{"id":"https://openalex.org/W3202156390","doi":"https://doi.org/10.3390/e23101258","title":"An Insider Data Leakage Detection Using One-Hot Encoding, Synthetic Minority Oversampling and Machine Learning Techniques","display_name":"An Insider Data Leakage Detection Using One-Hot Encoding, Synthetic Minority Oversampling and Machine Learning Techniques","publication_year":2021,"publication_date":"2021-09-27","ids":{"openalex":"https://openalex.org/W3202156390","doi":"https://doi.org/10.3390/e23101258","mag":"3202156390","pmid":"https://pubmed.ncbi.nlm.nih.gov/34681982"},"language":"en","primary_location":{"id":"doi:10.3390/e23101258","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e23101258","pdf_url":"https://www.mdpi.com/1099-4300/23/10/1258/pdf?version=1634018136","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1099-4300/23/10/1258/pdf?version=1634018136","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5069238097","display_name":"Taher Al\u2010Shehari","orcid":"https://orcid.org/0000-0002-9783-919X"},"institutions":[{"id":"https://openalex.org/I28022161","display_name":"King Saud University","ror":"https://ror.org/02f81g417","country_code":"SA","type":"education","lineage":["https://openalex.org/I28022161"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Taher Al-Shehari","raw_affiliation_strings":["Computer Skills, Self-Development Department, Deanship of Common First Year, King Saud University, Riyadh 11362, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-9783-919X","affiliations":[{"raw_affiliation_string":"Computer Skills, Self-Development Department, Deanship of Common First Year, King Saud University, Riyadh 11362, Saudi Arabia","institution_ids":["https://openalex.org/I28022161"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042889892","display_name":"Rakan A. Alsowail","orcid":null},"institutions":[{"id":"https://openalex.org/I28022161","display_name":"King Saud University","ror":"https://ror.org/02f81g417","country_code":"SA","type":"education","lineage":["https://openalex.org/I28022161"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Rakan A. Alsowail","raw_affiliation_strings":["Computer Skills, Self-Development Department, Deanship of Common First Year, King Saud University, Riyadh 11362, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Skills, Self-Development Department, Deanship of Common First Year, King Saud University, Riyadh 11362, Saudi Arabia","institution_ids":["https://openalex.org/I28022161"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5069238097"],"corresponding_institution_ids":["https://openalex.org/I28022161"],"apc_list":{"value":2000,"currency":"CHF","value_usd":2165},"apc_paid":{"value":2000,"currency":"CHF","value_usd":2165},"fwci":19.8699,"has_fulltext":false,"cited_by_count":191,"citation_normalized_percentile":{"value":0.99629468,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"23","issue":"10","first_page":"1258","last_page":"1258"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9987999796867371,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9958999752998352,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.9554861187934875},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.8530600666999817},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7825115919113159},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6061376333236694},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5593568086624146},{"id":"https://openalex.org/keywords/oversampling","display_name":"Oversampling","score":0.5350191593170166},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.5148054957389832},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4880312979221344},{"id":"https://openalex.org/keywords/information-leakage","display_name":"Information leakage","score":0.4759387969970703},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.39343827962875366},{"id":"https://openalex.org/keywords/bandwidth","display_name":"Bandwidth (computing)","score":0.1059541404247284},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.07784199714660645}],"concepts":[{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.9554861187934875},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.8530600666999817},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7825115919113159},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6061376333236694},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5593568086624146},{"id":"https://openalex.org/C197323446","wikidata":"https://www.wikidata.org/wiki/Q331222","display_name":"Oversampling","level":3,"score":0.5350191593170166},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5148054957389832},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4880312979221344},{"id":"https://openalex.org/C2779201187","wikidata":"https://www.wikidata.org/wiki/Q2775060","display_name":"Information