{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T20:11:35Z","timestamp":1784059895191,"version":"3.55.0"},"reference-count":28,"publisher":"Elsevier BV","issue":"1","license":[{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2024,11,15]],"date-time":"2024-11-15T00:00:00Z","timestamp":1731628800000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62472118"],"award-info":[{"award-number":["62472118"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["High-Confidence Computing"],"published-print":{"date-parts":[[2025,3]]},"DOI":"10.1016\/j.hcc.2024.100283","type":"journal-article","created":{"date-parts":[[2025,1,14]],"date-time":"2025-01-14T11:58:14Z","timestamp":1736855894000},"page":"100283","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":11,"title":["An insider threat detection method based on improved Test-Time Training model"],"prefix":"10.1016","volume":"5","author":[{"given":"Xiaoling","family":"Tao","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jianxiang","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0002-7188-7094","authenticated-orcid":false,"given":"Yuelin","family":"Yu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Haijing","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ying","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.hcc.2024.100283_b1","series-title":"An Insider Threat Indicator Ontology","author":"Costa","year":"2016"},{"key":"10.1016\/j.hcc.2024.100283_b2","series-title":"2024 Insider threat report","author":"Cybersecurity Insiders","year":"2024"},{"key":"10.1016\/j.hcc.2024.100283_b3","series-title":"2023 Cost of insider threats global report","author":"Ponemon Institute","year":"2024"},{"key":"10.1016\/j.hcc.2024.100283_b4","doi-asserted-by":"crossref","unstructured":"N. Garba, S. Rakshit, C.D. Mang, N.R. Vajjhala, An email content-based insider threat detection model using anomaly detection algorithms, in: Proceedings of the International Conference on Innovative Computing & Communication, ICICC, 2021.","DOI":"10.2139\/ssrn.3833744"},{"issue":"1","key":"10.1016\/j.hcc.2024.100283_b5","doi-asserted-by":"crossref","first-page":"19","DOI":"10.1108\/ICS-12-2019-0142","article-title":"An improved feature extraction algorithm for insider threat using hidden Markov model on user behavior detection","volume":"30","author":"Ye","year":"2022","journal-title":"Inf. Comput. Secur."},{"issue":"2","key":"10.1016\/j.hcc.2024.100283_b6","doi-asserted-by":"crossref","first-page":"1152","DOI":"10.1109\/TNSM.2021.3071928","article-title":"Anomaly detection for insider threats using unsupervised ensembles","volume":"18","author":"Le","year":"2021","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.hcc.2024.100283_b7","doi-asserted-by":"crossref","unstructured":"J. Lu, R.K. Wong, Insider threat detection with long short-term memory, in: Proceedings of the Australasian Computer Science Week Multiconference, 2019, pp. 1\u201310.","DOI":"10.1145\/3290688.3290692"},{"issue":"1","key":"10.1016\/j.hcc.2024.100283_b8","doi-asserted-by":"crossref","first-page":"30","DOI":"10.1109\/TNSM.2020.2967721","article-title":"Analyzing data granularity levels for insider threat detection using machine learning","volume":"17","author":"Le","year":"2020","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"7","key":"10.1016\/j.hcc.2024.100283_b9","doi-asserted-by":"crossref","first-page":"4362","DOI":"10.1109\/TII.2019.2891261","article-title":"Multilayer data-driven cyber-attack detection system for industrial control systems based on network, system, and process data","volume":"15","author":"Zhang","year":"2019","journal-title":"IEEE Trans. Ind. Inform."},{"issue":"1","key":"10.1016\/j.hcc.2024.100283_b10","doi-asserted-by":"crossref","DOI":"10.1016\/j.hcc.2021.100034","article-title":"User behaviour analysis using data analytics and machine learning to predict malicious user versus legitimate user","volume":"2","author":"Ranjan","year":"2022","journal-title":"High-Confid. Comput.","ISSN":"https:\/\/id.crossref.org\/issn\/2667-2952","issn-type":"print"},{"key":"10.1016\/j.hcc.2024.100283_b11","series-title":"2018 IEEE International Conference on Data Mining Workshops","first-page":"39","article-title":"Anomaly-based insider threat detection using deep autoencoders","author":"Liu","year":"2018"},{"key":"10.1016\/j.hcc.2024.100283_b12","series-title":"2019 IEEE 5th International Conference on Identity, Security, and Behavior Analysis","first-page":"1","article-title":"User behavior profiling using ensemble approach for insider threat detection","author":"Singh","year":"2019"},{"key":"10.1016\/j.hcc.2024.100283_b13","series-title":"2020 IEEE 32nd International Conference on Tools with Artificial Intelligence","first-page":"632","article-title":"Data augmentation for insider threat detection with GAN","author":"Yuan","year":"2020"},{"key":"10.1016\/j.hcc.2024.100283_b14","doi-asserted-by":"crossref","first-page":"143266","DOI":"10.1109\/ACCESS.2021.3118297","article-title":"Behavioral based insider threat detection using deep learning","volume":"9","author":"Nasir","year":"2021","journal-title":"IEEE Access"},{"issue":"1","key":"10.1016\/j.hcc.2024.100283_b15","article-title":"An integrated imbalanced learning and deep neural network model for insider threat detection","volume":"12","author":"Al-Mhiqani","year":"2021","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"issue":"1","key":"10.1016\/j.hcc.2024.100283_b16","article-title":"Image-based insider threat detection via geometric transformation","volume":"2021","author":"Li","year":"2021","journal-title":"Secur. Commun. Netw."