{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,19]],"date-time":"2026-10-19T19:57:32Z","timestamp":1792439852225,"version":"4.5.0"},"reference-count":175,"publisher":"Springer Science and Business Media LLC","issue":"2","license":[{"start":{"date-parts":[[2025,3,7]],"date-time":"2025-03-07T00:00:00Z","timestamp":1741305600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,3,7]],"date-time":"2025-03-07T00:00:00Z","timestamp":1741305600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Int. J. Inf. Secur."],"published-print":{"date-parts":[[2025,4]]},"DOI":"10.1007\/s10207-025-01002-6","type":"journal-article","created":{"date-parts":[[2025,3,7]],"date-time":"2025-03-07T08:19:59Z","timestamp":1741335599000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":28,"title":["Insights into user behavioral-based insider threat detection: systematic review"],"prefix":"10.1007","volume":"24","author":[{"given":"K.","family":"Kamatchi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"E.","family":"Uma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,3,7]]},"reference":[{"key":"1002_CR1","unstructured":"Costa, D. L., Albrethsen, M. J., Collins, M. L., Perl, S. J., Silowash, G. J., & Spooner, D. L.: An insider threat indicator ontology.\u00a0Technical Report CMU\/SEI-2016-TR-007 (2016)."},{"key":"1002_CR2","unstructured":"Cost of insider threats 2022: Global. https:\/\/static.poder360.com.br\/2022\/01\/pfpt-us-tr-the-cost-of-insider-threats-ponemon-report.pdf"},{"issue":"1","key":"1002_CR3","doi-asserted-by":"publisher","first-page":"259","DOI":"10.3390\/app13010259","volume":"13","author":"B Bin Sarhan","year":"2022","unstructured":"Bin Sarhan, B., Altwaijry, N.: Insider threat detection using machine learning approach. Appl. Sci. 13(1), 259 (2022). https:\/\/doi.org\/10.3390\/app13010259","journal-title":"Appl. Sci."},{"issue":"4","key":"1002_CR4","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s11235-023-01085-3","volume":"87","author":"P Manoharan","year":"2023","unstructured":"Manoharan, P., Yin, J., Wang, H., Zhang, Y., Ye, W.: Insider threat detection using supervised machine learning algorithms. Telecommun. Syst. 87(4), 1\u201317 (2023). https:\/\/doi.org\/10.1007\/s11235-023-01085-3","journal-title":"Telecommun. Syst."},{"key":"1002_CR5","doi-asserted-by":"publisher","first-page":"157","DOI":"10.1016\/j.procs.2015.06.018","volume":"54","author":"BM Babu","year":"2015","unstructured":"Babu, B.M., Bhanu, M.S.: Prevention of insider attacks by integrating behavior analysis with risk based access control model to protect cloud. Procedia Computer Sci 54, 157\u2013166 (2015). https:\/\/doi.org\/10.1016\/j.procs.2015.06.018","journal-title":"Procedia Computer Sci"},{"issue":"2","key":"1002_CR6","doi-asserted-by":"publisher","first-page":"373","DOI":"10.1109\/jsyst.2015.2424677","volume":"11","author":"A Almehmadi","year":"2015","unstructured":"Almehmadi, A., El-Khatib, K.: On the possibility of insider threat prevention using intent-based access control (IBAC). IEEE Syst. J. 11(2), 373\u2013384 (2015). https:\/\/doi.org\/10.1109\/jsyst.2015.2424677","journal-title":"IEEE Syst. J."},{"key":"1002_CR7","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102221","volume":"104","author":"S Yuan","year":"2021","unstructured":"Yuan, S., Wu, X.: Deep learning for insider threat detection: review, challenges and opportunities. Comput. Secur. 104, 102221 (2021). https:\/\/doi.org\/10.1016\/j.cose.2021.102221","journal-title":"Comput. Secur."},{"key":"1002_CR8","doi-asserted-by":"publisher","unstructured":"Sun, D., Liu, M., Li, M., Shi, Z., Liu, P., & Wang, X.: DeepMIT: a novel malicious insider threat detection framework based on recurrent neural network. In\u00a02021 IEEE 24th International Conference on Computer Supported Cooperative Work in Design (CSCWD) IEEE. 335\u2013341 (2021, May). https:\/\/doi.org\/10.1109\/cscwd49262.2021.9437887","DOI":"10.1109\/cscwd49262.2021.9437887"},{"key":"1002_CR9","doi-asserted-by":"publisher","unstructured":"Manoharan, P., Hong, W., Yin, J., Zhang, Y., Ye, W., & Ma, J.: Bilateral insider threat detection: Harnessing standalone and sequential activities with recurrent neural networks. In\u00a0International Conference on Web Information Systems Engineering\u00a0Singapore: Springer Nature Singapore 179\u2013188 (2023, October). https:\/\/doi.org\/10.1007\/978-981-99-7254-8_14","DOI":"10.1007\/978-981-99-7254-8_14"},{"issue":"1","key":"1002_CR10","doi-asserted-by":"publisher","first-page":"451","DOI":"10.1109\/tdsc.2021.3135639","volume":"20","author":"M Villarreal-Vasquez","year":"2021","unstructured":"Villarreal-Vasquez, M., Modelo-Howard, G., Dube, S., Bhargava, B.: Hunting for insider threats using LSTM-based anomaly detection. IEEE Trans. Dependable Secure Comput. 20(1), 451\u2013462 (2021). https:\/\/doi.org\/10.1109\/tdsc.2021.3135639","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"1002_CR11","doi-asserted-by":"publisher","first-page":"30907","DOI":"10.1109\/access.2024.3369906","volume":"12","author":"FR Alzaabi","year":"2024","unstructured":"Alzaabi, F.R., Mehmood, A.: A review of recent advances, challenges, and opportunities in malicious insider threat detection using machine learning methods. IEEE Access 12, 30907\u201330927 (2024). https:\/\/doi.org\/10.1109\/access.2024.3369906","journal-title":"IEEE Access"},{"key":"1002_CR12","doi-asserted-by":"publisher","first-page":"64","DOI":"10.1016\/j.procs.2020.10.012","volume":"177","author":"F Janjua","year":"2020","unstructured":"Janjua, F., Masood, A., Abbas, H., Rashid, I.: Handling insider threat through supervised machine learning techniques. Procedia Computer Sci. 177, 64\u201371 (2020). https:\/\/doi.org\/10.1016\/j.procs.2020.10.012","journal-title":"Procedia Computer Sci."},{"key":"1002_CR13","doi-asserted-by":"crossref","unstructured":"Manoharan, P., Yin, J., Wang, H., Zhang, Y., & Ye, W. (2024, August). Insider Threat Detection: A Review. In\u00a02024 International Conference on Networking and Network Applications (NaNA)\u00a0(pp. 147\u2013153). IEEE.","DOI":"10.1109\/NaNA63151.2024.00031"},{"key":"1002_CR14","doi-asserted-by":"publisher","unstructured":"Sanzgiri, A., & Dasgupta, D.: Classification of insider threat detection techniques. In\u00a0Proceedings of the 11th annual cyber and information security research conference\u00a01\u20134 (2016, April). https:\/\/doi.org\/10.1145\/2897795.2897799","DOI":"10.1145\/2897795.2897799"},{"issue":"2","key":"1002_CR15","doi-asserted-by":"publisher","first-page":"221","DOI":"10.13052\/jcsm2245-1439.1225","volume":"12","author":"U Rauf","year":"2023","unstructured":"Rauf, U., Mohsen, F., Wei, Z.: A taxonomic classification of insider threats: existing techniques, future directions & recommendations. J Cyber Secur Mobil 12(2), 221\u2013252 (2023). https:\/\/doi.org\/10.13052\/jcsm2245-1439.1225","journal-title":"J Cyber Secur Mobil"},{"key":"1002_CR16","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2022.103341","volume":"70","author":"F Aloraini","year":"2022","unstructured":"Aloraini, F., Javed, A., Rana, O., Burnap, P.: Adversarial machine learning in IoT from an insider point of view. J. Inf. Secur. Appl. 70, 103341 (2022). https:\/\/doi.org\/10.1016\/j.jisa.2022.103341","journal-title":"J. Inf. Secur. Appl."},{"key":"1002_CR17","doi-asserted-by":"publisher","DOI":"10.7717\/peerj-cs.938","volume":"8","author":"RA Alsowail","year":"2022","unstructured":"Alsowail, R.A., Al-Shehari, T.: Techniques and countermeasures for preventing insider threats. PeerJ. Computer Sci. 8, e938 (2022). https:\/\/doi.org\/10.7717\/peerj-cs.938","journal-title":"PeerJ. Computer Sci."},{"key":"1002_CR18","doi-asserted-by":"publisher","unstructured":"Abdallah, W. (2023): A Systematic Literature Review: Human Factor as Insider threat in Organizations.\u00a0International Journal of Computer Science and Information Security (IJCSIS),\u00a021 (6) https:\/\/doi.org\/10.5220\/0011783000003405","DOI":"10.5220\/0011783000003405"},{"key":"1002_CR19","doi-asserted-by":"publisher","DOI":"10.1109\/comst.2023.3299519","author":"B Nour","year":"2023","unstructured":"Nour, B., Pourzandi, M., Debbabi, M.: A survey on threat hunting in enterprise networks. IEEE Commun Surv Tutor (2023). https:\/\/doi.org\/10.1109\/comst.2023.3299519","journal-title":"IEEE Commun Surv Tutor"},{"issue":"15","key":"1002_CR20","doi-asserted-by":"publisher","first-page":"5208","DOI":"10.3390\/app10155208","volume":"10","author":"MN Al-Mhiqani","year":"2020","unstructured":"Al-Mhiqani, M.N., Ahmad, R., Zainal Abidin, Z., Yassin, W., Hassan, A., Abdulkareem, K.H., Yunos, Z.: A review of insider threat detection: Classification, machine learning techniques, datasets, open challenges, and recommendations. Appl. Sci. 10(15), 5208 (2020). https:\/\/doi.org\/10.3390\/app10155208","journal-title":"Appl. Sci."