{"id":"https://openalex.org/W4294658053","doi":"https://doi.org/10.18293/seke2022-059","title":"Paying Attention to the Insider Threat","display_name":"Paying Attention to the Insider Threat","publication_year":2022,"publication_date":"2022-07-01","ids":{"openalex":"https://openalex.org/W4294658053","doi":"https://doi.org/10.18293/seke2022-059"},"language":"en","primary_location":{"id":"doi:10.18293/seke2022-059","is_oa":true,"landing_page_url":"https://doi.org/10.18293/seke2022-059","pdf_url":"https://doi.org/10.18293/seke2022-059","source":{"id":"https://openalex.org/S4220650826","display_name":"Proceedings/Proceedings of the ... International Conference on Software Engineering and Knowledge Engineering","issn_l":"2325-9000","issn":["2325-9000","2325-9086"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Conferences on Software Engineering and Knowledge Engineering","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"bronze","oa_url":"https://doi.org/10.18293/seke2022-059","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106300648","display_name":"Eduardo Lopez","orcid":null},"institutions":[{"id":"https://openalex.org/I98251732","display_name":"McMaster University","ror":"https://ror.org/02fa3aq29","country_code":"CA","type":"education","lineage":["https://openalex.org/I98251732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Eduardo Lopez","raw_affiliation_strings":["Information Systems, DeGroote School of Business McMaster University Hamilton, ON, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Systems, DeGroote School of Business McMaster University Hamilton, ON, Canada","institution_ids":["https://openalex.org/I98251732"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5055220196","display_name":"Kamran Sartipi","orcid":"https://orcid.org/0000-0002-3588-5991"},"institutions":[{"id":"https://openalex.org/I186335123","display_name":"East Carolina University","ror":"https://ror.org/01vx35703","country_code":"US","type":"education","lineage":["https://openalex.org/I186335123"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kamran Sartipi","raw_affiliation_strings":["Department of Computer Science East Carolina University Greenville, NC, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science East Carolina University Greenville, NC, USA","institution_ids":["https://openalex.org/I186335123"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.2852,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.5789221,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":95},"biblio":{"volume":"2022","issue":null,"first_page":"549","last_page":"552"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.996399998664856,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9955999851226807,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.9856082201004028},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.8274884819984436},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7517263293266296},{"id":"https://openalex.org/keywords/database-transaction","display_name":"Database transaction","score":0.6401052474975586},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6036854386329651},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5748656392097473},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.5570531487464905},{"id":"https://openalex.org/keywords/proactivity","display_name":"Proactivity","score":0.5363216996192932},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.25981974601745605},{"id":"https://openalex.org/keywords/database","display_name":"Database","score":0.17520296573638916}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.9856082201004028},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.8274884819984436},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7517263293266296},{"id":"https://openalex.org/C75949130","wikidata":"https://www.wikidata.org/wiki/Q848010","display_name":"Database transaction","level":2,"score":0.6401052474975586},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6036854386329651},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5748656392097473},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.5570531487464905},{"id":"https://openalex.org/C142944206","wikidata":"https://www.wikidata.org/wiki/Q1786137","display_name":"Proactivity","level":2,"score":0.5363216996192932},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.25981974601745605},{"id":"https://openalex.org/C77088390","wikidata":"https://www.wikidata.org/wiki/Q8513","display_name":"Database","level":1,"score":0.17520296573638916},{"id":"https://openalex.org/C187736073","wikidata":"https://www.wikidata.org/wiki/Q2920921","display_name":"Management","level":1,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C142362112","wikidata":"https://www.wikidata.org/wiki/Q735","display_name":"Art","level":0,"score":0.0},{"id":"https://openalex.org/C153349607","wikidata":"https://www.wikidata.org/wiki/Q36649","display_name":"Visual arts","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.18293/seke2022-059","is_oa":true,"landing_page_url":"https://doi.org/10.18293/seke2022-059","pdf_url":"https://doi.org/10.18293/seke2022-059","source":{"id":"https://openalex.org/S4220650826","display_name":"Proceedings/Proceedings of the ... International Conference on Software Engineering and Knowledge Engineering","issn_l":"2325-9000","issn":["2325-9000","2325-9086"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Conferences on Software Engineering and Knowledge Engineering","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.18293/seke2022-059","is_oa":true,"landing_page_url":"https://doi.org/10.18293/seke2022-059","pdf_url":"https://doi.org/10.18293/seke2022-059","source":{"id":"https://openalex.org/S4220650826","display_name":"Proceedings/Proceedings of the ... International Conference on Software Engineering and Knowledge Engineering","issn_l":"2325-9000","issn":["2325-9000","2325-9086"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Conferences on Software Engineering and Knowledge Engineering","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.6100000143051147,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4294658053.pdf","grobid_xml":"https://content.openalex.org/works/W4294658053.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W854541894","https://openalex.org/W2005708641","https://openalex.org/W2803592732","https://openalex.org/W2896457183","https://openalex.org/W2914623161","https://openalex.org/W2918863576","https://openalex.org/W3048806303","https://openalex.org/W3134075430","https://openalex.org/W4287712173","https://openalex.org/W4385245566","https://openalex.org/W6760385162"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730","https://openalex.org/W2063508592"],"abstract_inverted_index":{"The":[0,20],"misuse":[1],"of":[2,17,23,87],"information":[3],"systems":[4],"by":[5],"internal":[6],"actors":[7],"-the":[8],"insider":[9,25,97],"threat":[10,26,98],"-is":[11],"an":[12,24,70,88],"ever-growing":[13],"concern":[14],"in":[15,38,54],"organizations":[16],"all":[18],"types.":[19],"timely":[21],"detection":[22,99,102],"is":[27,32,117],"as":[28,30],"important":[29],"it":[31],"difficult.":[33],"Analyzing":[34],"user":[35,91,104],"behaviors":[36],"recorded":[37],"electronic":[39],"logs":[40],"require":[41],"significant":[42],"computing":[43],"resources":[44],"and":[45,50,85,103],"the":[46,82],"capability":[47],"to":[48],"find":[49],"interpret":[51],"complex":[52],"patterns":[53],"temporal":[55],"sequences":[56],"that":[57,94],"may":[58],"contain":[59],"irrelevant,":[60],"temporary":[61],"or":[62],"novel":[63],"elements.":[64],"In":[65],"this":[66],"paper":[67],"we":[68],"use":[69],"attentionbased":[71],"architecture":[72],"derived":[73],"from":[74,79],"BERT":[75],"(Bidirectional":[76],"Encoder":[77],"Representations":[78],"Transformers)":[80],"for":[81],"creation,":[83],"storage":[84],"updating":[86],"always-current,":[89],"holistic":[90],"behavior":[92,105],"model":[93],"enables":[95],"real-time":[96],"through":[100],"anomaly":[101],"prediction":[106],"techniques.":[107],"A":[108],"case":[109],"study":[110],"with":[111],"a":[112],"very":[113],"large":[114],"transaction":[115],"system":[116],"provided.":[118]},"counts_by_year":[{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}