A Transformer-Based Deep Learning Framework for Insider Threat Detection

Q: How many days will it take for my paper to be published?

The review time for papers is not fixed. However, if the paper is accepted and the author completes the processing charges formalities, the paper will be published within a few working days.

Q: I would like to receive a hard copy of the journal materials. Are there any additional charges?

You can log in to the author portal and pay 500 INR to receive the hard copy materials.

A Ludwika; Dr A S N Chakravarthy; C Priyadarshini

A Transformer-Based Deep Learning Framework for Insider Threat Detection

Authors: A Ludwika, Dr A S N Chakravarthy, C Priyadarshini

Unique Paper ID: 183075
Volume: 12
Issue: 3
PageNo: 72-78

Keywords: Insider Threat Detection Deep Learning Transformer Model User Behaviour Analytics Sequence Modelling Anomaly Detection.

Abstract:
Detecting insider threats is a significant cybersecurity challenge, as conventional systems often fail to identify the subtle behavioral clues of malicious actors. This research proposes a novel approach that treats user activity logs as a language, where harmful actions deviate from normal "grammatical" patterns. To effectively analyze this "language," the study introduces a deep learning framework centered on a Transformer architecture. Unlike models that process data sequentially, the Transformer's self-attention mechanism can examine an entire history of user actions at once, enabling it to capture complex, long-range relationships. The system processes a wide range of data, including logins, device usage, file access, and emails. It enhances this data by creating sessions, profiling individual user behavior, and incorporating anomaly scores from an unsupervised model. When tested on the public CERT Insider Threat r4.2 dataset, the model proved highly effective. It achieved 90% overall accuracy, a 71% precision rate in identifying threats, and a recall of 55%. This performance underscores the value of using Transformer-based models to build more intelligent, context-aware security systems for identifying insider threats.

Download article

email to a friend

Cite This Article

ISSN: 2349-6002
Volume: 12
Issue: 3
PageNo: 72-78

A Transformer-Based Deep Learning Framework for Insider Threat Detection

Available:https://ijirt.org/article?manuscript=183075

Impact Factor
8.01 (Year 2024)

UGC Approved
Journal no 47859

Join Our IPN

IJIRT Partner Network

Submit your research paper and those of your network (friends, colleagues, or peers) through your IPN account, and receive 800 INR for each paper that gets published.

Join Now