leakage","level":2,"score":0.4759387969970703},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.39343827962875366},{"id":"https://openalex.org/C2776257435","wikidata":"https://www.wikidata.org/wiki/Q1576430","display_name":"Bandwidth (computing)","level":2,"score":0.1059541404247284},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.07784199714660645},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0}],"mesh":[],"locations_count":5,"locations":[{"id":"doi:10.3390/e23101258","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e23101258","pdf_url":"https://www.mdpi.com/1099-4300/23/10/1258/pdf?version=1634018136","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},{"id":"pmid:34681982","is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/34681982","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy (Basel, Switzerland)","raw_type":null},{"id":"pmh:oai:doaj.org/article:1857cc0bca434a7f9846e3b92047e918","is_oa":true,"landing_page_url":"https://doaj.org/article/1857cc0bca434a7f9846e3b92047e918","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy, Vol 23, Iss 10, p 1258 (2021)","raw_type":"article"},{"id":"pmh:oai:mdpi.com:/1099-4300/23/10/1258/","is_oa":true,"landing_page_url":"https://dx.doi.org/10.3390/e23101258","pdf_url":null,"source":{"id":"https://openalex.org/S4306400947","display_name":"MDPI (MDPI AG)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I4210097602","host_organization_name":"Multidisciplinary Digital Publishing Institute (Switzerland)","host_organization_lineage":["https://openalex.org/I4210097602"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy; Volume 23; Issue 10; Pages: 1258","raw_type":"Text"},{"id":"pmh:oai:pubmedcentral.nih.gov:8535057","is_oa":true,"landing_page_url":"https://www.ncbi.nlm.nih.gov/pmc/articles/8535057","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Entropy (Basel)","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.3390/e23101258","is_oa":true,"landing_page_url":"https://doi.org/10.3390/e23101258","pdf_url":"https://www.mdpi.com/1099-4300/23/10/1258/pdf?version=1634018136","source":{"id":"https://openalex.org/S195231649","display_name":"Entropy","issn_l":"1099-4300","issn":["1099-4300"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Entropy","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.7300000190734863,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G5666337398","display_name":null,"funder_award_id":"RG-1441-401","funder_id":"https://openalex.org/F4320335726","funder_display_name":"Deanship of Scientific Research, King Saud University"}],"funders":[{"id":"https://openalex.org/F4320335726","display_name":"Deanship of Scientific Research, King Saud University","ror":null}],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W3202156390.pdf"},"referenced_works_count":81,"referenced_works":["https://openalex.org/W127528661","https://openalex.org/W245001556","https://openalex.org/W1537589181","https://openalex.org/W1678518841","https://openalex.org/W1766594731","https://openalex.org/W1898491644","https://openalex.org/W1966809779","https://openalex.org/W1967903496","https://openalex.org/W1969294963","https://openalex.org/W1974534365","https://openalex.org/W1983068751","https://openalex.org/W1984514442","https://openalex.org/W1991210879","https://openalex.org/W1995976200","https://openalex.org/W2006376235","https://openalex.org/W2008762482","https://openalex.org/W2053003065","https://openalex.org/W2061210554","https://openalex.org/W2085901425","https://openalex.org/W2090135786","https://openalex.org/W2098770944","https://openalex.org/W2103478379","https://openalex.org/W2113997717","https://openalex.org/W2117569501","https://openalex.org/W2118483385","https://openalex.org/W2140785063","https://openalex.org/W2170505850","https://openalex.org/W2206700814","https://openalex.org/W2320569038","https://openalex.org/W2342408547","https://openalex.org/W2396640247","https://openalex.org/W2501634593","https://openalex.org/W2517617279","https://openalex.org/W2538737552","https://openalex.org/W2582257950","https://openalex.org/W2754117742","https://openalex.org/W2761599262","https://openalex.org/W2790664081","https://openalex.org/W2799900537","https://openalex.org/W2803002719","https://openalex.org