},{"issue":"12","key":"1002_CR21","doi-asserted-by":"publisher","first-page":"5320","DOI":"10.3390\/app11125320","volume":"11","author":"R Al-amri","year":"2021","unstructured":"Al-amri, R., Murugesan, R.K., Man, M., Abdulateef, A.F., Al-Sharafi, M.A., Alkahtani, A.A.: A review of machine learning and deep learning techniques for anomaly detection in IoT data. Appl. Sci. 11(12), 5320 (2021). https:\/\/doi.org\/10.3390\/app11125320","journal-title":"Appl. Sci."},{"key":"1002_CR22","doi-asserted-by":"publisher","DOI":"10.1016\/j.mlwa.2023.100470","volume":"12","author":"M Landauer","year":"2023","unstructured":"Landauer, M., Onder, S., Skopik, F., Wurzenberger, M.: Deep learning for anomaly detection in log data: a survey. Mach. Learning with Appl. 12, 100470 (2023). https:\/\/doi.org\/10.1016\/j.mlwa.2023.100470","journal-title":"Mach. Learning with Appl."},{"issue":"1","key":"1002_CR23","doi-asserted-by":"publisher","first-page":"6615899","DOI":"10.1155\/2021\/6615899","volume":"2021","author":"R \u00c1vila","year":"2021","unstructured":"\u00c1vila, R., Khoury, R., Khoury, R., Petrillo, F.: Use of security logs for data leak detection: a systematic literature review. Secur. Commun. Netw. 2021(1), 6615899 (2021). https:\/\/doi.org\/10.1155\/2021\/6615899","journal-title":"Secur. Commun. Netw."},{"issue":"2","key":"1002_CR24","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3303771","volume":"52","author":"I Homoliak","year":"2019","unstructured":"Homoliak, I., Toffalini, F., Guarnizo, J., Elovici, Y., Ochoa, M.: Insight into insiders and it: a survey of insider threat taxonomies, analysis, modeling, and countermeasures. ACM Computing Surv. (CSUR) 52(2), 1\u201340 (2019). https:\/\/doi.org\/10.1145\/3303771","journal-title":"ACM Computing Surv. (CSUR)"},{"key":"1002_CR25","volume":"119","author":"MN Al-Mhiqani","year":"2024","unstructured":"Al-Mhiqani, M.N., Alsboui, T., Al-Shehari, T., hameed Abdulkareem, K., Ahmad, R., & Mohammed, M. A.: Insider threat detection in cyber-physical systems: a systematic literature review. Comput. Electr. Eng. 119, 109489 (2024)","journal-title":"Comput. Electr. Eng."},{"issue":"1","key":"1002_CR26","doi-asserted-by":"crossref","first-page":"6","DOI":"10.1186\/s41044-016-0006-0","volume":"1","author":"IA Gheyas","year":"2016","unstructured":"Gheyas, I.A., Abdallah, A.E.: Detection and prediction of insider threats to cyber security: a systematic literature review and meta-analysis. Big data analytics 1(1), 6 (2016)","journal-title":"Big data analytics"},{"issue":"4","key":"1002_CR27","first-page":"46","volume":"10","author":"K Aram","year":"2019","unstructured":"Aram, K., et al.: So a systematic review of insider threat detection. J. Wirel. Mob. Netw. Ubiquitous Comput Dependable Appl. 10(4), 46\u201367 (2019)","journal-title":"J. Wirel. Mob. Netw. Ubiquitous Comput Dependable Appl."},{"key":"1002_CR28","doi-asserted-by":"publisher","unstructured":"Keele, S.: Guidelines for performing systematic literature reviews in software engineering\u00a05. Technical report, ver. 2.3 ebse technical report. Ebse (2007). https:\/\/doi.org\/10.1201\/b19467-8","DOI":"10.1201\/b19467-8"},{"key":"1002_CR29","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-29044-2_4","author":"C Wohlin","year":"2012","unstructured":"Wohlin, C., Runeson, P., H\u00f6st, M., Ohlsson, M.C., Regnell, B., Wessl\u00e9n, A., Wessl\u00e9n, A.: Systematic literature reviews. Experimentation in software engineering, Springer, Berlin Heidelberg (2012). https:\/\/doi.org\/10.1007\/978-3-642-29044-2_4","journal-title":"Experimentation in software engineering, Springer, Berlin Heidelberg"},{"issue":"5\u20136","key":"1002_CR30","doi-asserted-by":"publisher","first-page":"375","DOI":"10.1080\/713827180","volume":"17","author":"S Zhang","year":"2003","unstructured":"Zhang, S., Zhang, C., Yang, Q.: Data preparation for data mining. Appl. Artif. Intell. 17(5\u20136), 375\u2013381 (2003). https:\/\/doi.org\/10.1080\/713827180","journal-title":"Appl. Artif. Intell."},{"issue":"1","key":"1002_CR31","doi-asserted-by":"publisher","first-page":"9","DOI":"10.5120\/ijca2016908317","volume":"136","author":"DAA Gnana","year":"2016","unstructured":"Gnana, D.A.A., Balamurugan, S.A.A., Leavline, E.J.: Literature review on feature selection methods for high-dimensional data. Int. J. Computer Appl. 136(1), 9\u201317 (2016). https:\/\/doi.org\/10.5120\/ijca2016908317","journal-title":"Int. J. Computer Appl."},{"key":"1002_CR32","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1016\/j.isatra.2023.06.030","volume":"141","author":"W Hong","year":"2023","unstructured":"Hong, W., Yin, J., You, M., Wang, H., Cao, J., Li, J., Man, C.: A graph empowered insider threat detection framework based on daily activities. ISA Trans. 141, 84\u201392 (2023). https:\/\/doi.org\/10.1016\/j.isatra.2023.06.030","journal-title":"ISA Trans."},{"issue":"6","key":"1002_CR33","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3136625","volume":"50","author":"J Li","year":"2017","unstructured":"Li, J., Cheng, K., Wang, S., Morstatter, F., Trevino, R.P., Tang, J., Liu, H.: Feature selection: a data perspective. ACM computing surveys (CSUR) 50(6), 1\u201345 (2017). https:\/\/doi.org\/10.1145\/3136625","journal-title":"ACM computing surveys (CSUR)"},{"issue":"494","key":"1002_CR34","doi-asserted-by":"publisher","first-page":"608","DOI":"10.1198\/jasa.2011.tm10159","volume":"106","author":"A Chatterjee","year":"2011","unstructured":"Chatterjee, A., Lahiri, S.N.: Bootstrapping lasso estimators. J. Am. Stat. Assoc. 106(494), 608\u2013625 (2011). https:\/\/doi.org\/10.1198\/jasa.2011.tm10159","journal-title":"J. Am. Stat. Assoc."},{"key":"1002_CR35","doi-asserted-by":"publisher","unstructured":"Zare, H.: FeaLect: Feature seLection by computing statistical scores (2011). https:\/\/doi.org\/10.32614\/cran.package.fealect","DOI":"10.32614\/cran.package.fealect"},{"issue":"7","key":"1002_CR36","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0040419","volume":"7","author":"M Seo","year":"2012","unstructured":"Seo, M., Oh, S.: CBFS: High performance feature selection algorithm based on feature clearness. PLoS ONE 7(7), e40419 (2012). https:\/\/doi.org\/10.1371\/journal.pone.0040419","journal-title":"PLoS ONE"},{"issue":"1","key":"1002_CR37","doi-asserted-by":"publisher","first-page":"155","DOI":"10.1016\/j.ipm.2004.08.006","volume":"42","author":"C Lee","year":"2006","unstructured":"Lee, C., Lee, G.G.: Information gain and divergence-based feature selection for machine learning-based text categorization. Inf. Process. Manage. 42(1), 155\u2013165 (2006). https:\/\/doi.org\/10.1016\/j.ipm.2004.08.006","journal-title":"Inf. Process. Manage."},{"key":"1002_CR38","doi-asserted-by":"publisher","first-page":"1157","DOI":"10.1007\/978-3-540-35488-8_1","volume":"3","author":"I Guyon","year":"2003","unstructured":"Guyon, I., Elisseeff, A.: An introduction to variable and feature selection. J. Mach. Learn. Res. 3, 1157\u20131182 (2003). https:\/\/doi.org\/10.1007\/978-3-540-35488-8_1","journal-title":"J. Mach. Learn. Res."},{"key":"1002_CR39","doi-asserted-by":"publisher","first-page":"137","DOI":"10.1016\/j.future.2023.09.033","volume":"151","author":"D Olszewski","year":"2024","unstructured":"Olszewski, D., Iwanowski, M., Graniszewski, W.: Dimensionality reduction for detection of anomalies in the iot traffic data. Futur. Gener. Comput. Syst. 151, 137\u2013151 (2024). https:\/\/doi.org\/10.1016\/j.future.2023.09.033","journal-title":"Futur. Gener. Comput. Syst."},{"issue":"4","key":"1002_CR40","doi-asserted-by":"publisher","DOI":"10.1002\/nem.2109","volume":"31","author":"DC Le","year":"2021","unstructured":"Le, D.C., Zincir-Heywood, N.: Exploring anomalous behaviour detection and classification for insider threat identification. Int. J. Network Manage 31(4), e2109 (2021). https:\/\/doi.org\/10.1002\/nem.2109","journal-title":"Int. J. Network Manage"},{"key":"1002_CR41","doi-asserted-by":"publisher","unstructured":"Borade, S. N., & Adgaonkar, R. P.: Comparative analysis of PCA and LDA. In\u00a02011 international conference on business, engineering and industrial applications\u00a0IEEE. 203\u2013206 (2011, June). https:\/\/doi.org\/10.1109\/icbeia.2011.5994243","DOI":"10.1109\/icbeia.2011.5994243"},{"issue":"3","key":"1002_CR42","doi-asserted-by":"publisher","first-page":"259","DOI":"10.3390\/app13010259","volume":"102","author":"PSS Prasad","year":"2024","unstructured":"Prasad, P.S.S., Nayak, S.K., Krishna, M.V.: Enhanced insider threat detection through machine learning approach with imbalanced data resolution. J. Theoretical Appl. Inf. Technol. 