{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,12,1]],"date-time":"2025-12-01T11:16:27Z","timestamp":1764587787041,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":50,"publisher":"ACM","license":[{"start":{"date-parts":[[2016,4,5]],"date-time":"2016-04-05T00:00:00Z","timestamp":1459814400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2016,4,5]]},"DOI":"10.1145\/2897795.2897799","type":"proceedings-article","created":{"date-parts":[[2016,4,7]],"date-time":"2016-04-07T22:22:33Z","timestamp":1460067753000},"page":"1-4","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":43,"title":["Classification of Insider Threat Detection Techniques"],"prefix":"10.1145","author":[{"given":"Ameya","family":"Sanzgiri","sequence":"first","affiliation":[{"name":"Department of Computer Science, University of Memphis, Memphis, TN"}]},{"given":"Dipankar","family":"Dasgupta","sequence":"additional","affiliation":[{"name":"Department of Computer Science, University of Memphis, Memphis, TN"}]}],"member":"320","published-online":{"date-parts":[[2016,4,5]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-77322-3_5"},{"key":"e_1_3_2_1_2_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2014.42"},{"key":"e_1_3_2_1_3_1","first-page":"40","volume-title":"Defense and Security","author":"Thompson P.","year":"2004"},{"volume-title":"Proceedings of the Twenty-First Annual Computer Security Applications Conference (Technology Blitz)","year":"2005","author":"Bradford P","key":"e_1_3_2_1_5_1"},{"key":"e_1_3_2_1_6_1","doi-asserted-by":"publisher","DOI":"10.1145\/1185448.1185638"},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1109\/.2006.1629440"},{"volume-title":"Accessed","year":"2015","author":"Raytheon","key":"e_1_3_2_1_8_1"},{"key":"e_1_3_2_1_9_1","doi-asserted-by":"publisher","DOI":"10.5555\/1776434.1776446"},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1145\/2487575.2488213"},{"volume-title":"Springer","year":"2009","author":"Bowen B. M","key":"e_1_3_2_1_11_1"},{"key":"e_1_3_2_1_12_1","doi-asserted-by":"publisher","DOI":"10.5555\/2026647.2026651"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2012.20"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.5555\/956415.956438"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1016\/S0167-4048(02)01009-X"},{"key":"e_1_3_2_1_16_1","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"crossref","first-page":"26","DOI":"10.1007\/978-3-642-15152-1_3","volume-title":"Trust, Privacy and Security in Digital Business","author":"Kandias M.","year":"2010"},{"volume-title":"MA, 2005.","author":"M. Maybury","key":"e_1_3_2_1_17_1"},{"volume-title":"US Secret Service and CERT Coordination Center","year":"2005","author":"Keeney M.","key":"e_1_3_2_1_18_1"},{"volume-title":"DTIC Document","year":"2006","author":"Band S. R","key":"e_1_3_2_1_19_1"},{"volume-title":"DTIC Document","year":"2002","author":"Herbig K. L","key":"e_1_3_2_1_20_1"},{"key":"e_1_3_2_1_21_1","doi-asserted-by":"crossref","first-page":"85","DOI":"10.1007\/978-1-4419-7133-3_5","volume-title":"Insider Threats in Cyber Security","author":"Greitzer F. L","year":"2010"},{"key":"e_1_3_2_1_22_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2012.309"},{"key":"e_1_3_2_1_23_1","doi-asserted-by":"crossref","unstructured":"F. L Greitzer L. J Kangas C. F Noonan C. R Brown and T. Ferryman. Psychosocial modeling of insider threat risk based on behavioral and word use analysis. e-Service Journal 9(1):106--138 2013.  