{"id":"https://openalex.org/W4317648024","doi":"https://doi.org/10.58496/mjcs/2022/006","title":"Machine Learning and Data Mining Methods for Cyber Security: A Survey","display_name":"Machine Learning and Data Mining Methods for Cyber Security: A Survey","publication_year":2022,"publication_date":"2022-11-25","ids":{"openalex":"https://openalex.org/W4317648024","doi":"https://doi.org/10.58496/mjcs/2022/006"},"language":"en","primary_location":{"id":"doi:10.58496/mjcs/2022/006","doi":"https://doi.org/10.58496/mjcs/2022/006","is_oa":true,"landing_page_url":"https://doi.org/10.58496/mjcs/2022/006","pdf_url":"https://mesopotamian.press/journals/index.php/CyberSecurity/article/download/30/48","source":{"id":"https://openalex.org/S5407037797","display_name":"Mesopotamian Journal of CyberSecurity","issn_l":"2958-6542","issn":["2958-6542"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mesopotamian Journal of CyberSecurity","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://mesopotamian.press/journals/index.php/CyberSecurity/article/download/30/48","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Ziaul Hasan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I59475050","display_name":"Jamia Millia Islamia","ror":"https://ror.org/00pnhhv55","country_code":"IN","type":"education","lineage":["https://openalex.org/I59475050"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Ziaul Hasan","raw_affiliation_strings":["Department of Biosciences, Jamia Millia Islamia, New Delhi-110025, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Biosciences, Jamia Millia Islamia, New Delhi-110025, India","institution_ids":["https://openalex.org/I59475050"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Hassan r. Mohammad","orcid":"https://orcid.org/0000-0002-2635-2181","observed_orcids":["https://orcid.org/0000-0002-2635-2181"]},"institutions":[{"id":"https://openalex.org/I104941359","display_name":"Al-Ahliyya Amman University","ror":"https://ror.org/00xddhq60","country_code":"JO","type":"education","lineage":["https://openalex.org/I104941359"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Hassan r. Mohammad","raw_affiliation_strings":["Al-Ahliyya Amman University, Jordan"],"raw_orcid":"https://orcid.org/0000-0002-2635-2181","affiliations":[{"raw_affiliation_string":"Al-Ahliyya Amman University, Jordan","institution_ids":["https://openalex.org/I104941359"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5044694032","display_name":"Maka Jishkariani","orcid":"https://orcid.org/0000-0002-0162-9180","observed_orcids":["https://orcid.org/0000-0002-0162-9180"]},"institutions":[{"id":"https://openalex.org/I131762061","display_name":"Georgian Technical University","ror":"https://ror.org/00aamz256","country_code":"GE","type":"education","lineage":["https://openalex.org/I131762061"]}],"countries":["GE"],"is_corresponding":false,"raw_author_name":"Maka Jishkariani","raw_affiliation_strings":["Full Professor of Georgian Technical University,  Faculty of Power Engineering, Department of Electro Energy and Electro Mechanic, Tbilisi, Georgia"],"raw_orcid":"https://orcid.org/0000-0002-0162-9180","affiliations":[{"raw_affiliation_string":"Full Professor of Georgian Technical University,  Faculty of Power Engineering, Department of Electro Energy and Electro Mechanic, Tbilisi, Georgia","institution_ids":["https://openalex.org/I131762061"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.0819,"has_fulltext":true,"cited_by_count":25,"citation_normalized_percentile":{"value":0.87247815,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":99},"biblio":{"volume":"2022","issue":null,"first_page":"47","last_page":"56"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/data-mining","display_name":"data mining","score":0.8429999947547913},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.9810000061988831},{"id":"https://openalex.org/keywords/zero-day-attacks","display_name":"zero-day attacks","score":0.777999997138977},{"id":"https://openalex.org/keywords/email-filtering","display_name":"email filtering","score":0.9559999704360962},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.6430000066757202},{"id":"https://openalex.org/keywords/gas-pipelines","display_name":"gas pipelines","score":0.7110000252723694},{"id":"https://openalex.org/keywords/security-datasets","display_name":"security datasets","score":0.48500001430511475},{"id":"https://openalex.org/keywords/threat-detection","display_name":"threat detection","score":0.5669999718666077}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7277589440345764},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6610755324363708},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5469600558280945},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5260669589042664},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.5210156440734863},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5198103189468384},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.4997427463531494},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.46692702174186707},{"id":"https://openalex.org/C2776666747","wikidata":"https://www.wikidata.org/wiki/Q1135322","display_name":"Modbus","level":3,"score":0.4567585587501526},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.41082045435905457},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38733476400375366},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3542288541793823},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3528602719306946},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.58496/mjcs/2022/006","doi":"https://doi.org/10.58496/mjcs/2022/006","is_oa":true,"landing_page_url":"https://doi.org/10.58496/mjcs/2022/006","pdf_url":"https://mesopotamian.press/journals/index.php/CyberSecurity/article/download/30/48","source":{"id":"https://openalex.org/S5407037797","display_name":"Mesopotamian