{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T12:50:04Z","timestamp":1761396604616},"reference-count":24,"publisher":"IEEE","license":[{"start":{"date-parts":[[2023,7,9]],"date-time":"2023-07-09T00:00:00Z","timestamp":1688860800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2023,7,9]],"date-time":"2023-07-09T00:00:00Z","timestamp":1688860800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2023,7,9]]},"DOI":"10.1109\/iscc58397.2023.10218139","type":"proceedings-article","created":{"date-parts":[[2023,8,28]],"date-time":"2023-08-28T17:46:48Z","timestamp":1693244808000},"source":"Crossref","is-referenced-by-count":6,"title":["UAG: User Action Graph Based on System Logs for Insider Threat Detection"],"prefix":"10.1109","author":[{"given":"Xu","family":"Wang","sequence":"first","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jianguo","family":"Jiang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yan","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Cyber Security, University of Chinese Academy of Sciences,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Qiujian","family":"Lv","sequence":"additional","affiliation":[{"name":"School of Cyber Security, University of Chinese Academy of Sciences,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Leiqi","family":"Wang","sequence":"additional","affiliation":[{"name":"Institute of Information Engineering, Chinese Academy of Sciences,Beijing,China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-020-69795-1"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2689746.2689747"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/MILCOM47813.2019.9020931"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3071928"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/bth436"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1126\/science.298.5594.824"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2015.141"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/ICDMW.2018.00014"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.37"},{"key":"ref10","author":"mirsky","year":"2018","journal-title":"Kitsune An Ensemble of Autoencoders for Online Network Intrusion Detection"},{"key":"ref21","article-title":"Methods of hierarchical clustering","author":"murtagh","year":"2011","journal-title":"Computer Science"},{"key":"ref2","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2800740"},{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1145\/3303771"},{"key":"ref17","author":"collins","year":"2016","journal-title":"Common Sense Guide to Mitigating Insider Threats"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1145\/2897795.2897806"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/ISCC53001.2021.9631465"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.2536605"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/2995959.2995964"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/CNS48642.2020.9162254"},{"key":"ref9","author":"tuor","year":"2017","journal-title":"Recurrent Neural Network Language Models for Open Vocabulary Event-Level Cyber Anomaly Detection"},{"key":"ref4","article-title":"Deep learning for unsupervised insider threat detection in structured cybersecurity data streams","author":"tuor","year":"0","journal-title":"Workshops at the Thirtieth AAAI Conference on Artificial Intelligence"},{"key":"ref3","year":"2020","journal-title":"2020 Cost of Insider Threats Global Report"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2020.2967721"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/DSC.2018.00092"}],"event":{"name":"2023 IEEE Symposium on Computers and Communications (ISCC)","location":"Gammarth, Tunisia","start":{"date-parts":[[2023,7,9]]},"end":{"date-parts":[[2023,7,12]]}},"container-title":["2023 IEEE Symposium on Computers and Communications (ISCC)"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/10217219\/10217829\/10218139.pdf?arnumber=10218139","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2023,9,25]],"date-time":"2023-09-25T17:50:10Z","timestamp":1695664210000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10218139\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2023,7,9]]},"references-count":24,"URL":"https:\/\/doi.org\/10.1109\/iscc58397.2023.10218139","relation":{},"subject":[],"published":{"date-parts":[[2023,7,9]]}}}