ABSTRACT

This chapter presents related work with regard to insider threat and stream mining and describes the related work with regard to big data and analytics perspective. It discusses related work on insider threat detection, related work in stream mining and big data issues. Stream mining is a relatively new category of data mining research that applies to continuous data streams. Therefore, to the best of authors’ knowledge, there is almost no work from other researchers that handles insider threat detection in the stream mining area. Ensemble-based techniques are not incorporated, but the literature used shows that ensemble-based techniques are more effective than those of the incremental variety for stream mining. Insider threat detection work has applied ideas from both intrusion detection and external threat detection. Insider threat detection work has utilized ideas from intrusion detection or external threat detection areas.