{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,25]],"date-time":"2025-10-25T14:18:02Z","timestamp":1761401882547,"version":"3.41.0"},"publisher-location":"New York, NY, USA","reference-count":17,"publisher":"ACM","license":[{"start":{"date-parts":[[2017,10,30]],"date-time":"2017-10-30T00:00:00Z","timestamp":1509321600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":[],"published-print":{"date-parts":[[2017,10,30]]},"DOI":"10.1145\/3139923.3139928","type":"proceedings-article","created":{"date-parts":[[2017,10,31]],"date-time":"2017-10-31T14:58:58Z","timestamp":1509461938000},"page":"1-12","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":11,"title":["Insider Threat Event Detection in User-System Interactions"],"prefix":"10.1145","author":[{"given":"Pablo","family":"Moriano","sequence":"first","affiliation":[{"name":"Indiana University, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jared","family":"Pendleton","sequence":"additional","affiliation":[{"name":"Cisco Systems, Inc., Knoxville, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Steven","family":"Rich","sequence":"additional","affiliation":[{"name":"Cisco Systems, Inc., Knoxville, TN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"L Jean","family":"Camp","sequence":"additional","affiliation":[{"name":"Indiana University, Bloomington, IN, USA"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"320","published-online":{"date-parts":[[2017,10,30]]},"reference":[{"key":"e_1_3_2_1_1_1","doi-asserted-by":"publisher","DOI":"10.1109\/ICDE.2011.5767885"},{"volume-title":"Event detection in time series of mobile communication graphs 27th Army Science Conference","author":"Akoglu L.","key":"e_1_3_2_1_2_1","unstructured":"L. Akoglu and C. Faloutsos 2010. Event detection in time series of mobile communication graphs 27th Army Science Conference . Orlando, FL, USA , 77--79. L. Akoglu and C. Faloutsos 2010. Event detection in time series of mobile communication graphs 27th Army Science Conference. Orlando, FL, USA, 77--79."},{"key":"e_1_3_2_1_3_1","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-014-0365-y"},{"key":"e_1_3_2_1_4_1","volume-title":"Understanding Insider Threat: A Framework for Characterising Attacks IEEE Security and Privacy Workshops (SPW)","author":"Nurse J. R. C.","year":"2014","unstructured":"J. R. C. Nurse , O. Buckley , P. A. Legg , M. Goldsmith , S. Creese , G. R. T. Wright , and M. Whitty 2014 . Understanding Insider Threat: A Framework for Characterising Attacks IEEE Security and Privacy Workshops (SPW) . San Jose, CA, USA, 214--228. https:\/\/doi.org\/10.1109\/SPW. 2014.38 10.1109\/SPW.2014.38 J. R. C. Nurse, O. Buckley, P. A. Legg, M. Goldsmith, S. Creese, G. R. T. Wright, and M. Whitty 2014. Understanding Insider Threat: A Framework for Characterising Attacks IEEE Security and Privacy Workshops (SPW). San Jose, CA, USA, 214--228. https:\/\/doi.org\/10.1109\/SPW.2014.38"},{"key":"e_1_3_2_1_5_1","volume-title":"Insider Threat Detection Using Stream Mining and Graph Mining IEEE Third International Conference on Privacy, Security, Risk and Trust and IEEE Third Inernational Conference on Social Computing","author":"Parveen P.","year":"2011","unstructured":"P. Parveen , J. Evans , B. Thuraisingham , K. W. Hamlen , and L. Khan 2011 . Insider Threat Detection Using Stream Mining and Graph Mining IEEE Third International Conference on Privacy, Security, Risk and Trust and IEEE Third Inernational Conference on Social Computing . Boston, MA, USA, 1102--1110. https:\/\/doi.org\/10.1109\/PASSAT\/SocialCom. 2011.211 10.1109\/PASSAT P. Parveen, J. Evans, B. Thuraisingham, K. W. Hamlen, and L. Khan 2011. Insider Threat Detection Using Stream Mining and Graph Mining IEEE Third International Conference on Privacy, Security, Risk and Trust and IEEE Third Inernational Conference on Social Computing. Boston, MA, USA, 1102--1110. https:\/\/doi.org\/10.1109\/PASSAT\/SocialCom.2011.211"},{"key":"e_1_3_2_1_6_1","volume-title":"echnical Report. bibinfoinstitutionhttp:\/\/www.ponemon.org\/library\/2016-cost-of-cyber-crime-study-the-risk-of-business-innovation. shownoteDate last accessed","author":"Ponemon Institute","year":"2017","unstructured":"Ponemon Institute . 