/W2884243230","https://openalex.org/W2885724973","https://openalex.org/W2885794295","https://openalex.org/W2886334640","https://openalex.org/W2907880087","https://openalex.org/W2913916845","https://openalex.org/W2947769183","https://openalex.org/W2976051608","https://openalex.org/W2984000590","https://openalex.org/W3000429356","https://openalex.org/W3005730493","https://openalex.org/W3009367841","https://openalex.org/W3019933808","https://openalex.org/W3020736316","https://openalex.org/W3037306247","https://openalex.org/W3039513780","https://openalex.org/W3045880080","https://openalex.org/W3046372119","https://openalex.org/W3092238202","https://openalex.org/W3114329625","https://openalex.org/W3124014468","https://openalex.org/W3124215730","https://openalex.org/W3128317221","https://openalex.org/W3130625521","https://openalex.org/W3153493802","https://openalex.org/W3155179952","https://openalex.org/W3159239323","https://openalex.org/W3162974214","https://openalex.org/W3169956502","https://openalex.org/W3186161925","https://openalex.org/W4210947630","https://openalex.org/W4244921287","https://openalex.org/W4246793006","https://openalex.org/W4249837478","https://openalex.org/W4256060553","https://openalex.org/W6605206659","https://openalex.org/W6610259200","https://openalex.org/W6637329777","https://openalex.org/W6712059908","https://openalex.org/W6736014353","https://openalex.org/W6751019081"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W4387194049","https://openalex.org/W2018332730"],"abstract_inverted_index":{"Insider":[0,17,200],"threats":[1,18],"are":[2,159,234],"malicious":[3,87,175],"acts":[4],"that":[5,81,118,167,215,233],"can":[6,33,64,82,119,168],"be":[7,65,83],"carried":[8,66],"out":[9,67],"by":[10,85,127,174,195],"an":[11,15,30,92,123,184,224,259],"authorized":[12],"employee":[13],"within":[14],"organization.":[16,93,185],"represent":[19],"a":[20,77,86,97,188],"major":[21],"cybersecurity":[22],"challenge":[23],"for":[24,101,192,254],"private":[25],"and":[26,71,132,203,250],"public":[27],"organizations,":[28],"as":[29],"insider":[31,52,58,62,88,105,219,261],"attack":[32,59,80],"cause":[34],"extensive":[35],"damage":[36],"to":[37,122,161,246],"organization":[38],"assets":[39],"much":[40],"more":[41],"than":[42],"external":[43],"attacks.":[44],"Most":[45],"existing":[46,231],"approaches":[47,232],"in":[48,68],"the":[49,72,112,129,137,141,148,163,178,208,230,237,255],"field":[50],"of":[51,115,140,190,227,257],"threat":[53,106],"focused":[54],"on":[55,198,236],"detecting":[56,102],"general":[57],"scenarios.":[60],"However,":[61],"attacks":[63],"different":[69],"ways,":[70],"most":[73,164],"dangerous":[74],"one":[75],"is":[76,144],"data":[78,170,220,262],"leakage":[79,171,221,263],"executed":[84,173],"before":[89,181],"his/her":[90],"leaving":[91],"This":[94],"paper":[95],"proposes":[96],"machine":[98,156],"learning-based":[99],"model":[100,110,194,217,242],"such":[103],"serious":[104],"incidents.":[107],"The":[108,211,240],"proposed":[109,241],"addresses":[111],"possible":[113,248],"bias":[114,249],"detection":[116,264],"results":[117,213],"occur":[120],"due":[121],"inappropriate":[124],"encoding":[125,134],"process":[126],"employing":[128],"feature":[130],"scaling":[131],"one-hot":[133],"techniques.":[135],"Furthermore,":[136],"imbalance":[138,252],"issue":[139],"utilized":[142],"dataset":[143],"also":[145],"addressed":[146],"utilizing":[147],"synthetic":[149],"minority":[150],"oversampling":[151],"technique":[152],"(SMOTE).":[153],"Well":[154],"known":[155],"learning":[157],"algorithms":[158],"employed":[160],"detect":[162,169],"accurate":[165],"classifier":[166],"events":[172,222],"insiders":[176],"during":[177],"sensitive":[179],"period":[180],"they":[182],"leave":[183],"We":[186],"provide":[187],"proof":[189],"concept":[191],"our":[193,216],"applying":[196],"it":[197],"CMU-CERT":[199],"Threat":[201],"Dataset":[202],"comparing":[204],"its":[205],"performance":[206],"with":[207,223],"ground":[209],"truth.":[210],"experimental":[212],"show":[214],"detects":[218],"AUC-ROC":[225],"value":[226],"0.99,":[228],"outperforming":[229],"validated":[235],"same":[238],"dataset.":[239],"provides":[243],"effective":[244,260],"methods":[245],"address":[247],"class":[251],"issues":[253],"aim":[256],"devising":[258],"system.":[265]},"counts_by_year":[{"year":2026,"cited_by_count":15},{"year":2025,"cited_by_count":52},{"year":2024,"cited_by_count":73},{"year":2023,"cited_by_count":33},{"year":2022,"cited_by_count":18}],"updated_date":"2026-05-29T09:21:14.243279","created_date":"2025-10-10T00:00:00"}
