex.org/I24603500"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":8.568,"has_fulltext":false,"cited_by_count":135,"citation_normalized_percentile":{"value":0.98238688,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1393","last_page":"1401"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9865999817848206,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.8979553580284119},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7669543027877808},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.7330612540245056},{"id":"https://openalex.org/keywords/lift","display_name":"Lift (data mining)","score":0.6345809102058411},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5710530877113342},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5262717008590698},{"id":"https://openalex.org/keywords/data-stream-mining","display_name":"Data stream mining","score":0.44093069434165955},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.41364067792892456},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.34636250138282776},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.20750531554222107}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.8979553580284119},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7669543027877808},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.7330612540245056},{"id":"https://openalex.org/C139002025","wikidata":"https://www.wikidata.org/wiki/Q3001212","display_name":"Lift (data mining)","level":2,"score":0.6345809102058411},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5710530877113342},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5262717008590698},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.44093069434165955},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.41364067792892456},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.34636250138282776},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.20750531554222107},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1145/2487575.2488213","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2487575.2488213","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM SIGKDD international conference on Knowledge discovery and data mining","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.307.9637","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.307.9637","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cc.gatech.edu/~bader/papers/PRODIGAL-KDD2013.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.474.9977","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.474.9977","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://web.engr.oregonstate.edu/~tgd/publications/senator-etal-detecting-insider-threats-in-a-real-corporate-database-of-computer-usage-activity-kdd2013.pdf","raw_type":"text"},{"id":"pmh:oai:s-space.snu.ac.kr:10371/201075","is_oa":false,"landing_page_url":"https://hdl.handle.net/10371/201075","pdf_url":null,"source":{"id":"https://openalex.org/S4306401345","display_name":"Seoul National University Open Repository (Seoul National University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I139264467","host_organization_name":"Seoul National University","host_organization_lineage":["https://openalex.org/I139264467"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Proceedings Paper"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W605727707","https://openalex.org/W1480376833","https://openalex.org/W1500690868","https://openalex.org/W1534477342","https://openalex.org/W1558918611","https://openalex.org/W1573647811","https://openalex.org/W1981871860","https://openalex.org/W1991210879","https://openalex.org/W2000122588","https://openalex.org/W2034200492","https://openalex.org/W2049633694","https://openalex.org/W2067202211","https://openalex.org/W2088961699","https://openalex.org/W2090710911","https://openalex.org/W2101032959","https://openalex.org/W2112965356","https://openalex.org/W2142176259","https://openalex.org/W2159851400","https://openalex.org/W2166190875","https://openalex.org/W2181046587","https://openalex.org/W2255638286","https://openalex.org/W2513804397","https://openalex.org/W2539828367","https://openalex.org/W2567948266","https://openalex.org/W2787894218","https://openalex.org/W3000577762","https://openalex.org/W4232478844","https://openalex.org/W4234008654"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730"],"abstract_inverted_index":{"This":[0],"paper":[1],"reports":[2],"on":[3,37,56,82,119,162,191,197],"methods":[4],"and":[5,18,24,45,74,98,103,140,186],"results":[6],"of":[7,16,34,53,67,85,90,133,146,148,182,189,200],"an":[8],"applied":[9,75],"research":[10],"project":[11],"by":[12],"a":[13,49,127],"team":[14,65],"consisting":[15],"SAIC":[17],"four":[19],"universities":[20],"to":[21,28,60,112,142,184],"develop,":[22],"integrate,":[23],"evaluate":[25],"new":[26],"approaches":[27],"detect":[29,61,143],"the":[30,110,178,192],"weak":[31],"signals":[32],"characteristic":[33],"insider":[35,69,87,149],"threats":[36],"organizations'":[38],"information":[39,47],"systems.":[40],"Our":[41],"system":[42],"combines":[43],"structural":[44],"semantic":[46],"from":[48,169],"real":[50,201],"corporate":[51],"database":[52],"monitored":[54],"activity":[55],"their":[57],"users'":[58],"computers":[59],"independently":[62],"developed":[63,73,126],"red":[64],"inserts":[66],"malicious":[68,86],"activities.":[70],"We":[71,123,152,173],"have":[72,124,174],"multiple":[76],"algorithms":[77,141],"for":[78,105,116,130],"anomaly":[79],"detection":[80],"based":[81,161],"suspected":[83],"scenarios":[84],"behavior,":[88],"indicators":[89],"unusual":[91],"activities,":[92],"high-dimensional":[93],"statistical":[94],"patterns,":[95],"temporal":[96],"sequences,":[97],"normal":[99],"graph":[100,107],"evolution.":[101],"Algorithms":[102],"representations":[104],"dynamic":[106],"processing":[108],"provide":[109],"ability":[111],"scale":[113],"as":[114],"needed":[115],"enterprise-level":[117],"deployments":[118],"real-time":[120],"data":[121,156],"streams.":[122],"also":[125],"visual":[128],"language":[129],"specifying":[131],"combinations":[132],"features,":[134],"baselines,":[135],"peer":[136],"groups,":[137],"time":[138],"periods,":[139],"anomalies":[144],"suggestive":[145],"instances":[147],"threat":[150],"behavior.":[151],"defined":[153],"over":[154],"100":[155],"features":[157],"in":[158],"seven":[159],"categories":[160],"approximately":[163,170],"5.5":[164],"million":[165],"actions":[166],"per":[167],"day":[168],"5,500":[171],"users.":[172],"achieved":[175],"area":[176],"under":[177],"ROC":[179],"curve":[180],"values":[181,188],"up":[183],"0.979":[185],"lift":[187],"65":[190],"top":[193],"50":[194],"user-days":[195],"identified":[196],"two":[198],"months":[199],"data.":[202]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":13},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":18},{"year":2018,"cited_by_count":18},{"year":2017,"cited_by_count":8},{"year":2016,"cited_by_count":17},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":6},{"year":2013,"cited_by_count":2}],"updated_date":"2026-07-30T17:31:21.811387","created_date":"2025-10-10T00:00:00"}