{"id":"https://openalex.org/W4389314690","doi":"https://doi.org/10.1145/3627377.3627414","title":"Improved Insider Threat Detection Method of University Cluster System based on Log-Clustering","display_name":"Improved Insider Threat Detection Method of University Cluster System based on Log-Clustering","publication_year":2023,"publication_date":"2023-09-22","ids":{"openalex":"https://openalex.org/W4389314690","doi":"https://doi.org/10.1145/3627377.3627414"},"language":"en","primary_location":{"id":"doi:10.1145/3627377.3627414","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3627377.3627414","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3627377.3627414","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 6th International Conference on Big Data Technologies","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3627377.3627414","any_repository_has_fulltext":null},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5065052170","display_name":"Yangyang Li","orcid":"https://orcid.org/0009-0006-2727-1830"},"institutions":[{"id":"https://openalex.org/I58995867","display_name":"Civil Aviation Flight University of China","ror":"https://ror.org/01xyb1v19","country_code":"CN","type":"education","lineage":["https://openalex.org/I58995867"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yangyang Li","raw_affiliation_strings":["Civil Aviation Flight University of China, China"],"raw_orcid":"https://orcid.org/0009-0006-2727-1830","affiliations":[{"raw_affiliation_string":"Civil Aviation Flight University of China, China","institution_ids":["https://openalex.org/I58995867"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5065052170"],"corresponding_institution_ids":["https://openalex.org/I58995867"],"apc_list":null,"apc_paid":null,"fwci":0.3624,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.51348245,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":null,"issue":null,"first_page":"236","last_page":"241"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9843999743461609,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12423","display_name":"Software Reliability and Analysis Research","score":0.979200005531311,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cluster-analysis","display_name":"Cluster analysis","score":0.8871039748191833},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.8550882339477539},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7037091255187988},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.6854701638221741},{"id":"https://openalex.org/keywords/sliding-window-protocol","display_name":"Sliding window protocol","score":0.635450005531311},{"id":"https://openalex.org/keywords/cluster","display_name":"Cluster (spacecraft)","score":0.5613852739334106},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5583806037902832},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4532332420349121},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.4306703805923462},{"id":"https://openalex.org/keywords/iterated-function","display_name":"Iterated function","score":0.41365987062454224},{"id":"https://openalex.org/keywords/window","display_name":"Window (computing)","score":0.34335464239120483},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3209940195083618},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.16599765419960022}],"concepts":[{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.8871039748191833},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.8550882339477539},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7037091255187988},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.6854701638221741},{"id":"https://openalex.org/C102392041","wikidata":"https://www.wikidata.org/wiki/Q592860","display_name":"Sliding window protocol","level":3,"score":0.635450005531311},{"id":"https://openalex.org/C164866538","wikidata":"https://www.wikidata.org/wiki/Q367351","display_name":"Cluster (spacecraft)","level":2,"score":0.5613852739334106},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5583806037902832},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4532332420349121},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.4306703805923462},{"id":"https://openalex.org/C140479938","wikidata":"https://www.wikidata.org/wiki/Q5254619","display_name":"Iterated function","level":2,"score":0.41365987062454224},{"id":"https://openalex.org/C2778751112","wikidata":"https://www.wikidata.org/wiki/Q835016","display_name":"Window (computing)","level":2,"score":0.34335464239120483},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3209940195083618},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.16599765419960022},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3627377.3627414","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3627377.3627414","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3627377.3627414","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 6th International Conference on Big Data Technologies","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1145/3627377.3627414","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3627377.3627414","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3627377.3627414","source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 6th International Conference on Big Data Technologies","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4389314690.pdf","grobid_xml":"https://content.openalex.org/works/W4389314690.grobid-xml"},"referenced_works_count":8,"referenced_works":["https://openalex.org/W108464071","https://openalex.org/W2039157918","https://openalex.org/W2208211896","https://openalex.org/W2729350029","https://openalex.org/W2762028850","https://openalex.org/W2887799638","https://openalex.org/W3152794541","https://openalex.org/W4301005547"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"In":[0],"response":[1],"to":[2,60,110],"the":[3,8,41,48,62,78,89,93,102,107,118,126],"low":[4],"accuracy":[5,128],"issue":[6],"of":[7,92],"log-based":[9,25],"clustering":[10,26,71],"method":[11,27,123],"for":[12,28,69,133],"insider":[13,29],"threat":[14,30,121],"detection":[15,122,127],"in":[16,86],"university":[17],"cluster":[18],"systems,":[19],"this":[20],"study":[21],"proposes":[22],"an":[23],"improved":[24,119],"detection.":[31],"Firstly,":[32],"when":[33],"dividing":[34],"logs":[35,49,64],"into":[36,65,76],"log":[37,67],"sequences,":[38],"we":[39],"consider":[40],"differences":[42,81],"between":[43,82],"different":[44,83],"users.":[45,84],"We":[46],"classify":[47],"based":[50],"on":[51],"user":[52],"accounts":[53],"and":[54,101,129],"use":[55],"a":[56],"sliding":[57],"window":[58],"approach":[59,74],"divide":[61],"classified":[63],"labeled":[66,108],"sequences":[68],"subsequent":[70],"learning.":[72],"This":[73],"takes":[75],"account":[77],"behavioral":[79],"pattern":[80],"Additionally,":[85],"practical":[87],"applications,":[88],"output":[90],"results":[91,115],"model":[94,103],"are":[95,99],"manually":[96],"inspected,":[97],"misjudgments":[98],"marked,":[100],"is":[104,130],"iterated":[105],"using":[106],"data":[109],"improve":[111],"its":[112],"accuracy.":[113],"Experimental":[114],"demonstrate":[116],"that":[117],"internal":[120],"effectively":[124],"enhances":[125],"more":[131],"suitable":[132],"real-world":[134],"production":[135],"environments.":[136]},"counts_by_year":[{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-31T08:31:51.225901","created_date":"2025-10-10T00:00:00"}