{"id":"https://openalex.org/W7203633988","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11648036","title":"A Multi-Source Event Correlation Framework for IAM Security Using Machine Learning and Zero Trust Principles","display_name":"A Multi-Source Event Correlation Framework for IAM Security Using Machine Learning and Zero Trust Principles","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7203633988","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11648036"},"language":"en","primary_location":{"id":"doi:10.1109/iccsdfai70505.2026.11648036","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11648036","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iccsdfai70505.2026.11648036","pdf_url":null,"source":{"id":"https://openalex.org/S7407096290","display_name":"International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/iccsdfai70505.2026.11648036","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133799452","display_name":"Md. Mushfiqur Rahman","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I1299170990","display_name":"Samarkand State University named after Sharof Rashidov","ror":"https://ror.org/02b6gy972","country_code":"UZ","type":"education","lineage":["https://openalex.org/I1299170990"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Md. Mushfiqur Rahman","raw_affiliation_strings":["Samarkand State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Samarkand State University","institution_ids":["https://openalex.org/I1299170990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5096744794","display_name":"Mekhriddin Nurmamatov","orcid":"https://orcid.org/0000-0002-9619-5791","observed_orcids":["https://orcid.org/0000-0002-9619-5791"]},"institutions":[{"id":"https://openalex.org/I1299170990","display_name":"Samarkand State University named after Sharof Rashidov","ror":"https://ror.org/02b6gy972","country_code":"UZ","type":"education","lineage":["https://openalex.org/I1299170990"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Nurmamatov Mekhriddin","raw_affiliation_strings":["Samarkand State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Samarkand State University","institution_ids":["https://openalex.org/I1299170990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085408978","display_name":"Aswani Kumar Cherukuri","orcid":"https://orcid.org/0000-0001-8455-9108","observed_orcids":["https://orcid.org/0000-0001-8455-9108"]},"institutions":[{"id":"https://openalex.org/I876193797","display_name":"Vellore Institute of Technology University","ror":"https://ror.org/00qzypv28","country_code":"IN","type":"education","lineage":["https://openalex.org/I876193797"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Aswani Kumar Cherukuri","raw_affiliation_strings":["Vellore Institute of Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Vellore Institute of Technology","institution_ids":["https://openalex.org/I876193797"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5103608739","display_name":"Sazzad Hossain","orcid":"https://orcid.org/0009-0003-1351-7287","observed_orcids":["https://orcid.org/0009-0003-1351-7287"]},"institutions":[{"id":"https://openalex.org/I1299170990","display_name":"Samarkand State University named after Sharof Rashidov","ror":"https://ror.org/02b6gy972","country_code":"UZ","type":"education","lineage":["https://openalex.org/I1299170990"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Sazzad Hossain","raw_affiliation_strings":["Samarkand State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Samarkand State University","institution_ids":["https://openalex.org/I1299170990"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"118","last_page":"125"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5654000043869019,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5654000043869019,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.18250000476837158,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.13089999556541443,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/insider-threat-detection","display_name":"insider threat detection","score":0.996999979019165},{"id":"https://openalex.org/keywords/identity-and-access-management","display_name":"identity and access management","score":0.9940000176429749},{"id":"https://openalex.org/keywords/zero-trust-architecture","display_name":"zero-trust architecture","score":0.746999979019165},{"id":"https://openalex.org/keywords/event-correlation","display_name":"event correlation","score":0.8360000252723694},{"id":"https://openalex.org/keywords/xgboost","display_name":"XGBoost","score":0.9010000228881836},{"id":"https://openalex.org/keywords/risk-based-access-control","display_name":"risk-based access