{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,1]],"date-time":"2025-10-01T15:27:44Z","timestamp":1759332464662,"version":"3.28.0"},"reference-count":19,"publisher":"IEEE","license":[{"start":{"date-parts":[[2020,12,10]],"date-time":"2020-12-10T00:00:00Z","timestamp":1607558400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,12,10]],"date-time":"2020-12-10T00:00:00Z","timestamp":1607558400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,12,10]],"date-time":"2020-12-10T00:00:00Z","timestamp":1607558400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2020,12,10]]},"DOI":"10.1109\/bigdata50022.2020.9378365","type":"proceedings-article","created":{"date-parts":[[2021,3,19]],"date-time":"2021-03-19T21:10:21Z","timestamp":1616188221000},"page":"2610-2618","source":"Crossref","is-referenced-by-count":2,"title":["BEAM: An Anomaly-Based Threat Detection System for Enterprise Multi-Domain Data"],"prefix":"10.1109","author":[{"given":"Derek","family":"Lin","sequence":"first","affiliation":[]},{"given":"Anying","family":"Li","sequence":"additional","affiliation":[]},{"given":"Ryan","family":"Foltz","sequence":"additional","affiliation":[]}],"member":"263","reference":[{"key":"ref10","article-title":"Ai2: Training a big data machine to de-fend","author":"kalyan","year":"2016","journal-title":"IEEE Big Data Security Conference"},{"article-title":"Deep learning for unsupervised in-sider threat detection in structured cybersecurity data streams","year":"2017","author":"tuor","key":"ref11"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW.2018.00014"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1145\/2523649.2523670"},{"key":"ref14","article-title":"A novel anomaly detection scheme based on principal component classifier","author":"shyu","year":"2003","journal-title":"Tech Rep"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74320-0_8"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1186\/s41044-016-0006-0"},{"article-title":"Randy franklin smith&#x2019;s ultimate windows security","year":"2011","author":"smith","key":"ref17"},{"key":"ref18","first-page":"2","article-title":"Bayesian spam detection","volume":"2","author":"eberhardt","year":"2015","journal-title":"Scholarly Horizons University of Minnesota Morris Undergrad-uate Journal"},{"key":"ref19","first-page":"4098","article-title":"Muvir: Multi-view rare category detection.","author":"zhou","year":"2015","journal-title":"IJCAI"},{"journal-title":"User Behavior Analytics","year":"0","key":"ref4"},{"journal-title":"Ibm qradar user behavior analytics (uba)","year":"0","key":"ref3"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.14"},{"journal-title":"Splunk insider threat detection tools","year":"0","key":"ref5"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-319-97864-2_6"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2016.2558507"},{"article-title":"Market trends: User and entity behavior analytics expand their market reach","year":"2016","author":"ahlm","key":"ref2"},{"article-title":"2020 verizon data breach investigations report","year":"2020","author":"bassett","key":"ref1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/ISCISC.2016.7736447"}],"event":{"name":"2020 IEEE International Conference on Big Data (Big Data)","start":{"date-parts":[[2020,12,10]]},"location":"Atlanta, GA, USA","end":{"date-parts":[[2020,12,13]]}},"container-title":["2020 IEEE International Conference on Big Data (Big Data)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/9377717\/9377728\/09378365.pdf?arnumber=9378365","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,6,27]],"date-time":"2022-06-27T15:53:13Z","timestamp":1656345193000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/9378365\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,12,10]]},"references-count":19,"URL":"https:\/\/doi.org\/10.1109\/bigdata50022.2020.9378365","relation":{},"subject":[],"published":{"date-parts":[[2020,12,10]]}}}