{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2019:J6IKXJ3OV5TTDM74Z36RPD3G7F","short_pith_number":"pith:J6IKXJ3O","schema_version":"1.0","canonical_sha256":"4f90aba76eaf6731b3fccefd178f66f96f5c463804643f27d76a41d23e2f5b12","source":{"kind":"arxiv","id":"1901.10948","version":1},"attestation_state":"computed","paper":{"title":"Classifier Suites for Insider Threat Detection","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"David Noever","submitted_at":"2019-01-30T16:55:14Z","abstract_excerpt":"Better methods to detect insider threats need new anticipatory analytics to capture risky behavior prior to losing data. In search of the best overall classifier, this work empirically scores 88 machine learning algorithms in 16 major families. We extract risk features from the large CERT dataset, which blends real network behavior with individual threat narratives. We discover the predictive importance of measuring employee sentiment. Among major classifier families tested on CERT, the random forest algorithms offer the best choice, with different implementations scoring over 98% accurate. In"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"1901.10948","kind":"arxiv","version":1},"metadata":{"license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","primary_cat":"cs.LG","submitted_at":"2019-01-30T16:55:14Z","cross_cats_sorted":["cs.CR","stat.ML"],"title_canon_sha256":"ee1a07f41154f00d4e20e61379ad61a0bd118632acd92b66fa19d25b9a6ef95e","abstract_canon_sha256":"f02e999a4cf022fce1c0cfa3513872f07ac42e2b744f085d67af63d798207bf6"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-05-17T23:55:05.693298Z","signature_b64":"CqcbU5FKk90+YTNlNJ1gqaCRo8Q5NB/obp5nVWOpJ6Xl0Y25mJc59PA0furyZK67GiT0zi9KMhNbNsLW4yj9Cg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"4f90aba76eaf6731b3fccefd178f66f96f5c463804643f27d76a41d23e2f5b12","last_reissued_at":"2026-05-17T23:55:05.692947Z","signature_status":"signed_v1","first_computed_at":"2026-05-17T23:55:05.692947Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"Classifier Suites for Insider Threat Detection","license":"http://creativecommons.org/licenses/by-nc-sa/4.0/","headline":"","cross_cats":["cs.CR","stat.ML"],"primary_cat":"cs.LG","authors_text":"David Noever","submitted_at":"2019-01-30T16:55:14Z","abstract_excerpt":"Better methods to detect insider threats need new anticipatory analytics to capture risky behavior prior to losing data. In search of the best overall classifier, this work empirically scores 88 machine learning algorithms in 16 major families. We extract risk features from the large CERT dataset, which blends real network behavior with individual threat narratives. We discover the predictive importance of measuring employee sentiment. Among major classifier families tested on CERT, the random forest algorithms offer the best choice, with different implementations scoring over 98% accurate. In"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"1901.10948","kind":"arxiv","version":1},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"1901.10948","created_at":"2026-05-17T23:55:05.693002+00:00"},{"alias_kind":"arxiv_version","alias_value":"1901.10948v1","created_at":"2026-05-17T23:55:05.693002+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.1901.10948","created_at":"2026-05-17T23:55:05.693002+00:00"},{"alias_kind":"pith_short_12","alias_value":"J6IKXJ3OV5TT","created_at":"2026-05-18T12:33:18.533446+00:00"},{"alias_kind":"pith_short_16","alias_value":"J6IKXJ3OV5TTDM74","created_at":"2026-05-18T12:33:18.533446+00:00"},{"alias_kind":"pith_short_8","alias_value":"J6IKXJ3O","created_at":"2026-05-18T12:33:18.533446+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F","json":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F.json","graph_json":"https://pith.science/api/pith-number/J6IKXJ3OV5TTDM74Z36RPD3G7F/graph.json","events_json":"https://pith.science/api/pith-number/J6IKXJ3OV5TTDM74Z36RPD3G7F/events.json","paper":"https://pith.science/paper/J6IKXJ3O"},"agent_actions":{"view_html":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F","download_json":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F.json","view_paper":"https://pith.science/paper/J6IKXJ3O","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=1901.10948&json=true","fetch_graph":"https://pith.science/api/pith-number/J6IKXJ3OV5TTDM74Z36RPD3G7F/graph.json","fetch_events":"https://pith.science/api/pith-number/J6IKXJ3OV5TTDM74Z36RPD3G7F/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F/action/timestamp_anchor","attest_storage":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F/action/storage_attestation","attest_author":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F/action/author_attestation","sign_citation":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F/action/citation_signature","submit_replication":"https://pith.science/pith/J6IKXJ3OV5TTDM74Z36RPD3G7F/action/replication_record"}},"created_at":"2026-05-17T23:55:05.693002+00:00","updated_at":"2026-05-17T23:55:05.693002+00:00"}