102(3), 259 (2024). https:\/\/doi.org\/10.3390\/app13010259","journal-title":"J. Theoretical Appl. Inf. Technol."},{"key":"1002_CR43","doi-asserted-by":"publisher","unstructured":"Goodfellow, I., Bengio, Y., & Courville, A.: Deep learning. MIT press (2016).https:\/\/doi.org\/10.1007\/s10710-017-9314-z","DOI":"10.1007\/s10710-017-9314-z"},{"issue":"3","key":"1002_CR44","doi-asserted-by":"publisher","first-page":"1541","DOI":"10.1109\/tii.2021.3090362","volume":"18","author":"J Yu","year":"2021","unstructured":"Yu, J., Oh, H., Kim, M., Jung, S.: Unusual insider behavior detection framework on enterprise resource planning systems using adversarial recurrent autoencoder. IEEE Trans. Industr. Inf. 18(3), 1541\u20131551 (2021). https:\/\/doi.org\/10.1109\/tii.2021.3090362","journal-title":"IEEE Trans. Industr. Inf."},{"issue":"4","key":"1002_CR45","doi-asserted-by":"publisher","first-page":"201","DOI":"10.53106\/199115992021083204016","volume":"32","author":"Z Zhang","year":"2021","unstructured":"Zhang, Z., Zhao, L., Zhang, Y., Zhou, H., Li, W.: Research on insider threat detection method based on variational autoencoding. J. Computers 32(4), 201\u2013210 (2021). https:\/\/doi.org\/10.53106\/199115992021083204016","journal-title":"J. Computers"},{"issue":"1","key":"1002_CR46","doi-asserted-by":"publisher","first-page":"13","DOI":"10.1016\/j.knosys.2011.06.013","volume":"25","author":"V Garc\u00eda","year":"2012","unstructured":"Garc\u00eda, V., S\u00e1nchez, J.S., Mollineda, R.A.: On the effectiveness of preprocessing methods when dealing with different levels of class imbalance. Knowl.-Based Syst. 25(1), 13\u201321 (2012). https:\/\/doi.org\/10.1016\/j.knosys.2011.06.013","journal-title":"Knowl.-Based Syst."},{"issue":"12","key":"1002_CR47","doi-asserted-by":"publisher","first-page":"4263","DOI":"10.1109\/tcyb.2016.2606104","volume":"47","author":"Q Kang","year":"2016","unstructured":"Kang, Q., Chen, X., Li, S., Zhou, M.: A noise-filtered under-sampling scheme for imbalanced classification. IEEE Trans. Cybern. 47(12), 4263\u20134274 (2016). https:\/\/doi.org\/10.1109\/tcyb.2016.2606104","journal-title":"IEEE Trans. Cybern."},{"key":"1002_CR48","doi-asserted-by":"publisher","unstructured":"Liu, W., & Chawla, S.: Class confidence weighted k NN algorithms for imbalanced data sets. In\u00a0Advances in Knowledge Discovery and Data Mining: 15th Pacific-Asia Conference, PAKDD 2011, Shenzhen, China, May 24\u201327, 2011, Proceedings, Part II 15. Springer Berlin Heidelberg 345\u2013356 (2011). https:\/\/doi.org\/10.1007\/978-3-642-20847-8_29","DOI":"10.1007\/978-3-642-20847-8_29"},{"key":"1002_CR49","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1613\/jair.953","volume":"16","author":"NV Chawla","year":"2002","unstructured":"Chawla, N.V., Bowyer, K.W., Hall, L.O., Kegelmeyer, W.P.: SMOTE: synthetic minority over-sampling technique. J. Artif. Intell. Res. 16, 321\u2013357 (2002). https:\/\/doi.org\/10.1613\/jair.953","journal-title":"J. Artif. Intell. Res."},{"key":"1002_CR50","doi-asserted-by":"publisher","unstructured":"Chawla, N. V., Lazarevic, A., Hall, L. O., & Bowyer, K. W.: SMOTEBoost: Improving prediction of the minority class in boosting. In\u00a0Knowledge Discovery in Databases: PKDD 2003: 7th European Conference on Principles and Practice of Knowledge Discovery in Databases, Cavtat-Dubrovnik, Croatia, September 22\u201326, 2003. Proceedings. Springer Berlin Heidelberg 7 107\u2013119 (2003). https:\/\/doi.org\/10.1007\/978-3-540-39804-2_12","DOI":"10.1007\/978-3-540-39804-2_12"},{"key":"1002_CR51","doi-asserted-by":"publisher","first-page":"40","DOI":"10.1016\/j.eswa.2017.03.073","volume":"82","author":"G Douzas","year":"2017","unstructured":"Douzas, G., Bacao, F.: Self-organizing map oversampling (SOMO) for imbalanced data set learning. Expert Syst. Appl. 82, 40\u201352 (2017). https:\/\/doi.org\/10.1016\/j.eswa.2017.03.073","journal-title":"Expert Syst. Appl."},{"key":"1002_CR52","doi-asserted-by":"publisher","unstructured":"He, H., Bai, Y., Garcia, E. A., & Li, S.: ADASYN: Adaptive synthetic sampling approach for imbalanced learning. In\u00a02008 IEEE international joint conference on neural networks (IEEE world congress on computational intelligence)\u00a0Ieee 1322\u20131328 (2008, June). https:\/\/doi.org\/10.1109\/ijcnn.2008.4633969","DOI":"10.1109\/ijcnn.2008.4633969"},{"key":"1002_CR53","doi-asserted-by":"publisher","unstructured":"Tang, B., & He, H.: KernelADASYN: Kernel based adaptive synthetic data generation for imbalanced learning. In 2015 IEEE congress on evolutionary computation (CEC) IEEE 664\u2013671 (2015, May). https:\/\/doi.org\/10.1109\/cec.2015.7256954","DOI":"10.1109\/cec.2015.7256954"},{"issue":"1","key":"1002_CR54","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1111\/j.0824-7935.2004.t01-1-00228.x","volume":"20","author":"A Estabrooks","year":"2004","unstructured":"Estabrooks, A., Jo, T., Japkowicz, N.: A multiple resampling method for learning from imbalanced data sets. Comput. Intell. 20(1), 18\u201336 (2004). https:\/\/doi.org\/10.1111\/j.0824-7935.2004.t01-1-00228.x","journal-title":"Comput. Intell."},{"issue":"3","key":"1002_CR55","doi-asserted-by":"publisher","first-page":"659","DOI":"10.1109\/tkde.2002.1000348","volume":"14","author":"KM Ting","year":"2002","unstructured":"Ting, K.M.: An instance-weighting method to induce cost-sensitive trees. IEEE Trans. Knowl. Data Eng. 14(3), 659\u2013665 (2002). https:\/\/doi.org\/10.1109\/tkde.2002.1000348","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"1002_CR56","doi-asserted-by":"publisher","unstructured":"McCarthy, K., Zabar, B., & Weiss, G.: Does cost-sensitive learning beat sampling for classifying rare classes? In Proceedings of the 1st International Workshop on Utility-Based Data Mining 69\u201377 (2005). https:\/\/doi.org\/10.1145\/1089827.1089836","DOI":"10.1145\/1089827.1089836"},{"key":"1002_CR57","doi-asserted-by":"publisher","unstructured":"Seiffert, C., Khoshgoftaar, T. M., Van Hulse, J., & Napolitano, A. (2008): A comparative study of data sampling and cost-sensitive learning. In 2008 IEEE International Conference on Data Mining Workshops (pp. 46\u201352). IEEE. https:\/\/doi.org\/10.1109\/icdmw.2008.119","DOI":"10.1109\/icdmw.2008.119"},{"key":"1002_CR58","doi-asserted-by":"publisher","first-page":"554","DOI":"10.1016\/j.asoc.2013.08.014","volume":"14","author":"B Krawczyk","year":"2014","unstructured":"Krawczyk, B., Wo\u017aniak, M., Schaefer, G.: Cost-sensitive decision tree ensembles for effective imbalanced classification. Appl. Soft Comput. 14, 554\u2013562 (2014). https:\/\/doi.org\/10.1016\/j.asoc.2013.08.014","journal-title":"Appl. Soft Comput."},{"issue":"2","key":"1002_CR59","doi-asserted-by":"publisher","first-page":"173","DOI":"10.1016\/j.eij.2021.12.001","volume":"23","author":"M Al-Fawa\u2019reh","year":"2022","unstructured":"Al-Fawa\u2019reh, M., Al-Fayoumi, M., Nashwan, S., Fraihat, S.: Cyber threat intelligence using PCA-DNN model to detect abnormal network behavior. Egypt. Inform. J. 23(2), 173\u2013185 (2022). https:\/\/doi.org\/10.1016\/j.eij.2021.12.001","journal-title":"Egypt. Inform. J."},{"key":"1002_CR60","doi-asserted-by":"publisher","first-page":"123533","DOI":"10.1016\/j.eswa.2024.123533","volume":"249","author":"RG Gayathri","year":"2024","unstructured":"Gayathri, R.G., Sajjanhar, A., Xiang, Y.: Hybrid deep learning model using spcagan augmentation for insider threat analysis. Expert Syst. Appl. 249, 123533 (2024). https:\/\/doi.org\/10.1016\/j.eswa.2024.123533","journal-title":"Expert Syst. Appl."},{"issue":"1","key":"1002_CR61","first-page":"3221","volume":"15","author":"L Van Der Maaten","year":"2014","unstructured":"Van Der Maaten, L.: Accelerating t-SNE using tree-based algorithms. J. Mach. Learn. Res. 15(1), 3221\u20133245 (2014)","journal-title":"J. Mach. Learn. Res."},{"key":"1002_CR62","unstructured":"Hinton, G., Roweis, S.T.: Stochastic neighbor embedding. In: NIPS, vol. 15. Cite- seer, pp. 833\u2013840 (2002)."},{"issue":"3","key":"1002_CR63","doi-asserted-by":"publisher","first-page":"3717","DOI":"10.1109\/tnsm.2022.3222635","volume":"20","author":"J Xiao","year":"2022","unstructured":"Xiao, J., Yang, L., Zhong, F., Wang, X., Chen, H., Li, D.: Robust anomaly-based insider threat detection using graph neural network. IEEE Trans. Netw. Serv. Manag. 20(3), 3717\u20133733 (2022). https:\/\/doi.org\/10.1109\/tnsm.2022.3222635","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"1002_CR64","doi-asserted-by":"publisher","first-page":"351","DOI":"10.1016\/j.eswa.2019.05.043","volume":"135","author":"C Soh","year":"2019","unstructured":"Soh, C., Yu, S., Narayanan, A., Duraisamy, S., Chen, L.: Employee profiling via aspect-based sentiment and network for insider threats detection. Expert Syst. Appl. 135, 351\u2013361 (2019). https:\/\/doi.org\/10.1016\/j.eswa.2019.05.043","journal-title":"Expert Syst. Appl."