Signal Decomposition Reveals Structure in Insider Threat Detection under Sparse Temporal Data

Hayden Beadles, Jericho Cain

Insider threat detection is difficult because malicious behavior is rare, irregular, and buried in long periods of inactivity. In enterprise audit data, most windows contain little…