{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,25]],"date-time":"2026-07-25T16:50:59Z","timestamp":1784998259616,"version":"3.55.0"},"reference-count":58,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","issue":"1","license":[{"start":{"date-parts":[[2020,3,1]],"date-time":"2020-03-01T00:00:00Z","timestamp":1583020800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/ieeexplore.ieee.org\/Xplorehelp\/downloads\/license-information\/IEEE.html"},{"start":{"date-parts":[[2020,3,1]],"date-time":"2020-03-01T00:00:00Z","timestamp":1583020800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2020,3,1]],"date-time":"2020-03-01T00:00:00Z","timestamp":1583020800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"}],"funder":[{"DOI":"10.13039\/501100000038","name":"Natural Sciences and Engineering Research Council of Canada","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Trans. Netw. Serv. Manage."],"published-print":{"date-parts":[[2020,3]]},"DOI":"10.1109\/tnsm.2020.2967721","type":"journal-article","created":{"date-parts":[[2020,1,17]],"date-time":"2020-01-17T21:02:07Z","timestamp":1579294927000},"page":"30-44","source":"Crossref","is-referenced-by-count":171,"title":["Analyzing Data Granularity Levels for Insider Threat Detection Using Machine Learning"],"prefix":"10.1109","volume":"17","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4407-2626","authenticated-orcid":false,"given":"Duc C.","family":"Le","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2796-7265","authenticated-orcid":false,"given":"Nur","family":"Zincir-Heywood","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-1521-0671","authenticated-orcid":false,"given":"Malcolm I.","family":"Heywood","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"263","reference":[{"key":"ref39","author":"tan","year":"2018","journal-title":"Introduction to Data Mining"},{"key":"ref38","doi-asserted-by":"publisher","DOI":"10.13052\/jcsm2245-1439.812"},{"key":"ref33","year":"2020","journal-title":"Insider Threat Test Dataset"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2018.2815280"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2016.14"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2016.2558507"},{"key":"ref37","doi-asserted-by":"publisher","DOI":"10.1109\/JSYST.2014.2364743"},{"key":"ref36","doi-asserted-by":"crossref","first-page":"840","DOI":"10.1145\/3289600.3291384","article-title":"Privacy-preserving data mining in industry","author":"kenthapadi","year":"2019","journal-title":"Proc 3rd ACM Int Conf Web Search Data Mining"},{"key":"ref35","doi-asserted-by":"publisher","DOI":"10.1080\/00236561003654776"},{"key":"ref34","doi-asserted-by":"publisher","DOI":"10.1145\/1408664.1408679"},{"key":"ref28","first-page":"224","article-title":"Deep learning for unsupervised insider threat detection in structured cybersecurity data streams","author":"tuor","year":"2017","journal-title":"Proceedings of the AAAI Workshop on Artificial Intelligence for Cyber Security"},{"key":"ref27","first-page":"1","article-title":"Machine learning based insider threat modeling and detection","author":"le","year":"2019","journal-title":"Proc IFIP\/IEEE Int Symp Integr Netw Manag"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3205455.3205612"},{"key":"ref2","year":"2018","journal-title":"Insider Threat 2018 Report"},{"key":"ref1","article-title":"The 2017 federal insider threat report","year":"2017"},{"key":"ref20","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.14"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.24251\/HICSS.2017.320"},{"key":"ref21","first-page":"47","article-title":"Supervised and unsupervised methods to detect insider threat from enterprise social and online activity data","volume":"6","author":"gavai","year":"2015","journal-title":"J Wireless Mobile Netw Ubiquitous Comput Dependable Appl"},{"key":"ref24","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-642-23644-0_10"},{"key":"ref23","year":"0","journal-title":"Anomaly detection at multiple scales (ADAMS)"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00043"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2018.00037"},{"key":"ref50","doi-asserted-by":"publisher","DOI":"10.1007\/BF01589116"},{"key":"ref51","first-page":"115","article-title":"Making a science of model search: Hyperparameter optimization