{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,2]],"date-time":"2026-06-02T21:09:08Z","timestamp":1780434548682,"version":"3.54.1"},"publisher-location":"New York, New York, USA","reference-count":11,"publisher":"ACM Press","license":[{"start":{"date-parts":[[2016,1,1]],"date-time":"2016-01-01T00:00:00Z","timestamp":1451606400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"name":"National Science Foundation","award":["CNS - 1409551"],"award-info":[{"award-number":["CNS - 1409551"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2016]]},"DOI":"10.1145\/2872518.2888608","type":"proceedings-article","created":{"date-parts":[[2017,1,23]],"date-time":"2017-01-23T20:35:52Z","timestamp":1485203752000},"page":"463-466","source":"Crossref","is-referenced-by-count":25,"title":["Ettu"],"prefix":"10.1145","author":[{"given":"Gokhan","family":"Kul","sequence":"first","affiliation":[{"name":"State University of New York at Buffalo, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Duc","family":"Luong","sequence":"additional","affiliation":[{"name":"State University of New York at Buffalo, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ting","family":"Xie","sequence":"additional","affiliation":[{"name":"State University of New York at Buffalo, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Patrick","family":"Coonan","sequence":"additional","affiliation":[{"name":"State University of New York at Buffalo, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Varun","family":"Chandola","sequence":"additional","affiliation":[{"name":"State University of New York at Buffalo, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Oliver","family":"Kennedy","sequence":"additional","affiliation":[{"name":"State University of New York at Buffalo, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shambhu","family":"Upadhyaya","sequence":"additional","affiliation":[{"name":"State University of New York at Buffalo, Buffalo, NY, USA"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","reference":[{"key":"key-10.1145\/2872518.2888608-1","unstructured":"CERT Insider Threat Center. 2014 U.S. State of Cybercrime Survey. July 2014."},{"key":"key-10.1145\/2872518.2888608-2","doi-asserted-by":"crossref","unstructured":"G. Gavai, K. Sricharan, D. Gunning, J. Hanley, M. Singhal, and R. Rolleston. Supervised and unsupervised methods to detect insider threat from enterprise social and online activity data. JOWUA, 2015.","DOI":"10.1145\/2808783.2808784"},{"key":"key-10.1145\/2872518.2888608-3","doi-asserted-by":"crossref","unstructured":"J. Han, J. Pei, Y. Yin, and R. Mao. Mining frequent patterns without candidate generation: A frequent-pattern tree approach. DMKD, 2004.","DOI":"10.1023\/B:DAMI.0000005258.31418.83"},{"key":"key-10.1145\/2872518.2888608-4","doi-asserted-by":"crossref","unstructured":"A. Kamra, E. Terzi, and E. Bertino. Detecting anomalous access patterns in relational databases. VLDBJ, 2007.","DOI":"10.1007\/s00778-007-0051-4"},{"key":"key-10.1145\/2872518.2888608-5","doi-asserted-by":"crossref","unstructured":"G. Kul and S. Upadhyaya. Towards a cyber ontology for insider threats in the financial sector. JOWUA, 2015.","DOI":"10.1145\/2808783.2808793"},{"key":"key-10.1145\/2872518.2888608-6","doi-asserted-by":"crossref","unstructured":"F. Li and H. V. Jagadish. Constructing an interactive natural language interface for relational databases. pVLDB, 2014.","DOI":"10.14778\/2735461.2735468"},{"key":"key-10.1145\/2872518.2888608-7","doi-asserted-by":"crossref","unstructured":"S. Mathew, M. Petropoulos, H. Q. Ngo, and S. Upadhyaya. A data-centric approach to insider attack detection in database systems. In RAID, 2010.","DOI":"10.1007\/978-3-642-15512-3_20"},{"key":"key-10.1145\/2872518.2888608-8","doi-asserted-by":"crossref","unstructured":"R. Maxion and T. N. Townsend. Masquerade detection using truncated command lines. In DSN, 2002.","DOI":"10.1109\/DSN.2002.1028903"},{"key":"key-10.1145\/2872518.2888608-9","unstructured":"A. S. McGough, B. Arief, C. Gamble, D. Wall, J. Brennan, J. Fitzgerald, A. van Moorsel, S. Alwis, G. Theodoropoulos, and E. Ruck-Keene. Ben-ware: Identifying anomalous human behaviour in heterogeneous systems using beneficial intelligent software. JOWUA, 2015."},{"key":"key-10.1145\/2872518.2888608-10","unstructured":"Ponemon Institute. 2015 Cost of Cyber Crime Study: Global. October 2015."},{"key":"key-10.1145\/2872518.2888608-11","unstructured":"N. Shervashidze, P. Schweitzer, E. J. V. Leeuwen, K. Mehlhorn, and K. M. Borgwardt. Weisfeiler-lehman graph kernels. JMLR, 2011."}],"event":{"name":"the 25th International Conference Companion","location":"Montréal, Québec, Canada","acronym":"WWW '16 Companion","number":"25","sponsor":["SIGWEB, ACM Special Interest Group on Hypertext, Hypermedia, and Web","IW3C2, International World Wide Web Conference Committee"],"start":{"date-parts":[[2016,4,11]]},"end":{"date-parts":[[2016,4,15]]}},"container-title":["Proceedings of the 25th International Conference Companion on World Wide Web - WWW '16 Companion"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2872518.2888608","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/dl.acm.org\/ft_gateway.cfm?id=2888608&ftid=1707716&dwn=1","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:39:07Z","timestamp":1750221547000},"score":1,"resource":{"primary":{"URL":"http:\/\/dl.acm.org\/citation.cfm?doid=2872518.2888608"}},"subtitle":["Analyzing Query Intents in Corporate Databases"],"proceedings-subject":"World Wide Web","short-title":[],"issued":{"date-parts":[[2016]]},"references-count":11,"URL":"https:\/\/doi.org\/10.1145\/2872518.2888608","relation":{},"subject":[],"published":{"date-parts":[[2016]]}}}