},{"issue":"2","key":"1002_CR65","doi-asserted-by":"publisher","first-page":"556","DOI":"10.3390\/app11020556","volume":"11","author":"OF Althuwaynee","year":"2021","unstructured":"Althuwaynee, O.F., Aydda, A., Hwang, I.T., Lee, Y.K., Kim, S.W., Park, H.J., Park, Y.: Uncertainty reduction of unlabeled features in landslide inventory using machine learning t-SNE clustering and data mining apriori association rule algorithms. Appl. Sci. 11(2), 556 (2021). https:\/\/doi.org\/10.3390\/app11020556","journal-title":"Appl. Sci."},{"issue":"5","key":"1002_CR66","doi-asserted-by":"publisher","first-page":"68","DOI":"10.3390\/jsan12050068","volume":"12","author":"M Mouyart","year":"2023","unstructured":"Mouyart, M., Medeiros Machado, G., Jun, J.Y.: A multi-agent intrusion detection system optimized by a deep reinforcement learning approach with a dataset enlarged using a generative model to reduce the bias effect. J. Sens. Actuator Netw. 12(5), 68 (2023). https:\/\/doi.org\/10.3390\/jsan12050068","journal-title":"J. Sens. Actuator Netw."},{"issue":"12","key":"1002_CR67","doi-asserted-by":"publisher","first-page":"8477","DOI":"10.1109\/tii.2022.3167672","volume":"18","author":"B Esmaeili","year":"2022","unstructured":"Esmaeili, B., Azmoodeh, A., Dehghantanha, A., Karimipour, H., Zolfaghari, B., Hammoudeh, M.: IIoT deep malware threat hunting: from adversarial example detection to adversarial scenario detection. IEEE Trans. Industr. Inf. 18(12), 8477\u20138486 (2022). https:\/\/doi.org\/10.1109\/tii.2022.3167672","journal-title":"IEEE Trans. Industr. Inf."},{"key":"1002_CR68","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1007\/bf00116251","volume":"1","author":"JR Quinlan","year":"1986","unstructured":"Quinlan, J.R.: Induction of decision trees. Machine learning 1, 81\u2013106 (1986). https:\/\/doi.org\/10.1007\/bf00116251","journal-title":"Induction of decision trees. Machine learning"},{"key":"1002_CR69","doi-asserted-by":"publisher","unstructured":"Quinlan, J. R.: C4. 5: programs for machine learning. Elsevier. (2014). https:\/\/doi.org\/10.1007\/bf00993309","DOI":"10.1007\/bf00993309"},{"issue":"1","key":"1002_CR70","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1002\/widm.8","volume":"1","author":"WY Loh","year":"2011","unstructured":"Loh, W.Y.: Classification and regression trees. Wiley Interdisciplinary Rev.: Data Min. Knowl. Discov. 1(1), 14\u201323 (2011). https:\/\/doi.org\/10.1002\/widm.8","journal-title":"Wiley Interdisciplinary Rev.: Data Min. Knowl. Discov."},{"key":"1002_CR71","doi-asserted-by":"publisher","unstructured":"Mercy Praise, P., Basil Xavier, S., Jose, A., Kathrine, G. J. W., & Andrew, J.: Variants of Crypto-Jacking Attacks and Their Detection Techniques. In International Conference on Applications and Techniques in Information Security (pp. 71\u201387). Singapore: Springer Nature Singapore (2022, December). https:\/\/doi.org\/10.1007\/978-981-99-2264-2_6","DOI":"10.1007\/978-981-99-2264-2_6"},{"key":"1002_CR72","doi-asserted-by":"publisher","DOI":"10.1155\/2018\/7243296","author":"W Park","year":"2018","unstructured":"Park, W., You, Y., Lee, K.: Detecting potential insider threat: analyzing insiders\u2019 sentiment exposed in social media. Secur. Commun. Netw. (2018). https:\/\/doi.org\/10.1155\/2018\/7243296","journal-title":"Secur. Commun. Netw."},{"issue":"10s","key":"1002_CR73","first-page":"378","volume":"12","author":"SA Kawalkar","year":"2024","unstructured":"Kawalkar, S.A., Bhoyar, D.B.: Design of an efficient cloud security model through federated learning, blockchain, ai-driven policies, and zero trust frameworks. Int. J. Intell. Syst. Appl. Eng. 12(10s), 378\u2013388 (2024)","journal-title":"Int. J. Intell. Syst. Appl. Eng."},{"key":"1002_CR74","doi-asserted-by":"publisher","first-page":"652","DOI":"10.1016\/j.future.2021.06.036","volume":"125","author":"F Janjua","year":"2021","unstructured":"Janjua, F., Masood, A., Abbas, H., Rashid, I., Khan, M.M.Z.M.: Textual analysis of traitor-based dataset through semi supervised machine learning. Futur. Gener. Comput. Syst. 125, 652\u2013660 (2021). https:\/\/doi.org\/10.1016\/j.future.2021.06.036","journal-title":"Futur. Gener. Comput. Syst."},{"key":"1002_CR75","doi-asserted-by":"publisher","unstructured":"Deng, H. , Runger, G. , Tuv, E.: Bias of importance measures for multi-valued attributes and solutions. In: International Conference on Artificial Neural Net- works, 293\u2013300 2011. https:\/\/doi.org\/10.1007\/978-3-642-21738-8_38","DOI":"10.1007\/978-3-642-21738-8_38"},{"key":"1002_CR76","doi-asserted-by":"publisher","DOI":"10.1017\/cbo9780511801389","author":"N Cristianini","year":"2000","unstructured":"Cristianini, N., Shawe-Taylor, J.: An introduction to support vector machines and other kernel-based learning methods. Cambridge University Press (2000). https:\/\/doi.org\/10.1017\/cbo9780511801389","journal-title":"Cambridge University Press"},{"key":"1002_CR77","doi-asserted-by":"publisher","unstructured":"Wang, X., Tan, Q., Shi, J., Su, S., & Wang, M.:. Insider threat detection using characterizing user behavior. In\u00a02018 IEEE Third International Conference on Data Science in Cyberspace (DSC)\u00a0476\u2013482 (2018, June). https:\/\/doi.org\/10.1109\/dsc.2018.00077","DOI":"10.1109\/dsc.2018.00077"},{"issue":"4","key":"1002_CR78","doi-asserted-by":"publisher","first-page":"4573","DOI":"10.1007\/s12652-023-04581-1","volume":"14","author":"M Singh","year":"2023","unstructured":"Singh, M., Mehtre, B.M., Sangeetha, S., Govindaraju, V.: User behaviour based insider threat detection using a hybrid learning approach. J. Ambient. Intell. Humaniz. Comput. 14(4), 4573\u20134593 (2023). https:\/\/doi.org\/10.1007\/s12652-023-04581-1","journal-title":"J. Ambient. Intell. Humaniz. Comput."},{"issue":"2s","key":"1002_CR79","first-page":"281","volume":"10","author":"RC Patil","year":"2022","unstructured":"Patil, R.C., Kumar, A., Narmadha, T., Suganthi, M., Rao, A.V.S.R., Rajesh, A.: Data leakage detection in cloud computing environment using classification based on deep learning architectures. Int. J. Intell. Syst. Appl. Eng. 10(2s), 281\u2013285 (2022)","journal-title":"Int. J. Intell. Syst. Appl. Eng."},{"key":"1002_CR80","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2022.108519","volume":"105","author":"S Asha","year":"2023","unstructured":"Asha, S., Shanmugapriya, D., Padmavathi, G.: Malicious insider threat detection using variation of sampling methods for anomaly detection in cloud environment. Comput. Electr. Eng. 105, 108519 (2023). https:\/\/doi.org\/10.1016\/j.compeleceng.2022.108519","journal-title":"Comput. Electr. Eng."},{"key":"1002_CR81","doi-asserted-by":"publisher","unstructured":"Arora, D., & Li, K. F.: Detecting anomalies in the data residing over the cloud. In 2017 31st International Conference on Advanced Information Networking and Applications Workshops (WAINA) IEEE 541\u2013546 (2017, March). https:\/\/doi.org\/10.1109\/waina.2017.124","DOI":"10.1109\/waina.2017.124"},{"key":"1002_CR82","doi-asserted-by":"publisher","unstructured":"Abdelsalam, M., Krishnan, R., & Sandhu, R.: Clustering-based IaaS cloud monitoring. In 2017 IEEE 10th international conference on cloud computing (CLOUD) IEEE 672\u2013679 (2017, June). https:\/\/doi.org\/10.1109\/cloud.2017.90","DOI":"10.1109\/cloud.2017.90"},{"issue":"10","key":"1002_CR83","doi-asserted-by":"publisher","first-page":"5875","DOI":"10.3390\/app13105875","volume":"13","author":"S Mishra","year":"2023","unstructured":"Mishra, S.: Exploring the impact of ai-based cyber security financial sector management. Appl. Sci. 13(10), 5875 (2023). https:\/\/doi.org\/10.3390\/app13105875","journal-title":"Appl. Sci."},{"key":"1002_CR84","doi-asserted-by":"publisher","first-page":"435","DOI":"10.1007\/s10586-014-0403-y","volume":"18","author":"DS Punithavathani","year":"2015","unstructured":"Punithavathani, D.S., Sujatha, K., Jain, J.M.: Surveillance of anomaly and misuse in critical networks to counter insider threats using computational intelligence. Clust. Comput. 18, 435\u2013451 (2015). https:\/\/doi.org\/10.1007\/s10586-014-0403-y","journal-title":"Clust. Comput."