Distance Measurement Methods for Improved Insider Threat Detection

Algorithm 3

Box plot code for user MCF0600.

library(readr)

cert_r4_2_dataset <- read_csv("~/cert_r4.2_dataset.csv") #Load the dataset.

username = "MCF0600"

allWeeks <- split(cert_r4_2_dataset[cert_r4_2_datasetuser %in%

username,]activity, cert_r4_2_dataset[cert_r4_2_datasetuser

%in% username,]week) #Filter dataset to only include data relevant to chosen user.

indx <- sapply(allWeeks, length) #Convert the allWeeks variable into DataFrame.

res <- as.data.frame(do.call(cbind,lapply(allWeeks, length<-,max(indx))))

boxplot(res[6:length(res)], main=paste("Boxplot for", username,

sep=" "), xlab="Week", ylab="Activity")