{"id":"https://openalex.org/W4387143771","doi":"https://doi.org/10.1145/3607947.3608009","title":"Insider Threat Detection: Using Classification Models","display_name":"Insider Threat Detection: Using Classification Models","publication_year":2023,"publication_date":"2023-08-03","ids":{"openalex":"https://openalex.org/W4387143771","doi":"https://doi.org/10.1145/3607947.3608009"},"language":"en","primary_location":{"id":"doi:10.1145/3607947.3608009","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3607947.3608009","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 Fifteenth International Conference on Contemporary Computing","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048461293","display_name":"T. K. RamaKrishna Rao","orcid":"https://orcid.org/0009-0008-3786-3076"},"institutions":[{"id":"https://openalex.org/I196608512","display_name":"PES University","ror":"https://ror.org/05m169e78","country_code":"IN","type":"education","lineage":["https://openalex.org/I196608512"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Talgan Kumar Rao","raw_affiliation_strings":["PES University, India"],"raw_orcid":"https://orcid.org/0009-0008-3786-3076","affiliations":[{"raw_affiliation_string":"PES University, India","institution_ids":["https://openalex.org/I196608512"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063846597","display_name":"Narayana Darapaneni","orcid":null},"institutions":[{"id":"https://openalex.org/I111979921","display_name":"Northwestern University","ror":"https://ror.org/000e0be47","country_code":"US","type":"education","lineage":["https://openalex.org/I111979921"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Narayana Darapaneni","raw_affiliation_strings":["Northwestern University, USA"],"raw_orcid":"https://orcid.org/0000-0002-2017-920X","affiliations":[{"raw_affiliation_string":"Northwestern University, USA","institution_ids":["https://openalex.org/I111979921"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037489793","display_name":"Anwesh Reddy Paduri","orcid":"https://orcid.org/0000-0001-8392-4329"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Anwesh Reddy Paduri","raw_affiliation_strings":["Great Learning, India"],"raw_orcid":"https://orcid.org/0000-0001-8392-4329","affiliations":[{"raw_affiliation_string":"Great Learning, India","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058852789","display_name":"G S Amarnath","orcid":null},"institutions":[{"id":"https://openalex.org/I196608512","display_name":"PES University","ror":"https://ror.org/05m169e78","country_code":"IN","type":"education","lineage":["https://openalex.org/I196608512"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Amarnath G S","raw_affiliation_strings":["PES University, India"],"raw_orcid":"https://orcid.org/0009-0007-7929-8231","affiliations":[{"raw_affiliation_string":"PES University, India","institution_ids":["https://openalex.org/I196608512"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101409394","display_name":"Arun N. Kumar","orcid":"https://orcid.org/0009-0003-3929-3162"},"institutions":[{"id":"https://openalex.org/I196608512","display_name":"PES University","ror":"https://ror.org/05m169e78","country_code":"IN","type":"education","lineage":["https://openalex.org/I196608512"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Arun Kumar","raw_affiliation_strings":["PES University, India"],"raw_orcid":"https://orcid.org/0009-0003-3929-3162","affiliations":[{"raw_affiliation_string":"PES University, India","institution_ids":["https://openalex.org/I196608512"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5092962656","display_name":"Guruprasad Ps","orcid":"https://orcid.org/0009-0003-1812-0801"},"institutions":[{"id":"https://openalex.org/I196608512","display_name":"PES University","ror":"https://ror.org/05m169e78","country_code":"IN","type":"education","lineage":["https://openalex.org/I196608512"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Guruprasad Ps","raw_affiliation_strings":["PES University, India"],"raw_orcid":"https://orcid.org/0009-0003-1812-0801","affiliations":[{"raw_affiliation_string":"PES University, India","institution_ids":["https://openalex.org/I196608512"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":["https://openalex.org/A5048461293"],"corresponding_institution_ids":["https://openalex.org/I196608512"],"apc_list":null,"apc_paid":null,"fwci":0.4484,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.69373874,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"307","last_page":"312"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.996999979019165,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.8991789817810059},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.748913049697876},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.7272785902023315},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.6543183326721191},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.6067771911621094},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5806720852851868},{"id":"https://openalex.org/keywords/logistic-regression","display_name":"Logistic regression","score":0.5178049802780151},{"id":"https://openalex.org/keywords/recall","display_name":"Recall","score":0.5089187622070312},{"id":"https://openalex.org/keywords/precision-and-recall","display_name":"Precision and recall","score":0.490998774766922},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.44586434960365295},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.4207164943218231},{"id":"https://openalex.org/keywords/f1-score","display_name":"F1 