F. L Greitzer L. J Kangas C. F Noonan C. R Brown and T. Ferryman. Psychosocial modeling of insider threat risk based on behavioral and word use analysis. e-Service Journal 9(1):106--138 2013.","DOI":"10.2979\/eservicej.9.1.106"},{"key":"e_1_3_2_1_24_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2013.453"},{"key":"e_1_3_2_1_25_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2014.40"},{"key":"e_1_3_2_1_26_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.35"},{"key":"e_1_3_2_1_27_1","doi-asserted-by":"publisher","DOI":"10.1109\/DSN.2005.94"},{"key":"e_1_3_2_1_28_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2014.45"},{"key":"e_1_3_2_1_29_1","doi-asserted-by":"publisher","DOI":"10.1145\/2535813.2535825"},{"key":"e_1_3_2_1_30_1","doi-asserted-by":"publisher","DOI":"10.1109\/IAW.2005.1495972"},{"key":"e_1_3_2_1_31_1","doi-asserted-by":"publisher","DOI":"10.1109\/SMCSIA.2003.1232400"},{"key":"e_1_3_2_1_32_1","doi-asserted-by":"publisher","DOI":"10.1145\/1413140.1413159"},{"key":"e_1_3_2_1_33_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2013.392"},{"key":"e_1_3_2_1_34_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2014.38"},{"key":"e_1_3_2_1_35_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.14"},{"key":"e_1_3_2_1_36_1","doi-asserted-by":"publisher","DOI":"10.1109\/CATCH.2009.7"},{"key":"e_1_3_2_1_37_1","doi-asserted-by":"publisher","DOI":"10.5555\/1706428.1706471"},{"key":"e_1_3_2_1_38_1","doi-asserted-by":"publisher","DOI":"10.1108\/09685220610690826"},{"volume-title":"Proceedings of the Workshop on Activity Context System Architectures","year":"2013","author":"Memory A.","key":"e_1_3_2_1_39_1"},{"key":"e_1_3_2_1_40_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.37"},{"key":"e_1_3_2_1_41_1","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.34"},{"key":"e_1_3_2_1_42_1","doi-asserted-by":"publisher","DOI":"10.1145\/366173.366187"},{"issue":"12","key":"e_1_3_2_1_43_1","first-page":"21","article-title":"Attack trees","volume":"24","author":"Schneier B.","year":"1999","journal-title":"Dr. Dobbs journal"},{"key":"e_1_3_2_1_44_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-73742-3_4"},{"key":"e_1_3_2_1_45_1","first-page":"1","volume-title":"11th International Conference on","author":"Mathew S.","year":"2008"},{"key":"e_1_3_2_1_46_1","doi-asserted-by":"publisher","DOI":"10.1007\/978-1-4419-7133-3_6"},{"key":"e_1_3_2_1_47_1","doi-asserted-by":"publisher","DOI":"10.1145\/2295136.2295168"},{"key":"e_1_3_2_1_49_1","doi-asserted-by":"publisher","DOI":"10.1145\/1595676.1595678"},{"key":"e_1_3_2_1_50_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2009.104"},{"key":"e_1_3_2_1_51_1","doi-asserted-by":"crossref","unstructured":"A. P Moore D. McIntire D. Mundie and D. Zubrow. Justification of a pattern for detecting intellectual property theft by departing insiders. 2013.  A. P Moore D. McIntire D. Mundie and D. Zubrow. Justification of a pattern for detecting intellectual property theft by departing insiders. 2013.","DOI":"10.21236\/ADA610785"},{"key":"e_1_3_2_1_52_1","doi-asserted-by":"publisher","DOI":"10.1109\/HICSS.2013.279"}],"event":{"name":"CISRC '16: 11th Annual Cyber and Information Security Research","sponsor":["Oak Ridge National Laboratory"],"location":"Oak Ridge TN USA","acronym":"CISRC '16"},"container-title":["Proceedings of the 11th Annual Cyber and Information Security Research Conference"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2897795.2897799","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/2897795.2897799","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T04:38:45Z","timestamp":1750221525000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/2897795.2897799"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,4,5]]},"references-count":50,"alternative-id":["10.1145\/2897795.2897799","10.1145\/2897795"],"URL":"https:\/\/doi.org\/10.1145\/2897795.2897799","relation":{},"subject":[],"published":{"date-parts":[[2016,4,5]]},"assertion":[{"value":"2016-04-05","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}