},{"key":"1002_CR85","doi-asserted-by":"publisher","unstructured":"Gegan, R., Perry, B., Ghosal, D., & Bishop, M.: Insider attack detection for science dmzs using system performance data. In 2020 IEEE Conference on Communications and Network Security (CNS) IEEE 1\u20139 (2020, June). https:\/\/doi.org\/10.1109\/cns48642.2020.9162260","DOI":"10.1109\/cns48642.2020.9162260"},{"issue":"24","key":"1002_CR86","doi-asserted-by":"publisher","first-page":"13021","DOI":"10.3390\/app132413021","volume":"13","author":"J Wang","year":"2023","unstructured":"Wang, J., Sun, Q., Zhou, C.: Insider threat detection based on deep clustering of Multi-Source behavioral events. Appl. Sci. 13(24), 13021 (2023). https:\/\/doi.org\/10.3390\/app132413021","journal-title":"Appl. Sci."},{"issue":"6","key":"1002_CR87","doi-asserted-by":"publisher","first-page":"3937","DOI":"10.1007\/s10586-022-03622-2","volume":"25","author":"R Jindal","year":"2022","unstructured":"Jindal, R., Singh, I.: Detecting malicious transactions in database using hybrid metaheuristic clustering and frequent sequential pattern mining. Clust. Comput. 25(6), 3937\u20133959 (2022). https:\/\/doi.org\/10.1007\/s10586-022-03622-2","journal-title":"Clust. Comput."},{"key":"1002_CR88","doi-asserted-by":"publisher","unstructured":"Xin, W., Shen, Q., Feng, K., Xia, Y., Wu, Z., & Lin, Z.: Personalized User Profiles-based Insider Threat Detection for Distributed File System. In 2022 IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) IEEE 1441\u20131446 (2022, December). https:\/\/doi.org\/10.1109\/trustcom56396.2022.00204","DOI":"10.1109\/trustcom56396.2022.00204"},{"key":"1002_CR89","doi-asserted-by":"publisher","unstructured":"Gamachchi, A., & Boztas, S.: Insider threat detection through attributed graph clustering. In 2017 ieee trustcom\/bigdatase\/ices IEEE 112\u2013119 (2017, August). https:\/\/doi.org\/10.1109\/trustcom\/bigdatase\/icess.2017.227","DOI":"10.1109\/trustcom\/bigdatase\/icess.2017.227"},{"key":"1002_CR90","unstructured":"Conway, D., & White, J.: Machine learning for hackers. \u201c O\u2019Reilly Media, Inc.\u201d (2012)."},{"key":"1002_CR91","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-45528-0_10","author":"M Christopher","year":"2006","unstructured":"Christopher, M.: Bishop.: Pattern Recognition and Machine Learning. Springer (2006). https:\/\/doi.org\/10.1007\/978-0-387-45528-0_10","journal-title":"Bishop.: Pattern Recognition and Machine Learning. Springer"},{"key":"1002_CR92","doi-asserted-by":"publisher","first-page":"5156","DOI":"10.1007\/s11227-018-2413-7","volume":"74","author":"A Mehmood","year":"2018","unstructured":"Mehmood, A., Mukherjee, M., Ahmed, S.H., Song, H., Malik, K.M.: NBC-MAIDS: Na\u00efve Bayesian classification technique in multi-agent system-enriched IDS for securing IoT against DDoS attacks. J. Supercomput. 74, 5156\u20135170 (2018). https:\/\/doi.org\/10.1007\/s11227-018-2413-7","journal-title":"J. Supercomput."},{"key":"1002_CR93","doi-asserted-by":"publisher","unstructured":"Alkhaldi, R., Ehsan, S., & Farooq, H.: Detecting Insider Threats Using VADER and NA\u00cfVE BAYS Algorithms. In 2023 7th International Symposium on Computer Science and Intelligent Control (ISCSIC) IEEE 387\u2013390 (2023, October). https:\/\/doi.org\/10.1109\/iscsic60498.2023.00085","DOI":"10.1109\/iscsic60498.2023.00085"},{"issue":"2","key":"1002_CR94","doi-asserted-by":"publisher","first-page":"123","DOI":"10.1007\/bf00058655","volume":"24","author":"L Breiman","year":"1996","unstructured":"Breiman, L.: Bagging predictors. Mach. Learn. 24(2), 123\u2013140 (1996). https:\/\/doi.org\/10.1007\/bf00058655","journal-title":"Mach. Learn."},{"issue":"1","key":"1002_CR95","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1023\/a:1010933404324","volume":"45","author":"L Breiman","year":"2001","unstructured":"Breiman, L.: Random forests. Mach. Learn. 45(1), 5\u201332 (2001). https:\/\/doi.org\/10.1023\/a:1010933404324","journal-title":"Mach. Learn."},{"issue":"2","key":"1002_CR96","doi-asserted-by":"publisher","first-page":"04021005","DOI":"10.1061\/(asce)is.1943-555x.0000602","volume":"27","author":"P Madeh","year":"2021","unstructured":"Madeh, P., S., El-Diraby, T.E.: Using machine learning to examine impact of type of performance indicator on flexible pavement deterioration modeling. J. Infrastruct. Syst. 27(2), 04021005 (2021). https:\/\/doi.org\/10.1061\/(asce)is.1943-555x.0000602","journal-title":"J. Infrastruct. Syst."},{"key":"1002_CR97","doi-asserted-by":"publisher","DOI":"10.1109\/tifs.2024.3372771","author":"D He","year":"2024","unstructured":"He, D., Lv, X., Xu, X., Chan, S., Choo, K.K.R.: Double-layer detection of internal threat in enterprise systems based on deep learning. IEEE Trans. Inf. Forensics Secur. (2024). https:\/\/doi.org\/10.1109\/tifs.2024.3372771","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"16","key":"1002_CR98","doi-asserted-by":"publisher","first-page":"11414","DOI":"10.1016\/j.jfranklin.2023.09.004","volume":"360","author":"X Kan","year":"2023","unstructured":"Kan, X., Fan, Y., Zheng, J., Chi, C.H., Song, W., Kudreyko, A.: Data adjusting strategy and optimized XGBoost algorithm for novel insider threat detection model. J. Franklin Inst. 360(16), 11414\u201311443 (2023). https:\/\/doi.org\/10.1016\/j.jfranklin.2023.09.004","journal-title":"J. Franklin Inst."},{"key":"1002_CR99","doi-asserted-by":"publisher","unstructured":"Suresh, P. V., & Madhavu, M. L.: Insider attack: Internal cyber-attack detection using machine learning. In 2021 12th International conference on computing communication and networking technologies (ICCCNT) IEEE 1\u20137 (2021, July). https:\/\/doi.org\/10.1109\/icccnt51525.2021.9579549","DOI":"10.1109\/icccnt51525.2021.9579549"},{"key":"1002_CR100","doi-asserted-by":"publisher","unstructured":"Igbe, O., & Saadawi, T.: Insider threat detection using an artificial immune system algorithm. In 2018 9th IEEE Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON) IEEE 297\u2013302 (2018, November). https:\/\/doi.org\/10.1109\/uemcon.2018.8796583","DOI":"10.1109\/uemcon.2018.8796583"},{"issue":"1","key":"1002_CR101","doi-asserted-by":"publisher","first-page":"67","DOI":"10.1109\/4235.585893","volume":"1","author":"DH Wolpert","year":"1997","unstructured":"Wolpert, D.H., Macready, W.G.: No free lunch theorems for optimization. IEEE Trans. Evol. Comput. 1(1), 67\u201382 (1997). https:\/\/doi.org\/10.1109\/4235.585893","journal-title":"IEEE Trans. Evol. Comput."},{"key":"1002_CR102","doi-asserted-by":"publisher","unstructured":"Le, D. C., Khanchi, S., Zincir-Heywood, A. N., & Heywood, M. I.: Benchmarking evolutionary computation approaches to insider threat detection. In Proceedings of the genetic and evolutionary computation conference 1286\u20131293 (2018, July). https:\/\/doi.org\/10.1145\/3205455.3205612","DOI":"10.1145\/3205455.3205612"},{"key":"1002_CR103","doi-asserted-by":"publisher","unstructured":"Le, D. C., Zincir-Heywood, A. N., & Heywood, M. I.: Dynamic insider threat detection based on adaptable genetic programming. In 2019 IEEE symposium series on computational Intelligence (SSCI) IEEE 2579\u20132586 (2019, December). https:\/\/doi.org\/10.1109\/ssci44817.2019.9003134","DOI":"10.1109\/ssci44817.2019.9003134"},{"issue":"4","key":"1002_CR104","doi-asserted-by":"publisher","first-page":"4573","DOI":"10.1007\/s12652-023-04581-1","volume":"14","author":"M Singh","year":"2023","unstructured":"Singh, M., Mehtre, B.M., Sangeetha, S., Govindaraju, V.: User behaviour-based insider threat detection using a hybrid learning approach. J. Ambient. Intell. Humaniz. Comput. 14(4), 4573\u20134593 (2023). https:\/\/doi.org\/10.1007\/s12652-023-04581-1","journal-title":"J. Ambient. Intell. Humaniz. Comput."},{"key":"1002_CR105","doi-asserted-by":"publisher","unstructured":"Bengio, Y. (2009): Learning Deep Architectures for AI. Now Publishers Inc. Foundations and trends\u00ae in Machine Learning, 2 (1): 1-127 https:\/\/doi.org\/10.1561\/9781601982957","DOI":"10.1561\/9781601982957"},{"key":"1002_CR106","doi-asserted-by":"publisher","DOI":"10.14569\/ijacsa.2021.0120166","author":"MN Al-Mhiqani","year":"2021","unstructured":"Al-Mhiqani, M.N., Ahmed, R., Abidin, Z.Z., Isnin, S.N.: An integrated imbalanced learning and deep neural network model for insider threat detection. Int. J. Adv. Computer Sci. Appl. (2021). https:\/\/doi.org\/10.14569\/ijacsa.2021.0120166","journal-title":"Int. J. Adv. Computer Sci. Appl."},{"key":"1002_CR107","doi-asserted-by":"publisher","DOI":"10.1109\/access.2024.3404814","author":"P Lavanya","year":"2024","unstructured":"Lavanya, P., Glory, H.A., Sriram, V.S.: Mitigating insider threat: a neural network approach for enhanced security. IEEE Access (2024). https:\/\/doi.org\/10.1109\/access.2024.3404814","journal-title":"IEEE Access"},{"issue":"4","key":"1002_CR108","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1007\/bf02551274","volume":"2","author":"G Cybenko","year":"1989","unstructured":"Cybenko, G.: Approximation by superpositions of a sigmoidal function. Math. Control Signals Syst. 2(4), 303\u2013314 (1989). https:\/\/doi.org\/10.1007\/bf02551274","journal-title":"Math. Control Signals Syst."