Arafat Al-dhaqm

Explainable Transformer Models for Insider Threat Detection in Enterprise Systems

Insider threats are difficult to detect because malicious activity is embedded in otherwise legitimate user behavior, and analysts need interpretable justifications as well as accurate alerts. This paper proposes XFT, an explainable transformer framework operating on tokenized behavioral evidence from heterogeneous ent...