control","score":0.8970000147819519}],"concepts":[{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6205000281333923},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5839999914169312},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5322999954223633},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.5235000252723694},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.4129999876022339},{"id":"https://openalex.org/C2780813799","wikidata":"https://www.wikidata.org/wiki/Q3274237","display_name":"Zero (linguistics)","level":2,"score":0.4049000144004822},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3183000087738037},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2930000126361847},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.26429998874664307},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2574000060558319},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.25609999895095825},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2556999921798706}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccsdfai70505.2026.11648036","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11648036","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iccsdfai70505.2026.11648036","pdf_url":null,"source":{"id":"https://openalex.org/S7407096290","display_name":"International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1109/iccsdfai70505.2026.11648036","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11648036","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iccsdfai70505.2026.11648036","pdf_url":null,"source":{"id":"https://openalex.org/S7407096290","display_name":"International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":12,"referenced_works":["https://openalex.org/W3198075970","https://openalex.org/W4386399048","https://openalex.org/W4388893964","https://openalex.org/W4389386867","https://openalex.org/W4389440681","https://openalex.org/W4392151675","https://openalex.org/W4393549579","https://openalex.org/W4408690739","https://openalex.org/W4409368794","https://openalex.org/W4413943397","https://openalex.org/W4415166616","https://openalex.org/W7116736446"],"related_works":["https://openalex.org/W7203629294","https://openalex.org/W75808021","https://openalex.org/W7213550356","https://openalex.org/W2777039714","https://openalex.org/W7098753085","https://openalex.org/W4313644131","https://openalex.org/W7203644741","https://openalex.org/W7160320196","https://openalex.org/W7203597263","https://openalex.org/W7203617510"],"abstract_inverted_index":{"Identity":[0],"and":[1,18,63,95,102,125,173,192],"Access":[2],"Management":[3],"(IAM)":[4],"systems":[5],"struggle":[6],"to":[7,37,144],"counter":[8],"insider":[9,48,189],"threats.":[10],"With":[11],"the":[12,16,19,41,81,92,132,149,158,182,185],"increased":[13],"use":[14],"of":[15,83,111,113,119,123,135,142,155,171,176,184],"cloud":[17],"difficulties":[20],"posed":[21],"by":[22,90],"remote":[23],"working,":[24],"managing":[25],"enterprise":[26,199],"system":[27],"activity":[28],"logs":[29],"is":[30,88],"more":[31],"complex.":[32],"This":[33,43,75,87],"makes":[34],"it":[35],"difficult":[36],"monitor":[38],"behaviors":[39],"within":[40,71],"system.":[42,74],"paper":[44],"proposes":[45],"a":[46,72,108,117,121,126,138],"novel":[47],"threat":[49,190],"detection":[50,191],"method":[51,76,150],"that":[52],"integrates":[53],"sliding":[54],"window":[55],"behavior":[56,79],"analytics,":[57],"Extreme":[58],"Gradient":[59],"Boosting":[60],"(XGBoost)":[61],"detection,":[62],"Zero":[64,193],"Trust":[65],"risk":[66],"Assessment":[67],"(ZTA),":[68],"all":[69],"contained":[70],"single":[73],"frames":[77],"time-based":[78],"with":[80,116,168],"application":[82],"risk-based":[84],"access":[85],"control.":[86],"achieved":[89],"using":[91],"CERT":[93],"dataset":[94,167],"covers":[96],"user":[97],"authentication,":[98],"file":[99],"access,":[100],"e-mail,":[101],"web":[103],"activity.":[104],"The":[105,178],"results":[106,180],"demonstrate":[107],"notable":[109],"level":[110,154],"accuracy":[112,170],"over":[114],"98.89%,":[115],"precision":[118],"99%,":[120],"recall":[122],"96.5%,":[124],"Receiver":[127],"Operating":[128],"Characteristic":[129],"Area":[130],"Under":[131],"Curve":[133],"(ROC-AUC)":[134],"0.9815,":[136],"from":[137],"considerably":[139],"large":[140],"sample":[141],"close":[143],"5":[145],"million":[146],"records.":[147],"Additionally,":[148],"demonstrated":[151],"an":[152,169,174],"impressive":[153],"generalization":[156],"on":[157],"Los":[159],"Alamos":[160],"National":[161],"Laboratory":[162],"(LANL)":[163],"Windows":[164],"Logging":[165],"Service":[166],"99.76%":[172],"ROC-AUC":[175],"99.82%.":[177],"experimental":[179],"substantiate":[181],"efficacy":[183],"proposed":[186],"framework":[187],"for":[188],"Trust-based":[194],"IAM":[195],"security":[196],"enforcement":[197],"in":[198],"environments.":[200]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-08-18T00:00:00"}