An Insider Threat Detection Approach Based on Mouse Dynamics and Deep Learning

Table 3

The test data set generated according to the mapping method (when m=100), in which each user folder contains legal sessions and illegal sessions.

test_files	legal	illegal	total_picutres
user7	36	37	1659
user9	23	43	1585
user12	56	49	1306
user15	45	70	1238
user16	68	38	1173
user20	30	20	1089
user21	37	22	605
user23	38	33	765
user29	43	20	684
user35	35	73	1076
Total	411	405	11180

Note. During the generation process, we found that some sessions do not have label information in “public_labels.cvs”. Because we could not confirm these sessions are legitimate data or not, we removed this data information.