{"id":"https://openalex.org/W1995976200","doi":"https://doi.org/10.1145/2487575.2488213","title":"Detecting insider threats in a real corporate database of computer usage activity","display_name":"Detecting insider threats in a real corporate database of computer usage activity","publication_year":2013,"publication_date":"2013-08-11","ids":{"openalex":"https://openalex.org/W1995976200","doi":"https://doi.org/10.1145/2487575.2488213","mag":"1995976200"},"language":"en","primary_location":{"id":"doi:10.1145/2487575.2488213","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2487575.2488213","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM SIGKDD international conference on Knowledge discovery and data mining","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5047494178","display_name":"Ted E. Senator","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":true,"raw_author_name":"Ted E. Senator","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039188546","display_name":"Henry G. Goldberg","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Henry G. Goldberg","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029271331","display_name":"Alex Memory","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Memory","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044855102","display_name":"William T. Young","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"William T. Young","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063365524","display_name":"Brad Rees","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Brad Rees","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5110719839","display_name":"Robert D. Pierce","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert Pierce","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112451650","display_name":"Daniel Huang","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Huang","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011857653","display_name":"Matthew Reardon","orcid":null},"institutions":[{"id":"https://openalex.org/I880747138","display_name":"Science Applications International Corporation (United States)","ror":"https://ror.org/00zv91802","country_code":"US","type":"company","lineage":["https://openalex.org/I880747138"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Matthew Reardon","raw_affiliation_strings":["SAIC, Arlington, VA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"SAIC, Arlington, VA, USA","institution_ids":["https://openalex.org/I880747138"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5076610730","display_name":"David A. Bader","orcid":"https://orcid.org/0000-0002-7380-5876"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David A. Bader","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5039834058","display_name":"Edmond Chow","orcid":"https://orcid.org/0000-0003-0474-3752"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Edmond Chow","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070348998","display_name":"Irfan Essa","orcid":"https://orcid.org/0000-0002-6236-2969"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Irfan Essa","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061152584","display_name":"Joshua P. Jones","orcid":"https://orcid.org/0000-0002-3518-2639"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Joshua Jones","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5041832308","display_name":"Vinay Bettadapura","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Vinay Bettadapura","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020153026","display_name":"Duen Horng Chau","orcid":"https://orcid.org/0000-0001-9824-3323"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Duen Horng Chau","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086521826","display_name":"Oded Green","orcid":"https://orcid.org/0000-0003-3658-1233"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Oded Green","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114888641","display_name":"Oguz Kaya","orcid":"https://orcid.org/0000-0002-4444-1516"},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Oguz Kaya","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111945406","display_name":"Anita Zakrzewska","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anita Zakrzewska","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052396585","display_name":"Erica Briscoe","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Erica Briscoe","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5000413290","display_name":"Rudolph IV L. Mappus","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Rudolph IV L. Mappus","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068909868","display_name":"Robert McColl","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Robert McColl","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5061147708","display_name":"Lora G. Weiss","orcid":null},"institutions":[{"id":"https://openalex.org/I130701444","display_name":"Georgia Institute of Technology","ror":"https://ror.org/01zkghx44","country_code":"US","type":"education","lineage":["https://openalex.org/I130701444"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lora Weiss","raw_affiliation_strings":["Georgia Institute of Technology, Atlanta, GA, USA","Georgia Institute of Technology Atlanta, GA, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Georgia Institute of Technology, Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]},{"raw_affiliation_string":"Georgia Institute of Technology Atlanta, GA, USA","institution_ids":["https://openalex.org/I130701444"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5074537073","display_name":"Thomas G. Dietterich","orcid":"https://orcid.org/0000-0002-8223-8586"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Thomas G. Dietterich","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030052689","display_name":"Alan Fern","orcid":"https://orcid.org/0000-0001-5851-8935"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alan