Fig. 9
From: Daily insider threat detection with hybrid TCN transformer architecture

Degree of Dataset Imbalance. (a) The proportion of Normal Users and Malicious Users. Malicious users account for \(93\%\) of the dataset, while normal users constitute \(7\%\). (b) Number of Normal Days and Malicious Days. The number of days with malicious activities is 966, while the number of days with normal activities is 330,452.