in hundreds of dimensions for vision architectures","author":"bergstra","year":"2013","journal-title":"Proc ICML"},{"key":"ref58","first-page":"1833","article-title":"Permutation tests for studying classifier performance","volume":"11","author":"ojala","year":"2010","journal-title":"J Mach Learn Res"},{"key":"ref57","doi-asserted-by":"publisher","DOI":"10.1613\/jair.953"},{"key":"ref56","doi-asserted-by":"publisher","DOI":"10.1109\/ICTAI.2007.46"},{"key":"ref55","doi-asserted-by":"crossref","first-page":"69","DOI":"10.1007\/978-0-387-77322-3_5","article-title":"A survey of insider attack detection research","author":"salem","year":"2008","journal-title":"Insider Attack and Cyber Security Beyond the Hacker"},{"key":"ref54","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2019.2940735"},{"key":"ref53","doi-asserted-by":"publisher","DOI":"10.1109\/ICDM.2008.17"},{"key":"ref52","first-page":"1","article-title":"Statistical comparisons of classifiers over multiple data sets","volume":"7","author":"dem\u0161ar","year":"2006","journal-title":"J Mach Learn Res"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.5038\/1944-0472.4.2.2"},{"key":"ref11","first-page":"20","article-title":"Towards a conceptual model and reasoning structure for insider threat detection","volume":"4","author":"legg","year":"2013","journal-title":"J Wireless Mobile Netw Ubiquitous Comput Dependable Appl"},{"key":"ref40","doi-asserted-by":"publisher","DOI":"10.1145\/1143844.1143865"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2012.29"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2015.2494502"},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1109\/SURV.2013.052213.00046"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-88735-7_4"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1109\/MSP.2009.110"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1109\/ISI.2012.6284271"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1145\/2487575.2488213"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1145\/2995959.2995964"},{"key":"ref4","article-title":"Common sense guide to mitigating insider threats, fifth edition","author":"collins","year":"2016"},{"key":"ref3","article-title":"The 2018 U.S. State of cybercrime survey","year":"2018"},{"key":"ref6","article-title":"Combating the insider threat","year":"2014"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2014.2377811"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1145\/3303771"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/COMST.2018.2800740"},{"key":"ref49","first-page":"2825","article-title":"Scikit-learn: Machine learning in Python","volume":"12","author":"pedregosa","year":"2011","journal-title":"J Mach Learn Res"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1016\/j.dss.2016.09.012"},{"key":"ref46","doi-asserted-by":"publisher","DOI":"10.1109\/BigComp.2018.00044"},{"key":"ref45","doi-asserted-by":"publisher","DOI":"10.1145\/2939672.2939785"},{"key":"ref48","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.37"},{"key":"ref47","doi-asserted-by":"publisher","DOI":"10.1007\/s40708-017-0065-7"},{"key":"ref42","first-page":"1","article-title":"Adam: A method for stochastic optimization","author":"kingma","year":"2015","journal-title":"Proc Int Conf Learn Represent"},{"key":"ref41","doi-asserted-by":"publisher","DOI":"10.1109\/18.256500"},{"key":"ref44","doi-asserted-by":"publisher","DOI":"10.1023\/A:1010933404324"},{"key":"ref43","first-page":"315","article-title":"Deep sparse rectifier neural networks","author":"glorot","year":"2011","journal-title":"Proc Int Conf Artif Intell Stat"}],"container-title":["IEEE Transactions on Network and Service Management"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/4275028\/9032249\/08962316.pdf?arnumber=8962316","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2022,4,27]],"date-time":"2022-04-27T17:05:01Z","timestamp":1651079101000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/8962316\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2020,3]]},"references-count":58,"journal-issue":{"issue":"1"},"URL":"https:\/\/doi.org\/10.1109\/tnsm.2020.2967721","relation":{},"ISSN":["1932-4537","2373-7379"],"issn-type":[{"value":"1932-4537","type":"electronic"},{"value":"2373-7379","type":"electronic"}],"subject":[],"published":{"date-parts":[[2020,3]]}}}