Fern","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066210234","display_name":"Weng\u2010Keen Wong","orcid":"https://orcid.org/0000-0002-6673-343X"},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Weng--Keen Wong","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032161214","display_name":"Shubhomoy Das","orcid":null},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shubhomoy Das","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037706300","display_name":"Andrew Emmott","orcid":null},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andrew Emmott","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081015851","display_name":"Jed Irvine","orcid":null},"institutions":[{"id":"https://openalex.org/I131249849","display_name":"Oregon State University","ror":"https://ror.org/00ysfqy60","country_code":"US","type":"education","lineage":["https://openalex.org/I131249849"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jed Irvine","raw_affiliation_strings":["Oregon State University, Corvallis, OR, USA","Oregon State University , Corvallis, OR , USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Oregon State University, Corvallis, OR, USA","institution_ids":["https://openalex.org/I131249849"]},{"raw_affiliation_string":"Oregon State University , Corvallis, OR , USA","institution_ids":["https://openalex.org/I131249849"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109785805","display_name":"Jay-Yoon Lee","orcid":null},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jay-Yoon Lee","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015996266","display_name":"Danai Koutra","orcid":"https://orcid.org/0000-0002-3206-8179"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Danai Koutra","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035605036","display_name":"Christos Faloutsos","orcid":"https://orcid.org/0000-0003-2996-9790"},"institutions":[{"id":"https://openalex.org/I74973139","display_name":"Carnegie Mellon University","ror":"https://ror.org/05x2bcf33","country_code":"US","type":"education","lineage":["https://openalex.org/I74973139"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Christos Faloutsos","raw_affiliation_strings":["Carnegie Mellon University, Pittsburgh, PA, USA","Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Carnegie Mellon University, Pittsburgh, PA, USA","institution_ids":["https://openalex.org/I74973139"]},{"raw_affiliation_string":"Carnegie-Mellon University, Pittsburgh, Pa., USA#TAB#","institution_ids":["https://openalex.org/I74973139"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002750757","display_name":"Daniel D. Corkill","orcid":null},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Daniel Corkill","raw_affiliation_strings":["University of Massachusetts, Amherst, MA, USA","University of Massachusetts, Amherst, MA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA#TAB#","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075116755","display_name":"Lisa Friedland","orcid":"https://orcid.org/0000-0002-6043-2249"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Lisa Friedland","raw_affiliation_strings":["University of Massachusetts, Amherst, MA, USA","University of Massachusetts, Amherst, MA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA#TAB#","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5045637946","display_name":"Amanda Gentzel","orcid":null},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Amanda Gentzel","raw_affiliation_strings":["University of Massachusetts, Amherst, MA, USA","University of Massachusetts, Amherst, MA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA#TAB#","institution_ids":["https://openalex.org/I24603500"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5006681132","display_name":"David Jensen","orcid":"https://orcid.org/0000-0001-5653-3349"},"institutions":[{"id":"https://openalex.org/I24603500","display_name":"University of Massachusetts Amherst","ror":"https://ror.org/0072zz521","country_code":"US","type":"education","lineage":["https://openalex.org/I24603500"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"David Jensen","raw_affiliation_strings":["University of Massachusetts, Amherst, MA, USA","University of Massachusetts, Amherst, MA, USA#TAB#"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA","institution_ids":["https://openalex.org/I24603500"]},{"raw_affiliation_string":"University of Massachusetts, Amherst, MA, USA#TAB#","institution_ids":["https://openalex.org/I24603500"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":34,"corresponding_author_ids":["https://openalex.org/A5047494178"],"corresponding_institution_ids":["https://openalex.org/I880747138"],"apc_list":null,"apc_paid":null,"fwci":7.7306,"has_fulltext":false,"cited_by_count":134,"citation_normalized_percentile":{"value":0.97688939,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"1393","last_page":"1401"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10064","display_name":"Complex Network Analysis Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/3109","display_name":"Statistical and Nonlinear Physics"},"field":{"id":"https://openalex.org/fields/31","display_name":"Physics and Astronomy"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9927999973297119,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10799","display_name":"Data Visualization and Analytics","score":0.9865999817848206,"subfield":{"id":"https://openalex.org/subfields/1707","display_name":"Computer Vision and Pattern Recognition"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.8979553580284119},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7669543027877808},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.7330612540245056},{"id":"https://openalex.org/keywords/lift","display_name":"Lift (data mining)","score":0.6345809102058411},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5710530877113342},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.5262717008590698},{"id":"https://openalex.org/keywords/data-stream-mining","display_name":"Data stream