Evaluating Insider Threat Detection Workflow Using Supervised and Unsupervised Learning. Le, D. C. & Zincir-Heywood, A. N. In IEEE Security and Privacy Workshops (SPW '18), pages 270-275, San Francisco, CA, USA, 2018.
Evaluating Insider Threat Detection Workflow Using Supervised and Unsupervised Learning [link]Paper  Evaluating Insider Threat Detection Workflow Using Supervised and Unsupervised Learning [pdf]Paper  doi  abstract   bibtex   2 downloads  
Insider threat is a prominent cyber-security dan- ger faced by organizations and companies. In this research, we study and evaluate an insider threat detection workflow using supervised and unsupervised learning algorithms. To this end, we study data exploration and analysis, anomaly detection and malicious behaviour classification on a publicly available data set. We evaluate several supervised and unsupervised learning algorithms - HMM, SOM, and DT - using this workflow.

Downloads: 2