score","score":0.4135569632053375},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.37553203105926514},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.36119067668914795}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.8991789817810059},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.748913049697876},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.7272785902023315},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.6543183326721191},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6067771911621094},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5806720852851868},{"id":"https://openalex.org/C151956035","wikidata":"https://www.wikidata.org/wiki/Q1132755","display_name":"Logistic regression","level":2,"score":0.5178049802780151},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.5089187622070312},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.490998774766922},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.44586434960365295},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4207164943218231},{"id":"https://openalex.org/C148524875","wikidata":"https://www.wikidata.org/wiki/Q6975395","display_name":"F1 score","level":2,"score":0.4135569632053375},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.37553203105926514},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36119067668914795},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C120665830","wikidata":"https://www.wikidata.org/wiki/Q14620","display_name":"Optics","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3607947.3608009","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3607947.3608009","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 Fifteenth International Conference on Contemporary Computing","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W1646742026","https://openalex.org/W1703761565","https://openalex.org/W1969795119","https://openalex.org/W2025519999","https://openalex.org/W2029014126","https://openalex.org/W2053003065","https://openalex.org/W2053512954","https://openalex.org/W2066159491","https://openalex.org/W2070320140","https://openalex.org/W2138584058","https://openalex.org/W2169177311","https://openalex.org/W2596585349","https://openalex.org/W2600341711","https://openalex.org/W2761599262","https://openalex.org/W2771022952","https://openalex.org/W2781727717","https://openalex.org/W2787099510","https://openalex.org/W2790664081","https://openalex.org/W2792493611","https://openalex.org/W2884342610","https://openalex.org/W2884984219","https://openalex.org/W2886334640","https://openalex.org/W2887799638","https://openalex.org/W2912721768","https://openalex.org/W2947769183","https://openalex.org/W2963673968","https://openalex.org/W2963769791","https://openalex.org/W2974856932","https://openalex.org/W2984824917","https://openalex.org/W2985983260","https://openalex.org/W3000429356","https://openalex.org/W3003457445","https://openalex.org/W3005730493","https://openalex.org/W3019933808","https://openalex.org/W3039513780","https://openalex.org/W3044818515","https://openalex.org/W3047980200","https://openalex.org/W3081308505","https://openalex.org/W3102089875","https://openalex.org/W3127924007","https://openalex.org/W3128317221","https://openalex.org/W3130498974","https://openalex.org/W3161590955","https://openalex.org/W3193520257","https://openalex.org/W3197991612","https://openalex.org/W3200821063","https://openalex.org/W4200292123","https://openalex.org/W4226119669","https://openalex.org/W4230093588","https://openalex.org/W4281292970","https://openalex.org/W4312917774","https://openalex.org/W4313245390","https://openalex.org/W4320713315","https://openalex.org/W6752999876","https://openalex.org/W6759005217","https://openalex.org/W6773009211","https://openalex.org/W7021122543"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W4224262160"],"abstract_inverted_index":{"Insider":[0],"threats":[1],"refer":[2],"to":[3,29,37,120],"cyber-attacks":[4],"originating":[5],"from":[6],"within":[7],"an":[8,45],"organization":[9],"that":[10],"can":[11],"cause":[12],"significant":[13],"damage,":[14],"such":[15,107],"as":[16,108],"intellectual":[17],"property":[18],"theft,":[19],"sabotage,":[20],"and":[21,77,94,112,117,129,132],"sensitive":[22],"data":[23],"exposure.":[24],"Traditional":[25],"cybersecurity":[26],"strategies":[27],"tend":[28],"focus":[30],"on":[31],"external":[32],"threats,":[33],"leaving":[34],"organizations":[35],"vulnerable":[36],"insider":[38,48],"attacks.":[39],"In":[40],"this":[41],"paper,":[42],"we":[43],"propose":[44],"approach":[46],"for":[47,75],"threat":[49],"classification":[50,53,85],"with":[51,84],"various":[52],"models.":[54,137],"Aggregated":[55],"numerical":[56],"features":[57],"are":[58],"generated":[59],"using":[60,104],"the":[61,65,68,72,100],"access":[62],"patterns":[63],"of":[64,67,99,125],"employees":[66],"organization.":[69],"We":[70],"used":[71],"CERT":[73],"dataset":[74],"training":[76],"testing.":[78],"The":[79,96],"proposed":[80],"method":[81],"is":[82],"evaluated":[83],"models":[86],"like":[87],"Logistic":[88],"Regression,":[89],"Decision":[90],"Tree,":[91],"Random":[92],"Forest,":[93],"Xgboost.":[95],"experimental":[97],"results":[98],"model's":[101],"performance,":[102],"measured":[103],"evaluation":[105],"metrics":[106],"accuracy,":[109],"recall,":[110,127],"precision,":[111,128],"F1-Score,":[113],"demonstrated":[114],"improved":[115],"accuracy":[116],"performance":[118],"compared":[119],"existing":[121],"works":[122],"in":[123],"terms":[124],"high":[126],"F1-Score":[130],"values,":[131],"effectively":[133],"outperformed":[134],"pre-trained":[135],"CNN":[136]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-03-27T05:58:40.876381","created_date":"2025-10-10T00:00:00"}