One of the toughest cybersecurity issues today are insider threats for which no good solution has been provided to limit their damage through commonly used security solutions. Which could cause serious damage to the assets of the organization. This article begins by presenting a comprehensive multidisciplinary survey of insider threats and the various AI technologies in use. Then, we proposed a method to detect internal threats by analyzing user behavior. A series of activities and events that are analyzed to extract features to effectively detect malicious activity from normal activity. The selected feature vectors are used to train the model. The convolutional neural network (CNN) is used during the implementation phase to detect insider threats of fixed-size feature vectors. The data used to conduct the experiments is public data related to internal threats cert r4.2. The experimental results of the proposed model show that it can successfully detect insider threats with an accuracy of 0.9558 in the best cases.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

Behavior-Based Insider Threat Detection Using a Deep Neural Network

  • Samiha Besnaci,
  • Mohamed Hafidi,
  • Mahnane Lamia

摘要

One of the toughest cybersecurity issues today are insider threats for which no good solution has been provided to limit their damage through commonly used security solutions. Which could cause serious damage to the assets of the organization. This article begins by presenting a comprehensive multidisciplinary survey of insider threats and the various AI technologies in use. Then, we proposed a method to detect internal threats by analyzing user behavior. A series of activities and events that are analyzed to extract features to effectively detect malicious activity from normal activity. The selected feature vectors are used to train the model. The convolutional neural network (CNN) is used during the implementation phase to detect insider threats of fixed-size feature vectors. The data used to conduct the experiments is public data related to internal threats cert r4.2. The experimental results of the proposed model show that it can successfully detect insider threats with an accuracy of 0.9558 in the best cases.