},{"issue":"1","key":"1002_CR109","doi-asserted-by":"publisher","first-page":"215","DOI":"10.1113\/jphysiol.1968.sp008455","volume":"195","author":"DH Hubel","year":"1968","unstructured":"Hubel, D.H., Wiesel, T.N.: Receptive fields and functional architecture of monkey striate cortex. J. Physiol. 195(1), 215\u2013243 (1968). https:\/\/doi.org\/10.1113\/jphysiol.1968.sp008455","journal-title":"J. Physiol."},{"issue":"11","key":"1002_CR110","doi-asserted-by":"publisher","first-page":"2278","DOI":"10.1109\/5.726791","volume":"86","author":"Y LeCun","year":"1998","unstructured":"LeCun, Y., Bottou, L., Bengio, Y., Haffner, P.: Gradient-based learning applied to document recognition. Proc. IEEE 86(11), 2278\u20132324 (1998). https:\/\/doi.org\/10.1109\/5.726791","journal-title":"Proc. IEEE"},{"key":"1002_CR111","doi-asserted-by":"publisher","first-page":"1097","DOI":"10.1145\/3065386","volume":"25","author":"A Krizhevsky","year":"2012","unstructured":"Krizhevsky, A., Sutskever, I., Hinton, G.E.: ImageNet classification with deep convolutional neural networks. Adv. Neural. Inf. Process. Syst. 25, 1097\u20131105 (2012). https:\/\/doi.org\/10.1145\/3065386","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"1002_CR112","doi-asserted-by":"publisher","unstructured":"He, K. , Zhang, X. , Ren, S. , Sun, J.: Deep residual learning for image recognition. In: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, pp. 770\u2013778 (2016). https:\/\/doi.org\/10.1109\/cvpr.2016.90","DOI":"10.1109\/cvpr.2016.90"},{"key":"1002_CR113","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2023.119925","volume":"224","author":"P Pal","year":"2023","unstructured":"Pal, P., Chattopadhyay, P., Swarnkar, M.: Temporal feature aggregation with attention for insider threat detection from activity logs. Expert Syst. Appl. 224, 119925 (2023). https:\/\/doi.org\/10.1016\/j.eswa.2023.119925","journal-title":"Expert Syst. Appl."},{"key":"1002_CR114","doi-asserted-by":"publisher","unstructured":"Yuan, F., Cao, Y., Shang, Y., Liu, Y., Tan, J., & Fang, B.: Insider threat detection with deep neural network. In\u00a0Computational Science\u2013ICCS 2018: 18th International Conference, Wuxi, China, June 11\u201313, 2018, Proceedings, Part I 18\u00a0Springer International Publishing 43\u201354 (2018). https:\/\/doi.org\/10.1007\/978-3-319-93698-7_4","DOI":"10.1007\/978-3-319-93698-7_4"},{"key":"1002_CR115","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2023.103434","volume":"73","author":"K Randive","year":"2023","unstructured":"Randive, K., Mohan, R., Sivakrishna, A.M.: An efficient pattern-based approach for insider threat classification using the image-based feature representation. J. Inf. Secur. Appl. 73, 103434 (2023). https:\/\/doi.org\/10.1016\/j.jisa.2023.103434","journal-title":"J. Inf. Secur. Appl."},{"issue":"14","key":"1002_CR116","first-page":"200","volume":"14","author":"S Dupond","year":"2019","unstructured":"Dupond, S.: A thorough review on the current advance of neural network structures. Annu. Rev. Control. 14(14), 200\u2013230 (2019)","journal-title":"Annu. Rev. Control."},{"issue":"1","key":"1002_CR117","first-page":"180","volume":"3","author":"M Miljanovic","year":"2012","unstructured":"Miljanovic, M.: Comparative analysis of recurrent and finite impulse response neural networks in time series prediction. Indian J. Computer Sci. Eng. 3(1), 180\u2013191 (2012)","journal-title":"Indian J. Computer Sci. Eng."},{"key":"1002_CR118","doi-asserted-by":"publisher","unstructured":"Tang, T.A., Mhamdi, L., McLernon, D., Zaidi, S.A.R., Ghogho, M.: Deep recurrent neural network for intrusion detection in SDN-based networks. In: 2018 4th IEEE Conference on Network Softwarization and Workshops (NetSoft), 202\u2013206 (2018). https:\/\/doi.org\/10.14569\/ijacsa.2022.0130587","DOI":"10.14569\/ijacsa.2022.0130587"},{"key":"1002_CR119","doi-asserted-by":"crossref","unstructured":"Alshehri, A. (2022): Relational Deep Learning Detection with Multi-Sequence Representation for Insider Threats. International Journal of Advanced Computer Science and Applications, 13 (5).","DOI":"10.14569\/IJACSA.2022.0130587"},{"issue":"6","key":"1002_CR120","doi-asserted-by":"publisher","first-page":"451","DOI":"10.1007\/s42979-022-01304-9","volume":"3","author":"S Senthil Kumar","year":"2022","unstructured":"Senthil Kumar, S., Arockia Panimalar, S., Krishnakumar, A., Prakash, M.: Investigation of cybersecurity attacks and threats on cloud using black widow algorithm with recurrent neural network. SN Computer Science 3(6), 451 (2022). https:\/\/doi.org\/10.1007\/s42979-022-01304-9","journal-title":"SN Computer Science"},{"issue":"10","key":"1002_CR121","doi-asserted-by":"publisher","first-page":"2451","DOI":"10.1162\/089976600300015015","volume":"12","author":"FA Gers","year":"2000","unstructured":"Gers, F.A., Schmidhuber, J., Cummins, F.: Learning to forget: continual prediction with LSTM. Neural Comput. 12(10), 2451\u20132471 (2000). https:\/\/doi.org\/10.1162\/089976600300015015","journal-title":"Neural Comput."},{"key":"1002_CR122","doi-asserted-by":"publisher","unstructured":"Cho, K., Van Merri\u00ebnboer, B., Gulcehre, C., Bahdanau, D., Bougares, F., Schwenk, H., Bengio, Y.: Learning phrase representations using RNN encoder-decoder for statistical machine translation (2014). arXiv preprint arXiv:1406.1078. https:\/\/doi.org\/10.3115\/v1\/d14-1179","DOI":"10.3115\/v1\/d14-1179"},{"key":"1002_CR123","doi-asserted-by":"publisher","unstructured":"Meng, F., Lou, F., Fu, Y., & Tian, Z.: Deep learning based attribute classification insider threat detection for data security. In 2018 IEEE third international conference on data science in cyberspace (DSC) IEEE 576\u2013581 (2018, June). https:\/\/doi.org\/10.1109\/dsc.2018.00092","DOI":"10.1109\/dsc.2018.00092"},{"key":"1002_CR124","doi-asserted-by":"publisher","unstructured":"Lu, J., & Wong, R. K.: Insider threat detection with long short-term memory. In Proceedings of the Australasian Computer Science Week Multiconference 1\u201310 (2019, January). https:\/\/doi.org\/10.1145\/3290688.3290692","DOI":"10.1145\/3290688.3290692"},{"key":"1002_CR125","doi-asserted-by":"publisher","unstructured":"Zhang, F., Ma, X., & Huang, W.: SeqA-ITD: User behavior sequence augmentation for insider threat detection at multiple time granularities. In 2022 International Joint Conference on Neural Networks (IJCNN) IEEE 1\u20137 (2022, July). https:\/\/doi.org\/10.1109\/ijcnn55064.2022.9892163","DOI":"10.1109\/ijcnn55064.2022.9892163"},{"key":"1002_CR126","doi-asserted-by":"publisher","unstructured":"Liu, J., Zhang, J., Du, C., & Wang, D.: Mueba: A multi-model system for insider threat detection. In International Conference on Machine Learning for Cyber Security. Cham: Springer Nature Switzerland 296\u2013310 (2022, December). https:\/\/doi.org\/10.1007\/978-3-031-20096-0_23","DOI":"10.1007\/978-3-031-20096-0_23"},{"key":"1002_CR127","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.103066","volume":"126","author":"M AlSlaiman","year":"2023","unstructured":"AlSlaiman, M., Salman, M.I., Saleh, M.M., Wang, B.: Enhancing false negative and positive rates for efficient insider threat detection. Comput. Secur. 126, 103066 (2023). https:\/\/doi.org\/10.1016\/j.cose.2022.103066","journal-title":"Comput. Secur."},{"issue":"1","key":"1002_CR128","doi-asserted-by":"publisher","first-page":"2","DOI":"10.1186\/s42400-023-00190-9","volume":"7","author":"S Song","year":"2024","unstructured":"Song, S., Gao, N., Zhang, Y., Ma, C.: BRITD: behavior rhythm insider threat detection with time awareness and user adaptation. Cybersecurity 7(1), 2 (2024). https:\/\/doi.org\/10.1186\/s42400-023-00190-9","journal-title":"Cybersecurity"},{"key":"1002_CR129","doi-asserted-by":"publisher","unstructured":"Huang, W., Zhu, H., Li, C., Lv, Q., Wang, Y., & Yang, H.: Itdbert: Temporal-semantic representation for insider threat detection. In 2021 IEEE Symposium on Computers and Communications (ISCC) IEEE 1\u20137 (2021, September). https:\/\/doi.org\/10.1109\/iscc53001.2021.9631538","DOI":"10.1109\/iscc53001.2021.9631538"},{"key":"1002_CR130","unstructured":"Bai, S., Kolter, J. Z., Koltun, V.: An empirical evaluation of generic convolutional and recurrent networks for sequence modeling. arXiv preprint arXiv: 1803.01271 (2018)."