Two-stage insider threat detection on CERT r4.2: lightweight XGBoost screening + LLM-based reasoning over graph-informed narratives. University of Ottawa, CSI 5388.
-
Updated
May 12, 2026 - Python
Two-stage insider threat detection on CERT r4.2: lightweight XGBoost screening + LLM-based reasoning over graph-informed narratives. University of Ottawa, CSI 5388.
Reproducible zero-shot transfer study from CERT insider-threat logs to LANL authentication data with drift and capacity-constrained model analysis.
Python toolkit for feature extraction, temporal representations, and baseline modeling on CERT insider-threat datasets.
Add a description, image, and links to the cert-dataset topic page so that developers can more easily learn about it.
To associate your repository with the cert-dataset topic, visit your repo's landing page and select "manage topics."