MITD: A Multi-Dimensional Insider Threat Detection Framework Based On Deep Learning
In this paper, we propose a multi-dimensional insider threat detection framework (MITD), which aims to improve the accuracy of detection by comprehensively analyzing user behavior patterns. We combine statistical features and behavioral sequences and use sequence pattern recognition, graph structure information mining, and adaptive feature extraction methods. It can reveal user behavior from multiple dimensions. Then, we intelligently fuse the extracted multi-dimensional features to generate a comprehensive feature representation. It is further fused with statistical features through two strategies: concat and bitwise addition. Experimental results based on the CERT r4.2 dataset show that the MITD framework significantly improves in terms of accuracy, precision, recall, and F1 score, reaching 93.2% accuracy and 93.5% recall. The results show that the MITD framework effectively improves the performance of insider threat detection and has great potential in practical applications.
Authors
- Haifang Qin (ORCID: https://orcid.org/0009-0004-4649-4090)
- Hongcheng Zhou (ORCID: https://orcid.org/0000-0003-1257-0388)
- Feng Qiu (ORCID: https://orcid.org/0000-0003-4255-7299)
- Jiaxuan Feng
- Yuxin Huang (ORCID: https://orcid.org/0000-0003-1277-6212)
- Lijuan Peng
Institutions
- Beijing Institute of Technology (CN)
- Southwest University of Science and Technology (CN)
Publication Details
- Published
- 2024-10-26
- DOI
- https://doi.org/10.1109/cisp-bmei64163.2024.10906151
- Primary Topic
- Advanced Malware Detection Techniques
- Type
- article
- Field-Weighted Citation Impact
- 0.00