},{"key":"1002_CR131","doi-asserted-by":"publisher","first-page":"143266","DOI":"10.1109\/access.2021.3118297","volume":"9","author":"R Nasir","year":"2021","unstructured":"Nasir, R., Afzal, M., Latif, R., Iqbal, W.: Behavioral based insider threat detection using deep learning. IEEE Access 9, 143266\u2013143274 (2021). https:\/\/doi.org\/10.1109\/access.2021.3118297","journal-title":"IEEE Access"},{"key":"1002_CR132","doi-asserted-by":"publisher","unstructured":"Singh, M., Mehtre, B. M., & Sangeetha, S.: User behavior profiling using ensemble approach for insider threat detection. In\u00a02019 IEEE 5th International Conference on Identity, Security, and Behavior Analysis (ISBA)\u00a0IEEE 1\u20138 (2019, January). https:\/\/doi.org\/10.1109\/isba.2019.8778466","DOI":"10.1109\/isba.2019.8778466"},{"key":"1002_CR133","doi-asserted-by":"publisher","unstructured":"Sharma, B., Pokharel, P., & Joshi, B.: User behavior analytics for anomaly detection using LSTM autoencoder-insider threat detection. In\u00a0Proceedings of the 11th international conference on advances in information technology\u00a01\u20139 (2020, July). https:\/\/doi.org\/10.1145\/3406601.3406610","DOI":"10.1145\/3406601.3406610"},{"key":"1002_CR134","doi-asserted-by":"publisher","unstructured":"He, W., Wu, X., Wu, J., Xie, X., Qiu, L., & Sun, L.: Insider Threat Detection Based on User Historical Behavior and Attention Mechanism. In 2021 IEEE Sixth International Conference on Data Science in Cyberspace (DSC) 564\u2013569 (2021, October). https:\/\/doi.org\/10.1109\/dsc53577.2021.00089","DOI":"10.1109\/dsc53577.2021.00089"},{"key":"1002_CR135","doi-asserted-by":"publisher","unstructured":"Wang, Y., Zhang, C., & Yu, J.: Towards Massive Log Anomaly Detection Based on an Enhanced Multi-dimensional Time-domain LSTM. In 2023 IEEE Ninth International Conference on Big Data Computing Service and Applications (BigDataService) 197\u2013204 (2023, July). https:\/\/doi.org\/10.1109\/bigdataservice58306.2023.00042","DOI":"10.1109\/bigdataservice58306.2023.00042"},{"key":"1002_CR136","doi-asserted-by":"publisher","unstructured":"Liu, H.: A insider threat detection system based on user and entity behavior analysis. In Journal of Physics: Conference Series IOP Publishing 1994(1) 012021 (2021, August). https:\/\/doi.org\/10.1088\/1742-6596\/1994\/1\/012021","DOI":"10.1088\/1742-6596\/1994\/1\/012021"},{"key":"1002_CR137","doi-asserted-by":"publisher","unstructured":"Paul, S., & Mishra, S.: LAC: LSTM autoencoder with community for insider threat detection. In proceedings of the 4th International Conference on Big Data Research 71\u201377 (2020, November). https:\/\/doi.org\/10.1145\/3445945.3445958","DOI":"10.1145\/3445945.3445958"},{"key":"1002_CR138","doi-asserted-by":"publisher","unstructured":"Singh, M., Mehtre, B. M., & Sangeetha, S.: User behaviour-based insider threat detection in critical infrastructures. In 2021 2nd International Conference on Secure Cyber Computing and Communications (ICSCCC) IEEE 489\u2013494 (2021, May). https:\/\/doi.org\/10.1109\/icsccc51823.2021.9478137","DOI":"10.1109\/icsccc51823.2021.9478137"},{"key":"1002_CR139","doi-asserted-by":"publisher","unstructured":"Zhang, D., Zheng, Y., Wen, Y., Xu, Y., Wang, J., Yu, Y., & Meng, D.: Role-based log analysis applying deep learning for insider threat detection. In Proceedings of the 1st workshop on security-oriented designs of computer architectures and processors 18\u201320 (2018, January). https:\/\/doi.org\/10.1145\/3267494.3267495","DOI":"10.1145\/3267494.3267495"},{"key":"1002_CR140","doi-asserted-by":"publisher","unstructured":"Meng, F., Lu, P., Li, J., Hu, T., Yin, M., & Lou, F.: GRU and Multi-autoencoder based Insider Threat Detection for Cyber Security. In 2021 IEEE Sixth International Conference on Data Science in Cyberspace (DSC) IEEE 203\u2013210 (2021, October). https:\/\/doi.org\/10.1109\/dsc53577.2021.00035","DOI":"10.1109\/dsc53577.2021.00035"},{"issue":"7","key":"1002_CR141","doi-asserted-by":"publisher","first-page":"4362","DOI":"10.1109\/tii.2019.2891261","volume":"15","author":"F Zhang","year":"2019","unstructured":"Zhang, F., Kodituwakku, H.A.D.E., Hines, J.W., Coble, J.: Multilayer data-driven cyber-attack detection system for industrial control systems based on network, system, and process data. IEEE Trans. Industr. Inf. 15(7), 4362\u20134369 (2019). https:\/\/doi.org\/10.1109\/tii.2019.2891261","journal-title":"IEEE Trans. Industr. Inf."},{"issue":"2","key":"1002_CR142","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/discex.2000.821506","volume":"2000","author":"RP Lippmann","year":"2000","unstructured":"Lippmann, R.P., Fried, D.J., Graf, I., Haines, J.W., Kendall, K.R., McClung, D., Weber, D., Webster, S.E., Wyschogrod, D., Cunningham, R.K., Zissman, M.A.: Evaluating intrusion detection systems: The 1998 DARPA off-line intrusion detection evaluation. Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX 2000(2), 12\u201326 (2000). https:\/\/doi.org\/10.1109\/discex.2000.821506","journal-title":"Proceedings - DARPA Information Survivability Conference and Exposition, DISCEX"},{"key":"1002_CR143","unstructured":"DARPA, 1998,1999. http:\/\/www.tp-ontrol.hu\/index.php\/TP _ Toolbox."},{"issue":"4","key":"1002_CR144","doi-asserted-by":"publisher","first-page":"262","DOI":"10.1145\/382912.382923","volume":"3","author":"J Mchugh","year":"2000","unstructured":"Mchugh, J.: Testing intrusion detection systems: a critique of the 1998 and 1999 DARPA intrusion detection system evaluations as performed by lincoln laboratoRY. ACM Trans. Inf. Syst. Secur. 3(4), 262\u2013294 (2000). https:\/\/doi.org\/10.1145\/382912.382923","journal-title":"ACM Trans. Inf. Syst. Secur."},{"issue":"3","key":"1002_CR145","doi-asserted-by":"publisher","first-page":"919","DOI":"10.1016\/j.eswa.2013.08.022","volume":"41","author":"J Benito Camina","year":"2014","unstructured":"Benito Camina, J., Hernandez-Gracidas, C., Monroy, R., Trejo, L.: The Windows users and intruder simulations logs dataset (WUIL): an experimental framework for masquerade detection mechanisms. Expert Syst. Appl. 41(3), 919\u2013930 (2014). https:\/\/doi.org\/10.1016\/j.eswa.2013.08.022","journal-title":"Expert Syst. Appl."},{"key":"1002_CR146","unstructured":"Salem, M. B., & Stolfo, S. J.: Masquerade attack detection using a search-behavior modeling approach. Columbia University, Computer Science Department, Technical Report CUCS-027\u201309 (2009)."},{"key":"1002_CR147","doi-asserted-by":"publisher","unstructured":"Klimt, B., & Yang, Y.: The enron corpus: A new dataset for email classification research. In European conference on machine learning. Berlin, Heidelberg: Springer Berlin Heidelberg 217\u2013226 (2004, September). https:\/\/doi.org\/10.1007\/978-3-540-30115-8_22","DOI":"10.1007\/978-3-540-30115-8_22"},{"issue":"2","key":"1002_CR148","doi-asserted-by":"publisher","first-page":"331","DOI":"10.1109\/tsmca.2011.2162500","volume":"42","author":"E Santos","year":"2012","unstructured":"Santos, E., Nguyen, H., Yu, F., Kim, K.J., Li, D., Wilkinson, J.T., Olson, A., Russell, J., Clark, B.: Intelligence analyses and the insider threat. IEEE Trans. Syst. Man Cybern. Part A Syst. Hum. 42(2), 331\u2013347 (2012). https:\/\/doi.org\/10.1109\/tsmca.2011.2162500","journal-title":"IEEE Trans. Syst. Man Cybern. Part A Syst. Hum."},{"issue":"1","key":"1002_CR149","first-page":"58","volume":"16","author":"M Schonlau","year":"2001","unstructured":"Schonlau, M., DuMouchel, W., Ju, W.H., Karr, A.F., Theus, M., Vardi, Y.: Computer intrusion: detecting masquerades. Stat. Sci. 16(1), 58\u201374 (2001)","journal-title":"Stat. Sci."},{"key":"1002_CR150","unstructured":"Greenberg, S.: Using unix: Collected traces of 168 users.\u00a0Advanced Technologies, The Alberta Research Council, 1\u201313 (1988)."},{"key":"1002_CR151","unstructured":"Lane, T. and Brodley, C.: Applications of Machine Learning to Anomaly Detection. Applications of Artificial Intelligence in Engineering, Southampton, UK: Comput. Mech. Publications. 11314 (1997)."},{"issue":"1","key":"1002_CR152","first-page":"62","volume":"3","author":"F Linton","year":"2013","unstructured":"Linton, F., Joy, D., Schaefer, H.P., Charron, A.: OWL: a recommender system for organization-wide learning hans-peter schaefer. Educ. Technol. Soc. 3(1), 62\u201376 (2013)","journal-title":"Educ. Technol. Soc."},{"key":"1002_CR153","unstructured":"Kent, A. D.: Comprehensive, multi-source cyber-security events data set (No. LA-UR-15\u201323810). Los Alamos National Lab. (LANL), Los Alamos, NM (United States) (2015)."