Hybrid Deep Learning Model using SPCAGAN Augmentation for Insider Threat Analysis
Cyberattacks from within an organization's trusted entities are known as insider threats. Anomaly detection using deep learning requires comprehensive data, but insider threat data is not readily available due to confidentiality concerns of organizations. Therefore, there arises demand to generate synthetic data to explore enhanced approaches for threat analysis. We propose a linear manifold learning-based generative adversarial network, SPCAGAN, that takes input from heterogeneous data sources and adds a novel loss function to train the generator to produce high-quality data that closely resembles the original data distribution. Furthermore, we introduce a deep learning-based hybrid model for insider threat analysis. We provide extensive experiments for data synthesis, anomaly detection, adversarial robustness, and synthetic data quality analysis using benchmark datasets. In this context, empirical comparisons show that GAN-based oversampling is competitive with numerous typical oversampling regimes. For synthetic data generation, our SPCAGAN model overcame the problem of mode collapse and converged faster than previous GAN models. Results demonstrate that our proposed approach has a lower error, is more accurate, and generates substantially superior synthetic insider threat data than previous models.
Code (0)
등록된 구현이 없습니다.
Tasks
Adversarial RobustnessAnomaly DetectionGenerative Adversarial NetworkSynthetic Data GenerationSimilar Papers 제목 키워드 기반
Scalable and Ethical Insider Threat Detection through Data Synthesis and Analysis by LLMs
Insider threats wield an outsized influence on organizations, disproportionate to their small numbers. This is due to the internal access insiders have to systems, information, and infrastructure. %One example of this in…
DiversitySynthetic Data GenerationAI-Driven IRM: Transforming insider risk management with adaptive scoring and LLM-based threat detection
Insider threats pose a significant challenge to organizational security, often evading traditional rule-based detection systems due to their subtlety and contextual nature. This paper presents an AI-powered Insider Risk …
Anomaly DetectionFederated LearningManagementDeep Learning for Unsupervised Insider Threat Detection in Structured Cybersecurity Data Streams
Analysis of an organization's computer network activity is a key component of early detection and mitigation of insider threat, a growing concern for many organizations. Raw system logs are a prototypical example of stre…
Anomaly DetectionAnomaly Detection for Scenario-based Insider Activities using CGAN Augmented Data
Insider threats are the cyber attacks from within the trusted entities of an organization. Lack of real-world data and issue of data imbalance leave insider threat analysis an understudied research area. To mitigate the …
Anomaly DetectionGeneral ClassificationGenerative Adversarial NetworkMulti-class Anomaly Detection+1Deep Learning for Insider Threat Detection: Review, Challenges and Opportunities
Insider threats, as one type of the most challenging threats in cyberspace, usually cause significant loss to organizations. While the problem of insider threat detection has been studied for a long time in both security…
BIG-bench Machine LearningDeep LearningFeature Engineering