English

Insight-LLM: LLM-enhanced Multi-view Fusion in Insider Threat Detection

Cryptography and Security 2025-09-03 v1

Abstract

Insider threat detection (ITD) requires analyzing sparse, heterogeneous user behavior. Existing ITD methods predominantly rely on single-view modeling, resulting in limited coverage and missed anomalies. While multi-view learning has shown promise in other domains, its direct application to ITD introduces significant challenges: scalability bottlenecks from independently trained sub-models, semantic misalignment across disparate feature spaces, and view imbalance that causes high-signal modalities to overshadow weaker ones. In this work, we present Insight-LLM, the first modular multi-view fusion framework specifically tailored for insider threat detection. Insight-LLM employs frozen, pre-nes, achieving state-of-the-art detection with low latency and parameter overhead.

Keywords

Cite

@article{arxiv.2509.01509,
  title  = {Insight-LLM: LLM-enhanced Multi-view Fusion in Insider Threat Detection},
  author = {Chengyu Song and Jianming Zheng},
  journal= {arXiv preprint arXiv:2509.01509},
  year   = {2025}
}