{"record_type":"pith_number_record","schema_url":"https://pith.science/schemas/pith-number/v1.json","pith_number":"pith:2025:YBRTFUQ363J7GVEUEZXGDPGVC7","short_pith_number":"pith:YBRTFUQ3","schema_version":"1.0","canonical_sha256":"c06332d21bf6d3f35494266e61bcd517d41afc6a7fc8751c199d383903dbe9bd","source":{"kind":"arxiv","id":"2506.23446","version":2},"attestation_state":"computed","paper":{"title":"User-Based Sequential Modeling with Transformer Encoders for Insider Threat Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Adewale Akinfaderin, Mohamed Elbasheer","submitted_at":"2025-06-30T00:47:31Z","abstract_excerpt":"Insider threat detection presents unique challenges due to the authorized status of malicious actors and the subtlety of anomalous behaviors. Existing machine learning methods often treat user activity as isolated events, thereby failing to leverage sequential dependencies in user behavior. In this study, we propose a User-Based Sequencing (UBS) methodology, transforming the CERT insider threat dataset into structured temporal sequences suitable for deep sequential modeling. We deploy a Transformer Encoder architecture to model benign user activity and employ its reconstruction errors as anoma"},"verification_status":{"content_addressed":true,"pith_receipt":true,"author_attested":false,"weak_author_claims":0,"strong_author_claims":0,"externally_anchored":false,"storage_verified":false,"citation_signatures":0,"replication_records":0,"graph_snapshot":true,"references_resolved":false,"formal_links_present":false},"canonical_record":{"source":{"id":"2506.23446","kind":"arxiv","version":2},"metadata":{"license":"http://creativecommons.org/licenses/by/4.0/","primary_cat":"cs.LG","submitted_at":"2025-06-30T00:47:31Z","cross_cats_sorted":[],"title_canon_sha256":"c0845adbb1054a1cdd1987bfe68bc6277cd6c776596b66466fd41ca9d519aba3","abstract_canon_sha256":"b1395a614db644b4a60f679f69c942090b4767d2f1b7d8f6f3376b5717e9f5a8"},"schema_version":"1.0"},"receipt":{"kind":"pith_receipt","key_id":"pith-v1-2026-05","algorithm":"ed25519","signed_at":"2026-07-05T11:34:52.633865Z","signature_b64":"GQyT+Y8jvOYpNSidAEWxXGIL43viGS8fj9MW5c/fI5KlcSih58Ovc3Y5+GrZN7EMGgtEmmZyl1TmYKqX3EkOCg==","signed_message":"canonical_sha256_bytes","builder_version":"pith-number-builder-2026-05-17-v1","receipt_version":"0.3","canonical_sha256":"c06332d21bf6d3f35494266e61bcd517d41afc6a7fc8751c199d383903dbe9bd","last_reissued_at":"2026-07-05T11:34:52.633248Z","signature_status":"signed_v1","first_computed_at":"2026-07-05T11:34:52.633248Z","public_key_fingerprint":"8d4b5ee74e4693bcd1df2446408b0d54"},"graph_snapshot":{"paper":{"title":"User-Based Sequential Modeling with Transformer Encoders for Insider Threat Detection","license":"http://creativecommons.org/licenses/by/4.0/","headline":"","cross_cats":[],"primary_cat":"cs.LG","authors_text":"Adewale Akinfaderin, Mohamed Elbasheer","submitted_at":"2025-06-30T00:47:31Z","abstract_excerpt":"Insider threat detection presents unique challenges due to the authorized status of malicious actors and the subtlety of anomalous behaviors. Existing machine learning methods often treat user activity as isolated events, thereby failing to leverage sequential dependencies in user behavior. In this study, we propose a User-Based Sequencing (UBS) methodology, transforming the CERT insider threat dataset into structured temporal sequences suitable for deep sequential modeling. We deploy a Transformer Encoder architecture to model benign user activity and employ its reconstruction errors as anoma"},"claims":{"count":0,"items":[],"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"source":{"id":"2506.23446","kind":"arxiv","version":2},"verdict":{"id":null,"model_set":{},"created_at":null,"strongest_claim":"","one_line_summary":"","pipeline_version":null,"weakest_assumption":"","pith_extraction_headline":""},"integrity":{"clean":true,"summary":{"advisory":0,"critical":0,"by_detector":{},"informational":0},"endpoint":"/pith/2506.23446/integrity.json","findings":[],"available":true,"detectors_run":[],"snapshot_sha256":"c28c3603d3b5d939e8dc4c7e95fa8dfce3d595e45f758748cecf8e644a296938"},"references":{"count":0,"sample":[],"resolved_work":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57","internal_anchors":0},"formal_canon":{"evidence_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"author_claims":{"count":0,"strong_count":0,"snapshot_sha256":"258153158e38e3291e3d48162225fcdb2d5a3ed65a07baac614ab91432fd4f57"},"builder_version":"pith-number-builder-2026-05-17-v1"},"aliases":[{"alias_kind":"arxiv","alias_value":"2506.23446","created_at":"2026-07-05T11:34:52.633328+00:00"},{"alias_kind":"arxiv_version","alias_value":"2506.23446v2","created_at":"2026-07-05T11:34:52.633328+00:00"},{"alias_kind":"doi","alias_value":"10.48550/arxiv.2506.23446","created_at":"2026-07-05T11:34:52.633328+00:00"},{"alias_kind":"pith_short_12","alias_value":"YBRTFUQ363J7","created_at":"2026-07-05T11:34:52.633328+00:00"},{"alias_kind":"pith_short_16","alias_value":"YBRTFUQ363J7GVEU","created_at":"2026-07-05T11:34:52.633328+00:00"},{"alias_kind":"pith_short_8","alias_value":"YBRTFUQ3","created_at":"2026-07-05T11:34:52.633328+00:00"}],"events":[],"event_summary":{},"paper_claims":[],"inbound_citations":{"count":0,"internal_anchor_count":0,"sample":[]},"formal_canon":{"evidence_count":0,"sample":[],"anchors":[]},"links":{"html":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7","json":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7.json","graph_json":"https://pith.science/api/pith-number/YBRTFUQ363J7GVEUEZXGDPGVC7/graph.json","events_json":"https://pith.science/api/pith-number/YBRTFUQ363J7GVEUEZXGDPGVC7/events.json","paper":"https://pith.science/paper/YBRTFUQ3"},"agent_actions":{"view_html":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7","download_json":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7.json","view_paper":"https://pith.science/paper/YBRTFUQ3","resolve_alias":"https://pith.science/api/pith-number/resolve?arxiv=2506.23446&json=true","fetch_graph":"https://pith.science/api/pith-number/YBRTFUQ363J7GVEUEZXGDPGVC7/graph.json","fetch_events":"https://pith.science/api/pith-number/YBRTFUQ363J7GVEUEZXGDPGVC7/events.json","actions":{"anchor_timestamp":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/action/timestamp_anchor","attest_storage":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/action/storage_attestation","attest_author":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/action/author_attestation","sign_citation":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/action/citation_signature","submit_replication":"https://pith.science/pith/YBRTFUQ363J7GVEUEZXGDPGVC7/action/replication_record"}},"created_at":"2026-07-05T11:34:52.633328+00:00","updated_at":"2026-07-05T11:34:52.633328+00:00"}