2016. 2016 Cost of Cyber Crime Study $&$ the Risk of Business Innovation. bibinfotype T echnical Report. bibinfoinstitutionhttp:\/\/www.ponemon.org\/library\/2016-cost-of-cyber-crime-study-the-risk-of-business-innovation. shownoteDate last accessed July 5, 2017 . Ponemon Institute. 2016. 2016 Cost of Cyber Crime Study $&$ the Risk of Business Innovation. bibinfotypeTechnical Report. bibinfoinstitutionhttp:\/\/www.ponemon.org\/library\/2016-cost-of-cyber-crime-study-the-risk-of-business-innovation. shownoteDate last accessed July 5, 2017."},{"key":"e_1_3_2_1_7_1","doi-asserted-by":"publisher","DOI":"10.1002\/wics.1347"},{"key":"#cr-split#-e_1_3_2_1_8_1.1","doi-asserted-by":"crossref","unstructured":"T. Rashid I. Agrafiotis and J. R. C. Nurse 2016. A New Take on Detecting Insider Threats: Exploring the use of Hidden Markov Models Proceedings of the 8th ACM CCS International Workshop on Managing Insider Security Threats. 47--56. https:\/\/doi.org\/10.1145\/2995959.2995964 10.1145\/2995959.2995964","DOI":"10.1145\/2995959.2995964"},{"key":"#cr-split#-e_1_3_2_1_8_1.2","doi-asserted-by":"crossref","unstructured":"T. Rashid I. Agrafiotis and J. R. C. Nurse 2016. A New Take on Detecting Insider Threats: Exploring the use of Hidden Markov Models Proceedings of the 8th ACM CCS International Workshop on Managing Insider Security Threats. 47--56. https:\/\/doi.org\/10.1145\/2995959.2995964","DOI":"10.1145\/2995959.2995964"},{"key":"e_1_3_2_1_9_1","unstructured":"Reuters 2011. Ex-Ford engineer sentenced for trade secrets theft. http:\/\/www.reuters.com\/article\/us-djc-ford-tradesecrets-idUSTRE73C3FG20110413. (April 2011). shownoteDate last accessed July 5 2017.  Reuters 2011. Ex-Ford engineer sentenced for trade secrets theft. http:\/\/www.reuters.com\/article\/us-djc-ford-tradesecrets-idUSTRE73C3FG20110413. (April 2011). shownoteDate last accessed July 5 2017."},{"key":"e_1_3_2_1_10_1","doi-asserted-by":"publisher","DOI":"10.1016\/0005-1098(78)90005-5"},{"key":"e_1_3_2_1_11_1","doi-asserted-by":"publisher","DOI":"10.1073\/pnas.0706851105"},{"key":"#cr-split#-e_1_3_2_1_12_1.1","doi-asserted-by":"crossref","unstructured":"J. Sun C. Faloutsos S. Papadimitriou and P. S. Yu. 2007. GraphScope: parameter-free mining of large time-evolving graphs Proceedings of the 13th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. San Jose CA USA 687--696. https:\/\/doi.org\/10.1145\/1281192.1281266 10.1145\/1281192.1281266","DOI":"10.1145\/1281192.1281266"},{"key":"#cr-split#-e_1_3_2_1_12_1.2","doi-asserted-by":"crossref","unstructured":"J. Sun C. Faloutsos S. Papadimitriou and P. S. Yu. 2007. GraphScope: parameter-free mining of large time-evolving graphs Proceedings of the 13th ACM SIGKDD International Conference on Knowledge Discovery and Data Mining. San Jose CA USA 687--696. https:\/\/doi.org\/10.1145\/1281192.1281266","DOI":"10.1145\/1281192.1281266"},{"key":"e_1_3_2_1_13_1","doi-asserted-by":"publisher","DOI":"10.1126\/science.1171990"},{"key":"e_1_3_2_1_14_1","doi-asserted-by":"publisher","DOI":"10.1038\/srep02522"},{"key":"e_1_3_2_1_15_1","doi-asserted-by":"publisher","DOI":"10.1103\/PhysRevE.76.046115"}],"event":{"name":"CCS '17: 2017 ACM SIGSAC Conference on Computer and Communications Security","sponsor":["SIGSAC ACM Special Interest Group on Security, Audit, and Control"],"location":"Dallas Texas USA","acronym":"CCS '17"},"container-title":["Proceedings of the 2017 International Workshop on Managing Insider Security Threats"],"original-title":[],"link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3139923.3139928","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3139923.3139928","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,18]],"date-time":"2025-06-18T03:30:39Z","timestamp":1750217439000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3139923.3139928"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2017,10,30]]},"references-count":17,"alternative-id":["10.1145\/3139923.3139928","10.1145\/3139923"],"URL":"https:\/\/doi.org\/10.1145\/3139923.3139928","relation":{},"subject":[],"published":{"date-parts":[[2017,10,30]]},"assertion":[{"value":"2017-10-30","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}