{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T18:07:54Z","timestamp":1761588474229,"version":"build-2065373602"},"reference-count":18,"publisher":"IBM","issue":"4","content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IBM J. Res. & Dev."],"published-print":{"date-parts":[[2016,7]]},"DOI":"10.1147\/jrd.2016.2568538","type":"journal-article","created":{"date-parts":[[2016,7,27]],"date-time":"2016-07-27T14:48:29Z","timestamp":1469630909000},"page":"8:1-8:11","source":"Crossref","is-referenced-by-count":4,"title":["Uncovering insider threats from the digital footprints of individuals"],"prefix":"10.1147","volume":"60","author":[{"given":"A.","family":"Coden","sequence":"first","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"W. S.","family":"Lin","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"K.","family":"Houck","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"M.","family":"Tanenblatt","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"J.","family":"Boston","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"J. E.","family":"MacNaught","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"D.","family":"Soroker","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"J. D.","family":"Weisz","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"S.","family":"Pan","sequence":"additional","affiliation":[{"name":"Department of Information Systems, University of Maryland, Baltimore, MD, USA"}]},{"given":"J.-H.","family":"Lai","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"J.","family":"Lu","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"S.","family":"Wood","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"Y.","family":"Xia","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]},{"given":"C.-Y.","family":"Lin","sequence":"additional","affiliation":[{"name":"IBM Research Division, Thomas J. Watson Research Center, Yorktown Heights, NY, USA"}]}],"member":"3082","reference":[{"key":"ref10","first-page":"1","article-title":"Simulating malicious insiders in real host-monitored user data","author":"wallnau","year":"0","journal-title":"Proceedings of CSEET"},{"journal-title":"IBM security content analysis software development kit","year":"0","key":"ref11"},{"key":"ref12","doi-asserted-by":"publisher","DOI":"10.1145\/342009.335388"},{"key":"ref13","doi-asserted-by":"publisher","DOI":"10.1007\/s10618-012-0300-z"},{"journal-title":"Analyst's Desktop Binder","year":"0","key":"ref14"},{"key":"ref15","article-title":"Efficient Bayesian inference for anomaly detection","author":"xia","year":"0","journal-title":"IEEE Trans Inf Forensics Security"},{"key":"ref16","first-page":"854","article-title":"Multi-criteria anomaly detection using Pareto depth analysis","author":"hsiao","year":"0","journal-title":"Proc Adv Neural Inf Process Syst"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.1162\/neco.2006.18.7.1527"},{"journal-title":"Parallel Distributed Processing volume 1 Foundations","year":"1986","author":"smolensky","key":"ref18"},{"key":"ref4","doi-asserted-by":"publisher","DOI":"10.1145\/2487575.2488213"},{"key":"ref3","first-page":"47","article-title":"True psychology of the insider spy","volume":"18","author":"charney","year":"2010","journal-title":"J U S Intell Stud"},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.14"},{"key":"ref5","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2013.35"},{"journal-title":"The CERT Guide to Insider Threats How to Prevent Detect and Respond to Information Technology Crimes (Theft Sabotage Fraud)","year":"2012","author":"cappelli","key":"ref8"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1109\/SPW.2014.41"},{"journal-title":"Bradley manning sentenced to 35 years in WikiLeaks case","year":"2013","author":"tate","key":"ref2"},{"journal-title":"DARPA-NAA-11-04 Anomaly Detection at Multiple Scales","year":"0","key":"ref1"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-010-0415-1"}],"container-title":["IBM Journal of Research and Development"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx7\/5288520\/7523342\/07523357.pdf?arnumber=7523357","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,27]],"date-time":"2025-10-27T18:03:20Z","timestamp":1761588200000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/7523357\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2016,7]]},"references-count":18,"journal-issue":{"issue":"4"},"URL":"https:\/\/doi.org\/10.1147\/jrd.2016.2568538","relation":{},"ISSN":["0018-8646","0018-8646"],"issn-type":[{"type":"print","value":"0018-8646"},{"type":"electronic","value":"0018-8646"}],"subject":[],"published":{"date-parts":[[2016,7]]}}}