Journal of CyberSecurity","issn_l":"2958-6542","issn":["2958-6542"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mesopotamian Journal of CyberSecurity","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.58496/mjcs/2022/006","doi":"https://doi.org/10.58496/mjcs/2022/006","is_oa":true,"landing_page_url":"https://doi.org/10.58496/mjcs/2022/006","pdf_url":"https://mesopotamian.press/journals/index.php/CyberSecurity/article/download/30/48","source":{"id":"https://openalex.org/S5407037797","display_name":"Mesopotamian Journal of CyberSecurity","issn_l":"2958-6542","issn":["2958-6542"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mesopotamian Journal of CyberSecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4317648024.pdf","grobid_xml":"https://content.openalex.org/works/W4317648024.grobid-xml"},"referenced_works_count":17,"referenced_works":["https://openalex.org/W1504869511","https://openalex.org/W1581009051","https://openalex.org/W1629811776","https://openalex.org/W2081544377","https://openalex.org/W2344199778","https://openalex.org/W2464274269","https://openalex.org/W2479781685","https://openalex.org/W2491218167","https://openalex.org/W2502697733","https://openalex.org/W2554111100","https://openalex.org/W2732916693","https://openalex.org/W2902461172","https://openalex.org/W2957734310","https://openalex.org/W3043885708","https://openalex.org/W3128473758","https://openalex.org/W3202609841","https://openalex.org/W4406183026"],"related_works":["https://openalex.org/W4320078568","https://openalex.org/W2899599931","https://openalex.org/W2342408547","https://openalex.org/W3137327440","https://openalex.org/W4210616749","https://openalex.org/W2767681593","https://openalex.org/W3018284006","https://openalex.org/W7213442359","https://openalex.org/W7214108890","https://openalex.org/W4229882709"],"abstract_inverted_index":{"Data":[0],"mining":[1,79,84,114,225],"and":[2,39,63,75,94,112,126,137,144,153,206,223,229,238],"machine":[3,18,124],"learning":[4,19,125],"(ML)":[5,20],"methods":[6],"are":[7,160,165],"used":[8,87],"more":[9,64],"than":[10],"ever":[11],"in":[12,67,101,129],"cyber":[13,130],"security.":[14],"The":[15,104],"use":[16,77,220],"of":[17,23,70,155,169,210,221],"is":[21,179],"one":[22],"the":[24,68,102,151,208,219],"potential":[25,99],"solutions":[26],"that":[27],"may":[28,60,85],"be":[29,86],"successful":[30],"against":[31],"zero-day":[32],"attacks,":[33],"starting":[34],"with":[35,235],"categorising":[36],"IP":[37],"traffic":[38,42,109,135],"filtering":[40],"harmful":[41],"for":[43,82,132,226],"intrusion":[44,138],"detection.":[45,139],"In":[46],"this":[47],"field,":[48],"certain":[49,177],"published":[50],"systematic":[51,58],"reviews":[52,59],"were":[53],"taken":[54],"into":[55],"consideration.":[56],"Recent":[57],"incorporate":[61],"older":[62],"recent":[65],"works":[66],"topic":[69],"investigation..":[71],"Both":[72],"security":[73],"professionals":[74],"hackers":[76],"data":[78,83,113,192,224],"capabilities.":[80],"Applications":[81],"to":[88,97,174],"analyze":[89],"programme":[90],"activity,":[91],"surfing":[92],"patterns,":[93],"other":[95,201],"factors":[96],"identify":[98],"cyber-attacks":[100],"future.":[103],"new":[105],"study":[106,217],"uses":[107],"statistical":[108],"features,":[110],"ML,":[111],"approaches.":[115],"This":[116,216],"research":[117,228],"performs":[118],"a":[119,145,166,176,195],"concentrated":[120],"literature":[121],"review":[122],"on":[123,150,190,232],"its":[127],"usage":[128],"analytics":[131],"email":[133],"filtering,":[134],"categorization,":[136],"Each":[140],"approach":[141,212],"was":[142,147],"identified,":[143],"summary":[146],"provided":[148],"based":[149],"relevancy":[152],"quantity":[154],"citations.":[156],"Some":[157],"well-known":[158],"datasets":[159],"also":[161,180],"discussed":[162],"since":[163],"they":[164],"crucial":[167],"component":[168],"ML":[170,185,199,222],"techniques.":[171],"On":[172],"when":[173],"utilize":[175],"algorithm":[178],"offered":[181],"some":[182],"advice.":[183],"Four":[184],"algorithms":[186],"have":[187,203],"been":[188,204,214],"evaluated":[189],"MODBUS":[191],"gathered":[193],"from":[194],"gas":[196],"pipeline.":[197],"Using":[198],"algorithms,":[200],"assaults":[202],"categorized,":[205],"then":[207],"effectiveness":[209],"each":[211],"has":[213],"evaluated.":[215],"demonstrates":[218],"threat":[227],"detection,":[230],"focusing":[231],"malware":[233],"detection":[234,240],"high":[236],"accuracy":[237],"short":[239],"times.":[241]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":10},{"year":2024,"cited_by_count":8},{"year":2023,"cited_by_count":3}],"updated_date":"2026-11-05T12:25:35.769452","created_date":"2023-01-21T00:00:00"}