{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,4,17]],"date-time":"2025-04-17T04:15:20Z","timestamp":1744863320022,"version":"3.40.4"},"reference-count":29,"publisher":"IEEE","license":[{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2019,6,1]],"date-time":"2019-06-01T00:00:00Z","timestamp":1559347200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2019,6]]},"DOI":"10.1109\/iscc47284.2019.8969587","type":"proceedings-article","created":{"date-parts":[[2020,1,31]],"date-time":"2020-01-31T05:16:57Z","timestamp":1580447817000},"page":"1-8","source":"Crossref","is-referenced-by-count":0,"title":["Modeling User Network Behavior Based on Network Packet Sketches for Masquerade Detection"],"prefix":"10.1109","author":[{"given":"Zhiyuan","family":"Lv","sequence":"first","affiliation":[{"name":"Tsinghua University,Department of Computer Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Youjian","family":"Zhao","sequence":"additional","affiliation":[{"name":"Tsinghua University,Department of Computer Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Haibin","family":"Li","sequence":"additional","affiliation":[{"name":"Tsinghua University,Department of Computer Science and Technology,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1145\/1080091.1080118"},{"key":"ref11","article-title":"Entropy based anomaly detection system to prevent ddos attacks in cloud","author":"navaz","year":"2013","journal-title":"arXiv preprint arXiv 1308 6745"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/LCOMM.2013.112613.132275"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s11235-015-0017-6"},{"journal-title":"Npsdata","year":"0","author":"lv","key":"ref14"},{"journal-title":"Schonlau","year":"2001","key":"ref15"},{"key":"ref16","article-title":"One-class training for masquerade detection","author":"ke","year":"2003","journal-title":"3rd IEEE conference Data Mining Workshop on data Mining for Computer Security"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/BigData.2015.7363892"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2016.05.036"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2016.2571679"},{"journal-title":"Gaussian Processes in Machine Learning","year":"2004","author":"rasmussen","key":"ref28"},{"key":"ref4","first-page":"58","article-title":"Computer intrusion: Detecting masquerades","author":"schonlau","year":"2001","journal-title":"Statistical Science"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.37"},{"key":"ref3","first-page":"1393","article-title":"Detecting insider threats in a real corporate database of computer usage activity","author":"ted","year":"2013","journal-title":"Proceedings of the 19th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23644-0_10"},{"journal-title":"analysedensityestimation","year":"0","author":"mazumdar","key":"ref29"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2002.1028903"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2995959.2995964"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-540-74320-0_8"},{"key":"ref2","article-title":"Automated insider threat detection system using user and role-based profile assessment","author":"legg","year":"2015","journal-title":"IEEE Systems Journal"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom\/BigDataSE.2018.00061"},{"journal-title":"2016 Data Breach Investigations Report","year":"2016","key":"ref1"},{"key":"ref20","doi-asserted-by":"crossref","first-page":"557","DOI":"10.1007\/s00500-016-2278-8","article-title":"Bagging-tpminer: a classifier ensemble for masquerader detection based on typical objects","volume":"21","author":"medina-p\u00e9rez","year":"2017","journal-title":"Soft Computing"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.109"},{"key":"ref21","first-page":"51","article-title":"Baiting inside attackers using decoy documents","author":"bowen","year":"2009","journal-title":"International Conference on Security and Privacy in Communication Systems"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-21551-3_19"},{"key":"ref23","article-title":"Active authentication using file system decoys and user behavior modeling: Results of a large scale study","author":"voris","year":"2018","journal-title":"Computers & Security"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1002\/wics.101"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.4236\/jsip.2013.43B031"}],"event":{"name":"2019 IEEE Symposium on Computers and Communications (ISCC)","start":{"date-parts":[[2019,6,29]]},"location":"Barcelona, Spain","end":{"date-parts":[[2019,7,3]]}},"container-title":["2019 IEEE Symposium on Computers and Communications (ISCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/8961334\/8969568\/08969587.pdf?arnumber=8969587","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,16]],"date-time":"2025-04-16T17:49:12Z","timestamp":1744825752000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8969587\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2019,6]]},"references-count":29,"URL":"https:\/\/doi.org\/10.1109\/iscc47284.2019.8969587","relation":{},"subject":[],"published":{"date-parts":[[2019,6]]}}}