{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,20]],"date-time":"2026-08-20T15:07:57Z","timestamp":1787238477579,"version":"build-2736575974"},"reference-count":46,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"2","license":[{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2025,3,1]],"date-time":"2025-03-01T00:00:00Z","timestamp":1740787200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["U23A20275"],"award-info":[{"award-number":["U23A20275"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62101525"],"award-info":[{"award-number":["62101525"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]},{"name":"China Environment for Network Innovations","award":["2016-000052-73-01-000515"],"award-info":[{"award-number":["2016-000052-73-01-000515"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Sci. Eng."],"published-print":{"date-parts":[[2025,3]]},"DOI":"10.1109\/tnse.2024.3519155","type":"journal-article","created":{"date-parts":[[2024,12,17]],"date-time":"2024-12-17T14:23:10Z","timestamp":1734445390000},"page":"774-790","source":"Crossref","is-referenced-by-count":15,"title":["SENTINEL: Insider Threat Detection Based on Multi-Timescale User Behavior Interaction Graph Learning"],"prefix":"10.1109","volume":"12","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-1947-5392","authenticated-orcid":false,"given":"Fengrui","family":"Xiao","sequence":"first","affiliation":[{"name":"Department of Automation, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2817-9738","authenticated-orcid":false,"given":"Shuangwu","family":"Chen","sequence":"additional","affiliation":[{"name":"Department of Automation, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Siyang","family":"Chen","sequence":"additional","affiliation":[{"name":"Department of Automation, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0004-4652-3453","authenticated-orcid":false,"given":"Yuanyi","family":"Ma","sequence":"additional","affiliation":[{"name":"Department of Automation, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9963-019X","authenticated-orcid":false,"given":"Huasen","family":"He","sequence":"additional","affiliation":[{"name":"Department of Automation, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7329-4738","authenticated-orcid":false,"given":"Jian","family":"Yang","sequence":"additional","affiliation":[{"name":"Department of Automation, University of Science and Technology of China, Hefei, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3071928"},{"key":"ref2","article-title":"2022 ponemon cost of insider threats global report","year":"2022"},{"key":"ref3","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2022.3174679"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2020.2967721"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1155\/2021\/9961342"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2021.3135639"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2800740"},{"key":"ref8","first-page":"121","article-title":"A new architecture for managing enterprise log data","volume-title":"Proc. Conf. Syst. Admin.","author":"Sah","year":"2002"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.21236\/ADA610463"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/SP.2019.00026"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1145\/3243734.3243811"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2018.2857473"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2021.3109644"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1145\/3319535.3363224"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2021.3054356"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2022.3222635"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2023.3245413"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1109\/TrustCom50675.2020.00099"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2021.12.026"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-030-86362-3_21"},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v35i17.17761"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1016\/j.procs.2015.03.175"},{"key":"ref23","article-title":"Adversarial tactics, techniques and common knowledge","year":"2013"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1145\/2487575.2488213"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2018.2815280"},{"key":"ref26","first-page":"285","article-title":"Recurrent neural network language models for open vocabulary event-level cyber anomaly detection","volume-title":"Proc. AAAI Conf. Artif. Intell.","author":"Tuor","year":"2018"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2023.126588"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1080\/19361610.2011.529413"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/2623330.2623732"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/TNSE.2022.3184975"},{"key":"ref31","first-page":"257","article-title":"Detecting lateral movement in enterprise computer networks with unsupervised graph AI","volume-title":"Proc. Int. Symp. Res. Attacks, Intrusions Defenses","author":"Bowman","year":"2020"},{"key":"ref32","first-page":"3093","article-title":"Hopper: Modeling and detecting lateral movement","volume-title":"Proc. USENIX Secur. Symp.","author":"Ho","year":"2021"},{"key":"ref33","doi-asserted-by":"publisher","DOI":"10.1109\/TIFS.2022.3191493"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.48550\/arXiv.1310.4546"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.24963\/ijcai.2019\/614"},{"key":"ref36","first-page":"1","article-title":"Semi-supervised classification with graph convolutional networks","volume-title":"Proc. Int. Conf. Learn. Representations","author":"Kipf","year":"2017"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.14722\/ndss.2018.23306"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2019.04.073"},{"key":"ref39","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.37"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1609\/aaai.v28i1.8870"},{"key":"ref41","article-title":"Comprehensive, Multi-source cyber-security events","author":"Kent","year":"2015"},{"key":"ref42","doi-asserted-by":"publisher","DOI":"10.1145\/3139923.3139929"},{"key":"ref43","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-015-5521-0"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1145\/342009.335388"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1109\/NOMS54207.2022.9789921"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/INFOCOM41043.2020.9155487"}],"container-title":["IEEE Transactions on Network Science and Engineering"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6488902\/10899093\/10804674.pdf?arnumber=10804674","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,2,22]],"date-time":"2025-02-22T00:52:10Z","timestamp":1740185530000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/10804674\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3]]},"references-count":46,"journal-issue":{"issue":"2"},"URL":"https:\/\/doi.org\/10.1109\/tnse.2024.3519155","relation":{},"ISSN":["2327-4697","2334-329X"],"issn-type":[{"value":"2327-4697","type":"electronic"},{"value":"2334-329X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,3]]}}}