mining","score":0.44093069434165955},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.41364067792892456},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.34636250138282776},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.20750531554222107}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.8979553580284119},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7669543027877808},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.7330612540245056},{"id":"https://openalex.org/C139002025","wikidata":"https://www.wikidata.org/wiki/Q3001212","display_name":"Lift (data mining)","level":2,"score":0.6345809102058411},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5710530877113342},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5262717008590698},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.44093069434165955},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.41364067792892456},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.34636250138282776},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.20750531554222107},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1145/2487575.2488213","is_oa":false,"landing_page_url":"https://doi.org/10.1145/2487575.2488213","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 19th ACM SIGKDD international conference on Knowledge discovery and data mining","raw_type":"proceedings-article"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.307.9637","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.307.9637","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://www.cc.gatech.edu/~bader/papers/PRODIGAL-KDD2013.pdf","raw_type":"text"},{"id":"pmh:oai:CiteSeerX.psu:10.1.1.474.9977","is_oa":false,"landing_page_url":"http://citeseerx.ist.psu.edu/viewdoc/summary?doi=10.1.1.474.9977","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"http://web.engr.oregonstate.edu/~tgd/publications/senator-etal-detecting-insider-threats-in-a-real-corporate-database-of-computer-usage-activity-kdd2013.pdf","raw_type":"text"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":28,"referenced_works":["https://openalex.org/W605727707","https://openalex.org/W1480376833","https://openalex.org/W1500690868","https://openalex.org/W1534477342","https://openalex.org/W1558918611","https://openalex.org/W1573647811","https://openalex.org/W1981871860","https://openalex.org/W1991210879","https://openalex.org/W2000122588","https://openalex.org/W2034200492","https://openalex.org/W2049633694","https://openalex.org/W2067202211","https://openalex.org/W2088961699","https://openalex.org/W2090710911","https://openalex.org/W2101032959","https://openalex.org/W2112965356","https://openalex.org/W2142176259","https://openalex.org/W2159851400","https://openalex.org/W2166190875","https://openalex.org/W2181046587","https://openalex.org/W2255638286","https://openalex.org/W2513804397","https://openalex.org/W2539828367","https://openalex.org/W2567948266","https://openalex.org/W2787894218","https://openalex.org/W3000577762","https://openalex.org/W4232478844","https://openalex.org/W4234008654"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730"],"abstract_inverted_index":{"This":[0],"paper":[1],"reports":[2],"on":[3,37,56,83,120,163,192,198],"methods":[4],"and":[5,18,24,45,75,99,104,141,187],"results":[6],"of":[7,16,34,53,68,86,91,134,147,149,183,190,201],"an":[8],"applied":[9,76],"research":[10],"project":[11],"by":[12],"a":[13,49,128],"team":[14,66],"consisting":[15],"SAIC":[17],"four":[19],"universities":[20],"to":[21,28,61,113,143,185],"develop,":[22],"integrate,":[23],"evaluate":[25],"new":[26],"approaches":[27],"detect":[29,62,144],"the":[30,111,179,193],"weak":[31],"signals":[32],"characteristic":[33],"insider":[35,70,88,150],"threats":[36],"organizations\u2019":[38],"information":[39,47],"systems.":[40],"Our":[41],"system":[42],"combines":[43],"structural":[44],"semantic":[46],"from":[48,170],"real":[50,202],"corporate":[51],"database":[52],"monitored":[54],"activity":[55],"their":[57],"users":[58],"\u2019":[59],"computers":[60],"independently":[63],"developed":[64,74,127],"red":[65],"inserts":[67],"malicious":[69,87],"activities.":[71],"We":[72,124,153,174],"have":[73,125,175],"multiple":[77],"algorithms":[78,142],"for":[79,106,117,131],"anomaly":[80],"detection":[81],"based":[82,162],"suspected":[84],"scenarios":[85],"behavior,":[89],"indicators":[90],"unusual":[92],"activities,":[93],"high-dimensional":[94],"statistical":[95],"patterns,":[96],"temporal":[97],"sequences,":[98],"normal":[100],"graph":[101,108],"evolution.":[102],"Algorithms":[103],"representations":[105],"dynamic":[107],"processing":[109],"provide":[110],"ability":[112],"scale":[114],"as":[115],"needed":[116],"enterpriselevel":[118],"deployments":[119],"real-time":[121],"data":[122,157],"streams.":[123],"also":[126],"visual":[129],"language":[130],"specifying":[132],"combinations":[133],"features,":[135],"baselines,":[136],"peer":[137],"groups,":[138],"time":[139],"periods,":[140],"anomalies":[145],"suggestive":[146],"instances":[148],"threat":[151],"behavior.":[152],"defined":[154],"over":[155],"100":[156],"features":[158],"in":[159],"seven":[160],"categories":[161],"approximately":[164,171],"5.5":[165],"million":[166],"actions":[167],"per":[168],"day":[169],"5,500":[172],"users.":[173],"achieved":[176],"area":[177],"under":[178],"ROC":[180],"curve":[181],"values":[182,189],"up":[184],"0.979":[186],"lift":[188],"65":[191],"top":[194],"50":[195],"user-days":[196],"identified":[197],"two":[199],"months":[200],"data.":[203]},"counts_by_year":[{"year":2025,"cited_by_count":4},{"year":2024,"cited_by_count":11},{"year":2023,"cited_by_count":8},{"year":2022,"cited_by_count":11},{"year":2021,"cited_by_count":13},{"year":2020,"cited_by_count":12},{"year":2019,"cited_by_count":18},{"year":2018,"cited_by_count":18},{"year":2017,"cited_by_count":8},{"year":2016,"cited_by_count":17},{"year":2015,"cited_by_count":6},{"year":2014,"cited_by_count":6},{"year":2013,"cited_by_count":2}],"updated_date":"2026-04-28T14:05:53.105641","created_date":"2025-10-10T00:00:00"}