[ICANN 2023] Anomaly-Based Insider Threat Detection via Hierarchical Information Fusion
-
Updated
Nov 20, 2023 - Jupyter Notebook
[ICANN 2023] Anomaly-Based Insider Threat Detection via Hierarchical Information Fusion
A comprehensive machine learning and deep learning pipeline for detecting insider threats using the CERT r4.1 dataset. This project combines unsupervised anomaly detection, supervised machine learning, and advanced deep learning architectures to identify anomalous user behavior in enterprise environments.
Patent-aligned cybersecurity prototype implementing dynamic trust-based adaptive access control using credential integrity, competence evidence, behavioral risk, and event-driven trust recomputation.
An end-to-end AI system for detecting insider threats using a hybrid machine learning approach (Isolation Forest + XGBoost). Features a high-performance ETL pipeline using DuckDB, real-time inference via FastAPI, and integrated Explainable AI (SHAP) for transparent risk assessment on the CERT R4.2 dataset.
Cyber - Eye (Frontend only) , hosted via netlify
Insider Threat Monitor
Network profiling and behavior analysis
Cyber Projects
*This simulation captures core, widely observed attacker behaviors aligned with common enterprise intrusion patterns. From brute-force access to obfuscated execution, persistence, recon, and privilege assessment, each step reflects actions that threat actors commonly execute after compromising a host.
Add a description, image, and links to the insider-threat-detection topic page so that developers can more easily learn about it.
To associate your repository with the insider-threat-detection topic, visit your repo's landing page and select "manage topics."