{"id":"https://openalex.org/W2615509554","doi":"https://doi.org/10.1504/ijsn.2017.10005217","title":"Insider threat detection and its future directions","display_name":"Insider threat detection and its future directions","publication_year":2017,"publication_date":"2017-01-01","ids":{"openalex":"https://openalex.org/W2615509554","doi":"https://doi.org/10.1504/ijsn.2017.10005217","mag":"2615509554"},"language":"en","primary_location":{"id":"doi:10.1504/ijsn.2017.10005217","is_oa":false,"landing_page_url":"https://doi.org/10.1504/ijsn.2017.10005217","pdf_url":null,"source":{"id":"https://openalex.org/S146340630","display_name":"International Journal of Security and Networks","issn_l":"1747-8405","issn":["1747-8405","1747-8413"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310317825","host_organization_name":"Inderscience Publishers","host_organization_lineage":["https://openalex.org/P4310317825"],"host_organization_lineage_names":["Inderscience Publishers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Security and Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5040321131","display_name":"Vrizlynn L. L. Thing","orcid":"https://orcid.org/0000-0003-4424-8596"},"institutions":[{"id":"https://openalex.org/I115228651","display_name":"Agency for Science, Technology and Research","ror":"https://ror.org/036wvzt09","country_code":"SG","type":"government","lineage":["https://openalex.org/I115228651"]},{"id":"https://openalex.org/I3005327000","display_name":"Institute for Infocomm Research","ror":"https://ror.org/053rfa017","country_code":"SG","type":"facility","lineage":["https://openalex.org/I115228651","https://openalex.org/I3005327000","https://openalex.org/I91275662"]}],"countries":["SG"],"is_corresponding":true,"raw_author_name":"Vrizlynn L.L. Thing","raw_affiliation_strings":["Department of Cyber Security and Intelligence (CSI), Institute for Infocomm Research (IR), A*STAR 138632, Singapore"],"affiliations":[{"raw_affiliation_string":"Department of Cyber Security and Intelligence (CSI), Institute for Infocomm Research (IR), A*STAR 138632, Singapore","institution_ids":["https://openalex.org/I3005327000","https://openalex.org/I115228651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073084077","display_name":"Yung Siang Liau","orcid":null},"institutions":[{"id":"https://openalex.org/I3005327000","display_name":"Institute for Infocomm Research","ror":"https://ror.org/053rfa017","country_code":"SG","type":"facility","lineage":["https://openalex.org/I115228651","https://openalex.org/I3005327000","https://openalex.org/I91275662"]},{"id":"https://openalex.org/I115228651","display_name":"Agency for Science, Technology and Research","ror":"https://ror.org/036wvzt09","country_code":"SG","type":"government","lineage":["https://openalex.org/I115228651"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Yung Siang Liau","raw_affiliation_strings":["Department of Cyber Security and Intelligence (CSI), Institute for Infocomm Research (IR), A*STAR 138632, Singapore"],"affiliations":[{"raw_affiliation_string":"Department of Cyber Security and Intelligence (CSI), Institute for Infocomm Research (IR), A*STAR 138632, Singapore","institution_ids":["https://openalex.org/I3005327000","https://openalex.org/I115228651"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5012540529","display_name":"Dinil Mon Divakaran","orcid":"https://orcid.org/0000-0001-8706-432X"},"institutions":[{"id":"https://openalex.org/I3005327000","display_name":"Institute for Infocomm Research","ror":"https://ror.org/053rfa017","country_code":"SG","type":"facility","lineage":["https://openalex.org/I115228651","https://openalex.org/I3005327000","https://openalex.org/I91275662"]},{"id":"https://openalex.org/I115228651","display_name":"Agency for Science, Technology and Research","ror":"https://ror.org/036wvzt09","country_code":"SG","type":"government","lineage":["https://openalex.org/I115228651"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Dinil Mon Divakaran","raw_affiliation_strings":["Department of Cyber Security and Intelligence (CSI), Institute for Infocomm Research (IR), A*STAR 138632, Singapore"],"affiliations":[{"raw_affiliation_string":"Department of Cyber Security and Intelligence (CSI), Institute for Infocomm Research (IR), A*STAR 138632, Singapore","institution_ids":["https://openalex.org/I3005327000","https://openalex.org/I115228651"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5022967171","display_name":"Li Ling Ko","orcid":null},"institutions":[{"id":"https://openalex.org/I3005327000","display_name":"Institute for Infocomm Research","ror":"https://ror.org/053rfa017","country_code":"SG","type":"facility","lineage":["https://openalex.org/I115228651","https://openalex.org/I3005327000","https://openalex.org/I91275662"]},{"id":"https://openalex.org/I115228651","display_name":"Agency for Science, Technology and Research","ror":"https://ror.org/036wvzt09","country_code":"SG","type":"government","lineage":["https://openalex.org/I115228651"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Li Ling Ko","raw_affiliation_strings":["Department of Cyber Security and Intelligence (CSI), Institute for Infocomm Research (IR), A*STAR 138632, Singapore"],"affiliations":[{"raw_affiliation_string":"Department of Cyber Security and Intelligence (CSI), Institute for Infocomm Research (IR), A*STAR 138632, Singapore","institution_ids":["https://openalex.org/I3005327000","https://openalex.org/I115228651"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5040321131"],"corresponding_institution_ids":["https://openalex.org/I115228651","https://openalex.org/I3005327000"],"apc_list":null,"apc_paid":null,"fwci":1.8648,"has_fulltext":false,"cited_by_count":11,"citation_normalized_percentile":{"value":0.87401624,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"12","issue":"3","first_page":"168","last_page":"168"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9994000196456909,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.8715378046035767},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.7332942485809326},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.635155439376831},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5785967707633972},{"id":"https://openalex.org/keywords/scope","display_name":"Scope (computer science)","score":0.5767277479171753},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5613383054733276},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5159593224525452},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.45759114623069763},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.43928030133247375},{"id":"https://openalex.org/keywords/biometrics","display_name":"Biometrics","score":0.4212132692337036},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.29197388887405396},{"id":"https://openalex.org/keywords/political-science","display_name":"Political science","score":0.08136755228042603}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.8715378046035767},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.7332942485809326},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.635155439376831},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5785967707633972},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.5767277479171753},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5613383054733276},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5159593224525452},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.45759114623069763},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.43928030133247375},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.4212132692337036},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29197388887405396},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.08136755228042603},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1504/ijsn.2017.10005217","is_oa":false,"landing_page_url":"https://doi.org/10.1504/ijsn.2017.10005217","pdf_url":null,"source":{"id":"https://openalex.org/S146340630","display_name":"International Journal of Security and Networks","issn_l":"1747-8405","issn":["1747-8405","1747-8413"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310317825","host_organization_name":"Inderscience Publishers","host_organization_lineage":["https://openalex.org/P4310317825"],"host_organization_lineage_names":["Inderscience Publishers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Security and Networks","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.6000000238418579,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W26537291","https://openalex.org/W61807067","https://openalex.org/W144999822","https://openalex.org/W168451370","https://openalex.org/W1492581097","https://openalex.org/W1516532723","https://openalex.org/W1533169541","https://openalex.org/W1546916973","https://openalex.org/W1554944419","https://openalex.org/W1569047488","https://openalex.org/W1760565668","https://openalex.org/W1898491644","https://openalex.org/W1964723226","https://openalex.org/W1973704753","https://openalex.org/W1976088676","https://openalex.org/W1991210879","https://openalex.org/W1995919426","https://openalex.org/W1995976200","https://openalex.org/W2017735590","https://openalex.org/W2021960022","https://openalex.org/W2024206685","https://openalex.org/W2027115557","https://openalex.org/W2032091884","https://openalex.org/W2042764164","https://openalex.org/W2043612519","https://openalex.org/W2043738378","https://openalex.org/W2053003065","https://openalex.org/W2061210554","https://openalex.org/W2068244095","https://openalex.org/W2096632950","https://openalex.org/W2097623840","https://openalex.org/W2123521920","https://openalex.org/W2129594729","https://openalex.org/W2131790518","https://openalex.org/W2140135330","https://openalex.org/W2140273660","https://openalex.org/W2144584907","https://openalex.org/W2145409412","https://openalex.org/W2145857557","https://openalex.org/W2156542272","https://openalex.org/W2161516839","https://openalex.org/W2166559705","https://openalex.org/W2167020116","https://openalex.org/W2167075285","https://openalex.org/W2268596041","https://openalex.org/W2603273327","https://openalex.org/W2612926688"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W2018332730","https://openalex.org/W4387194049","https://openalex.org/W2286217954"],"abstract_inverted_index":{"The":[0],"ability":[1],"to":[2,32],"detect":[3],"insider":[4,15,28,44],"threats":[5],"is":[6,18,61,77],"important":[7],"for":[8,80],"many":[9,84,90],"organisations.":[10],"However,":[11],"the":[12,38,105],"field":[13],"of":[14,37,64,69,85],"threat":[16,29],"detection":[17,30],"not":[19,98],"well":[20],"understood.":[21],"In":[22],"this":[23],"paper,":[24],"we":[25],"survey":[26,73],"existing":[27],"mechanisms":[31],"provide":[33],"a":[34],"better":[35],"understanding":[36],"field.":[39],"We":[40,101],"identify":[41,102],"and":[42,56,94,103],"categorise":[43],"behaviours":[45],"into":[46],"four":[47],"classes":[48],"-":[49],"biometric":[50],"behaviours,":[51,53,55],"cyber":[52],"communication":[54],"psychosocial":[57],"behaviours.":[58],"Each":[59],"class":[60],"further":[62,81],"comprised":[63],"several":[65],"independent":[66],"research":[67,82,87],"fields":[68],"anomaly":[70],"detection.":[71],"Our":[72],"reveals":[74],"that":[75,96],"there":[76],"significant":[78],"scope":[79],"in":[83],"those":[86],"fields,":[88],"with":[89],"machine":[91],"learning":[92],"algorithms":[93],"features":[95],"have":[97],"been":[99],"explored.":[100],"summarise":[104],"unexplored":[106],"areas":[107],"as":[108],"future":[109],"directions.":[110]},"counts_by_year":[{"year":2024,"cited_by_count":1},{"year":2021,"cited_by_count":1},{"year":2020,"cited_by_count":3},{"year":2019,"cited_by_count":2},{"year":2018,"cited_by_count":4}],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}