Insider attacks have become increasingly frequent and more difficult to detect. Modeling user activities to capture the temporal features and connections between activities can enhance the detection of insider threats. In this work, we present a novel insider activity modeling approach that uses effective representations of user activities to enhance the detection performance. The proposed activity modeling and detection system has been evaluated using log files from the CMU CERT r4.2 insider dataset that provides the activities of employees for eighteen working months. Our results have shown that the proposed system achieves high malicious activity identification performance with the proposed data modeling techniques.


    Access

    Check access

    Check availability in my library

    Order at Subito €


    Export, share and cite



    Title :

    Temporal Semantic Parsing for Insider Threat Activity Modeling and Detection


    Contributors:


    Publication date :

    2024-07-15


    Size :

    983784 byte





    Type of media :

    Conference paper


    Type of material :

    Electronic Resource


    Language :

    English



    Intent detection and semantic parsing for navigation dialogue language processing

    Zheng, Yang / Liu, Yongkang / Hansen, John H.L. | IEEE | 2017


    Grammar-Constrained Neural Semantic Parsing with LR Parsers

    Baranowski, Artur / Hochgeschwender, Nico | German Aerospace Center (DLR) | 2021

    Free access

    IMPORTANCE OF PSYCHOMETRIC TEST OF ANXIETY TO CURB INSIDER THREAT IN NUCLEAR FACILITIES

    Bhamidipati, Sandeep / Datta, Arpita / Goel, Alpana | TIBKAT | 2022



    Insider

    Online Contents | 2002