.png){kind=icon}
返回
An efficient pattern-based approach for insider threat classification using the image-based feature representation
.png){kind=icon}
PRE
AI
DOI：10.1016/j.jisa.2023.103434.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Insider threats are expensive, difficult to detect, and sadly, on the rise. Despite significant research efforts, existing approaches are inadequate in accuracy and precision. They also suffer from a high false-positive rate in detecting insider attacks due to the heterogeneous nature of available insider threat data. Researchers have attempted an image-based approach for detecting insider threats to overcome the challenges from existing techniques. Most existing image-based approaches utilized Convolutional neural networks (CNN) to detect insider threats. Moreover, the CNN-based model lost the important user behavioral features due to the pooling operation. Also, they are often unsuitable for predictive modeling with features that lack spatial correlations. Aiming to address this issue, the Wavelet convolutional neural network (WCNN) is proposed. The WCNN model takes advantage of spectral and spatial analysis to classify insider threats using image-based feature representations. The proposed approach combines the scenario-specific single-day features from the user activity logs into a one-dimensional feature vector. It is then represented as images that reveal visual patterns effectively to identify malicious insiders using WCNN. In addition, the proposed approach adopts the SMOTEENN sampling technique to solve the class imbalance problem. The performance of the proposed approach is evaluated on the benchmark dataset. Experimental results show the improvement of the proposed approach over the current state-of-the-art techniques in terms of classification accuracy (97.19%), AUC (97.30%), and low false positives to identify malicious insiders.
Keyword:
Insider threat
Multi-perspective feature selection
Class imbalance
Image-based feature representation
Wavelet CNN
Insider threat classification
期刊
IF:
3.7
论文数:
2.0K
被引数:
4.9K
机构
引用论文
Insider Threat Risk Prediction based on Bayesian Network基于贝叶斯网络的内部威胁风险预测.png)
COMPUTERS & SECURITY
OAAI
COMPUTERS & SECURITYIF5.4
OAAI分享收藏Effects of Scarlet Eggplant Rootstock on Growth, Yield, and Sugar Content of Grafted Tomato FruitsOAAI
OAAI分享收藏Insight Into Insiders and IT: A Survey of Insider Threat Taxonomies, Analysis, Modeling, and Countermeasures洞察内部人员和IT: 内部威胁分类，分析，建模和对策的调查OAAI
OAAI分享收藏Physical Limitations and Depressive Symptoms: Exploring the Nature of the Association身体限制和抑郁症状: 探索协会的性质OAAI
OAAI分享收藏Effects of multi orbital contributions in the angular-dependent ionization of molecules in intense few-cycle laser pulses在强烈的几周激光脉冲中分子的角度相关电离中多轨道贡献的影响
OAAI
OAAI分享收藏A survey on deep learning techniques for image and video semantic segmentation用于图像和视频语义分割的深度学习技术综述
PREAI
分享收藏Using filter banks in Convolutional Neural Networks for texture classification在卷积神经网络中使用滤波器组进行纹理分类OAAI
OAAI分享收藏
查看更多内容