},{"key":"10.1016\/j.hcc.2024.100283_b17","series-title":"2021 IEEE 24th International Conference on Computer Supported Cooperative Work in Design","first-page":"335","article-title":"DeepMIT: a novel malicious insider threat detection framework based on recurrent neural network","author":"Sun","year":"2021"},{"key":"10.1016\/j.hcc.2024.100283_b18","doi-asserted-by":"crossref","unstructured":"Q. Wang, B. Wu, P. Zhu, P. Li, W. Zuo, Q. Hu, ECA-Net: Efficient channel attention for deep convolutional neural networks, in: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, 2020, pp. 11534\u201311542.","DOI":"10.1109\/CVPR42600.2020.01155"},{"key":"10.1016\/j.hcc.2024.100283_b19","doi-asserted-by":"crossref","unstructured":"K. He, X. Zhang, S. Ren, J. Sun, Deep residual learning for image recognition, in: Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, 2016, pp. 770\u2013778.","DOI":"10.1109\/CVPR.2016.90"},{"key":"10.1016\/j.hcc.2024.100283_b20","series-title":"Learning to (learn at test time): Rnns with expressive hidden states","author":"Sun","year":"2024"},{"issue":"4","key":"10.1016\/j.hcc.2024.100283_b21","doi-asserted-by":"crossref","DOI":"10.1016\/j.hcc.2023.100169","article-title":"An insider user authentication method based on improved temporal convolutional network","volume":"3","author":"Tao","year":"2023","journal-title":"High-Confid. Comput.","ISSN":"https:\/\/id.crossref.org\/issn\/2667-2952","issn-type":"print"},{"key":"10.1016\/j.hcc.2024.100283_b22","series-title":"2013 IEEE Security and Privacy Workshops","first-page":"98","article-title":"Bridging the gap: A pragmatic approach to generating insider threat data","author":"Glasser","year":"2013"},{"issue":"2","key":"10.1016\/j.hcc.2024.100283_b23","first-page":"80","article-title":"Generating test data for insider threat detectors.","volume":"5","author":"Lindauer","year":"2014","journal-title":"J. Wirel. Mob. Netw. Ubiquitous Comput. Dependable Appl."},{"issue":"3","key":"10.1016\/j.hcc.2024.100283_b24","article-title":"Insider threat detection based on operational attention and data augmentation.","volume":"9","author":"Guanyun","year":"2023","journal-title":"Chin. J. Netw. Inf. Secur."},{"key":"10.1016\/j.hcc.2024.100283_b25","series-title":"2021 IEEE Symposium on Computers and Communications","first-page":"1","article-title":"Itdbert: Temporal-semantic representation for insider threat detection","author":"Huang","year":"2021"},{"issue":"4","key":"10.1016\/j.hcc.2024.100283_b26","doi-asserted-by":"crossref","first-page":"4573","DOI":"10.1007\/s12652-023-04581-1","article-title":"User behaviour based insider threat detection using a hybrid learning approach","volume":"14","author":"Singh","year":"2023","journal-title":"J. Ambient Intell. Humaniz. Comput."},{"key":"10.1016\/j.hcc.2024.100283_b27","article-title":"DTITD: An intelligent insider threat detection framework based on digital twin and self-attention based deep learning models","author":"Wang","year":"2023","journal-title":"IEEE Access"},{"key":"10.1016\/j.hcc.2024.100283_b28","series-title":"2018 IEEE Third International Conference on Data Science in Cyberspace","first-page":"576","article-title":"Deep learning based attribute classification insider threat detection for data security","author":"Meng","year":"2018"}],"container-title":["High-Confidence Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2667295224000862?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2667295224000862?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2025,11,8]],"date-time":"2025-11-08T23:09:18Z","timestamp":1762643358000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2667295224000862"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3]]},"references-count":28,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2025,3]]}},"alternative-id":["S2667295224000862"],"URL":"https:\/\/doi.org\/10.1016\/j.hcc.2024.100283","relation":{},"ISSN":["2667-2952"],"issn-type":[{"value":"2667-2952","type":"print"}],"subject":[],"published":{"date-parts":[[2025,3]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"An insider threat detection method based on improved Test-Time Training model","name":"articletitle","label":"Article Title"},{"value":"High-Confidence Computing","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.hcc.2024.100283","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2024 The Author(s). Published by Elsevier B.V. on behalf of Shandong University.","name":"copyright","label":"Copyright"}],"article-number":"100283"}}