Fig. 11

Euclidean distance of the performance vector of each of the IDPAs from the desired performance vector. The performance vector includes detection rates (DR) and false alarm rates (FAR) that are extracted from the papers by the authors of the algorithms. The desired performance vector is [DR = 100 %, FAR = 0 %]. The x-axis represents Euclidean distance and y-axis represents the different IDPAs (insider threat detection and prediction algorithms) proposed by different authors. The higher the bar, the lower the performance