},{"key":"1002_CR154","doi-asserted-by":"publisher","first-page":"98","DOI":"10.1109\/spw.2013.37","volume":"2013","author":"J Glasser","year":"2013","unstructured":"Glasser, J., Lindauer, B.: Bridging the gap: A pragmatic approach to generating insider threat data. Proceedings - IEEE CS Security and Privacy Workshops, SPW 2013, 98\u2013104 (2013). https:\/\/doi.org\/10.1109\/spw.2013.37","journal-title":"Proceedings - IEEE CS Security and Privacy Workshops, SPW"},{"issue":"1","key":"1002_CR155","doi-asserted-by":"publisher","first-page":"54","DOI":"10.1145\/3139923.3139929","volume":"9","author":"A Harilal","year":"2018","unstructured":"Harilal, A., Toffalini, F., Homoliak, I., Castellanos, J.H., Guarnizo, J., Mondal, S., Ochoa, M.: The Wolf Of SUTD (TWOS): a dataset of malicious insider threat behavior based on a gamified competition. J Wirel Mob Netw. Ubiquitous Comput Dependable Appl. 9(1), 54\u201385 (2018). https:\/\/doi.org\/10.1145\/3139923.3139929","journal-title":"J Wirel Mob Netw. Ubiquitous Comput Dependable Appl."},{"key":"1002_CR156","doi-asserted-by":"publisher","unstructured":"Arulkumaran, K., Deisenroth, M. P., Brundage, M., & Bharath, A. A.: A brief survey of deep reinforcement learning.\u00a0arXiv preprint arXiv:1708.05866 (2017). https:\/\/doi.org\/10.1109\/msp.2017.2743240","DOI":"10.1109\/msp.2017.2743240"},{"key":"1002_CR157","unstructured":"Ng, A. Y., & Russell, S. (2000: Algorithms for inverse reinforcement learning. In\u00a0Icml\u00a01(2) 2, June)."},{"key":"1002_CR158","doi-asserted-by":"publisher","unstructured":"Oh, M. H., & Iyengar, G.: Sequential anomaly detection using inverse reinforcement learning. In\u00a0Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & data mining\u00a01480\u20131490 (2019, July). https:\/\/doi.org\/10.1145\/3292500.3330932","DOI":"10.1145\/3292500.3330932"},{"key":"1002_CR159","doi-asserted-by":"publisher","DOI":"10.1109\/iros.2018.8593933","author":"Y Duan","year":"2017","unstructured":"Duan, Y., Andrychowicz, M., Stadie, B., Jonathan Ho, O., Schneider, J., Sutskever, I., Zaremba, W.: One-shot imitation learning. Adv. Neural. Inf. Process. Syst. (2017). https:\/\/doi.org\/10.1109\/iros.2018.8593933","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"1002_CR160","unstructured":"Wang J.X., Kurth-Nelson Z., Tirumala D., Soyer H., Leibo J.Z., Munos R., Blundell C., Kumaran D., Botvinick M. (2017): Learning to reinforcement learn. arXiv:161105763."},{"issue":"3","key":"1002_CR161","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3386252","volume":"53","author":"Y Wang","year":"2020","unstructured":"Wang, Y., Yao, Q., Kwok, J.T., Ni, L.M.: Generalizing from a few examples: A survey on few-shot learning. ACM computing surveys (csur) 53(3), 1\u201334 (2020). https:\/\/doi.org\/10.1145\/3386252","journal-title":"ACM computing surveys (csur)"},{"issue":"4","key":"1002_CR162","doi-asserted-by":"publisher","first-page":"594","DOI":"10.1109\/tpami.2006.79","volume":"28","author":"L Fei-Fei","year":"2006","unstructured":"Fei-Fei, L., Fergus, R., Perona, P.: One-shot learning of object categories. IEEE Trans. Pattern Anal. Mach. Intell. 28(4), 594\u2013611 (2006). https:\/\/doi.org\/10.1109\/tpami.2006.79","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"issue":"2","key":"1002_CR163","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3293318","volume":"10","author":"W Wang","year":"2019","unstructured":"Wang, W., Zheng, V.W., Yu, H., Miao, C.: A survey of zero-shot learning: Settings, methods, and applications. ACM Trans. Intell. Syst. Technol. (TIST) 10(2), 1\u201337 (2019). https:\/\/doi.org\/10.1145\/3293318","journal-title":"ACM Trans. Intell. Syst. Technol. (TIST)"},{"key":"1002_CR164","unstructured":"Rasmussen, J. G.: Lecture notes: Temporal point processes and the conditional intensity function.\u00a0arXiv preprint arXiv:1806.00221 (2018)."},{"key":"1002_CR165","doi-asserted-by":"publisher","DOI":"10.1109\/cig.2018.8490423","author":"S Li","year":"2018","unstructured":"Li, S., Xiao, S., Zhu, S., Du, N., Xie, Y., Song, L.: Learning temporal point processes via reinforcement learning. Adv. Neural. Inf. Process. Syst. (2018). https:\/\/doi.org\/10.1109\/cig.2018.8490423","journal-title":"Adv. Neural. Inf. Process. Syst."},{"key":"1002_CR166","doi-asserted-by":"publisher","unstructured":"Xiao, S., Xu, H., Yan, J., Farajtabar, M., Yang, X., Song, L., & Zha, H.: Learning conditional generative models for temporal point processes. In\u00a0Proceedings of the AAAI Conference on Artificial Intelligence 32(1) (2018, April). https:\/\/doi.org\/10.1609\/aaai.v32i1.12072","DOI":"10.1609\/aaai.v32i1.12072"},{"key":"1002_CR167","doi-asserted-by":"publisher","unstructured":"Almehmadi, A., & El-Khatib, K.: On the possibility of insider threat detection using physiological signal monitoring. In\u00a0Proceedings of the 7th International Conference on Security of Information and Networks\u00a0223\u2013230 (2014, September). https:\/\/doi.org\/10.1145\/2659651.2659654","DOI":"10.1145\/2659651.2659654"},{"issue":"1","key":"1002_CR168","doi-asserted-by":"publisher","first-page":"106","DOI":"10.2979\/eservicej.9.1.106","volume":"9","author":"FL Greitzer","year":"2013","unstructured":"Greitzer, F.L., Kangas, L.J., Noonan, C.F., Brown, C.R., Ferryman, T.: Psychosocial modeling of insider threat risk based on behavioral and word use analysis. e-Serv. J.: A J. Electron. Serv. Public and Priv. Sect. 9(1), 106\u2013138 (2013). https:\/\/doi.org\/10.2979\/eservicej.9.1.106","journal-title":"e-Serv. J.: A J. Electron. Serv. Public and Priv. Sect."},{"key":"1002_CR169","doi-asserted-by":"publisher","unstructured":"Hashem, Y., Takabi, H., GhasemiGol, M., & Dantu, R.: Towards insider threat detection using psychophysiological signals. In\u00a0Proceedings of the 7th ACM CCS international workshop on managing insider security threats\u00a071\u201374 (2015, October). https:\/\/doi.org\/10.1145\/2808783.2808792","DOI":"10.1145\/2808783.2808792"},{"key":"1002_CR170","doi-asserted-by":"crossref","unstructured":"Gamachchi A., Sun L., Boztas S.: A Graph Based Framework for Malicious Insider Threat Detection. arXiv:180900141 (2018).","DOI":"10.24251\/HICSS.2017.319"},{"key":"1002_CR171","doi-asserted-by":"publisher","unstructured":"Moriano, P., Pendleton, J., Rich, S., & Camp, L. J.: Insider threat event detection in user-system interactions. In\u00a0Proceedings of the 2017 International Workshop on Managing Insider Security Threats 1\u201312 (2017, October). https:\/\/doi.org\/10.1145\/3139923.3139928","DOI":"10.1145\/3139923.3139928"},{"key":"1002_CR172","unstructured":"Paisley, J.: Machine learning with Dirichlet and beta process priors: Theory and Applications\u00a0(Doctoral dissertation, Duke University) (2010)."},{"key":"1002_CR173","doi-asserted-by":"publisher","unstructured":"Goyal, P., Hu, Z., Liang, X., Wang, C., & Xing, E. P.: Nonparametric variational auto-encoders for hierarchical representation learning. In\u00a0Proceedings of the IEEE International Conference on Computer Vision\u00a05094\u20135102 (2017). https:\/\/doi.org\/10.1109\/iccv.2017.545","DOI":"10.1109\/iccv.2017.545"},{"key":"1002_CR174","doi-asserted-by":"publisher","unstructured":"Zhang, A., & Paisley, J.: Deep Bayesian nonparametric tracking. In\u00a0International conference on machine learning\u00a0(pp. 5833\u20135841). PMLR. (2018, July). https:\/\/doi.org\/10.1109\/icip.2013.6738420","DOI":"10.1109\/icip.2013.6738420"},{"issue":"5","key":"1002_CR175","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3409383","volume":"53","author":"H Wang","year":"2020","unstructured":"Wang, H., Yeung, D.Y.: A survey on Bayesian deep learning. ACM Computing Surv. (csur) 53(5), 1\u201337 (2020). https:\/\/doi.org\/10.1145\/3409383","journal-title":"ACM Computing Surv. (csur)"}],"container-title":["International Journal of Information Security"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01002-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10207-025-01002-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10207-025-01002-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,3,30]],"date-time":"2025-03-30T04:03:37Z","timestamp":1743307417000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10207-025-01002-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,7]]},"references-count":175,"journal-issue":{"issue":"2","published-print":{"date-parts":[[2025,4]]}},"alternative-id":["1002"],"URL":"https:\/\/doi.org\/10.1007\/s10207-025-01002-6","relation":{},"ISSN":["1615-5262","1615-5270"],"issn-type":[{"value":"1615-5262","type":"print"},{"value":"1615-5270","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,3,7]]},"assertion":[{"value":"17 February 2025","order":1,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"7 March 2025","order":2,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflicts of interest"}},{"value":"Not applicable.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethics approval"}},{"value":"All authors have consented to the publication of this manuscript.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Consent for publication"}}],"article-number":"88"}}