{"id":"https://openalex.org/W7204238765","doi":"https://doi.org/10.37943/bttb5517","title":"IDENTIFYING USER BEHAVIORAL PATTERNS IN WEB BROWSER ACTIVITY USING THE K-NEAREST NEIGHBORS ALGORITHM","display_name":"IDENTIFYING USER BEHAVIORAL PATTERNS IN WEB BROWSER ACTIVITY USING THE K-NEAREST NEIGHBORS ALGORITHM","publication_year":2026,"publication_date":"2026-06-30","ids":{"openalex":"https://openalex.org/W7204238765","doi":"https://doi.org/10.37943/bttb5517"},"language":"en","primary_location":{"id":"doi:10.37943/bttb5517","doi":"https://doi.org/10.37943/bttb5517","is_oa":true,"landing_page_url":"https://doi.org/10.37943/bttb5517","pdf_url":"https://journal.astanait.edu.kz/index.php/ojs/article/download/996/338","source":{"id":"https://openalex.org/S4210225114","display_name":"Scientific Journal of Astana IT University","issn_l":"2707-9031","issn":["2707-9031","2707-904X"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj","erih-plus"],"host_organization":"https://openalex.org/I4405257690","host_organization_name":"Astana IT University","host_organization_lineage":["https://openalex.org/I4405257690"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Journal of Astana IT University","raw_type":"journal-article"},"parent_works":[],"lineage":["https://openalex.org/W7204238765"],"child_works_count":0,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://journal.astanait.edu.kz/index.php/ojs/article/download/996/338","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031384992","display_name":"B R Kassimova","orcid":"https://orcid.org/0000-0001-8589-4645","observed_orcids":["https://orcid.org/0000-0001-8589-4645"]},"institutions":[{"id":"https://openalex.org/I10232997","display_name":"L. N. Gumilyov Eurasian National University","ror":"https://ror.org/0242cby63","country_code":"KZ","type":"education","lineage":["https://openalex.org/I10232997"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Botakoz Kassimova","raw_affiliation_strings":["L.N. Gumilyov Eurasian National University"],"raw_orcid":"https://orcid.org/0000-0001-8589-4645","affiliations":[{"raw_affiliation_string":"L.N. Gumilyov Eurasian National University","institution_ids":["https://openalex.org/I10232997"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5099088577","display_name":"Aliya Zhetpisbayeva","orcid":"https://orcid.org/0009-0004-9542-5817","observed_orcids":["https://orcid.org/0009-0004-9542-5817"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Aliya Zhetpisbayeva","raw_affiliation_strings":["CyberTech Research and Innovation Center"],"raw_orcid":"https://orcid.org/0009-0004-9542-5817","affiliations":[{"raw_affiliation_string":"CyberTech Research and Innovation Center","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073556511","display_name":"Leila Rzayeva","orcid":"https://orcid.org/0000-0002-3382-4685","observed_orcids":["https://orcid.org/0000-0002-3382-4685"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Leila Rzayeva","raw_affiliation_strings":["CyberTech Research and Innovation Center"],"raw_orcid":"https://orcid.org/0000-0002-3382-4685","affiliations":[{"raw_affiliation_string":"CyberTech Research and Innovation Center","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121922075","display_name":"Murat Zhakenov","orcid":"https://orcid.org/0009-0005-9672-4365","observed_orcids":["https://orcid.org/0009-0005-9672-4365"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Murat Zhakenov","raw_affiliation_strings":["Digital Heritage of Eurasia LLP"],"raw_orcid":"https://orcid.org/0009-0005-9672-4365","affiliations":[{"raw_affiliation_string":"Digital Heritage of Eurasia LLP","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148362552","display_name":"Elzhas Kurmangali","orcid":"https://orcid.org/0009-0002-6703-7935","observed_orcids":["https://orcid.org/0009-0002-6703-7935"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Elzhas Kurmangali","raw_affiliation_strings":["CyberTech Research and Innovation Center"],"raw_orcid":"https://orcid.org/0009-0002-6703-7935","affiliations":[{"raw_affiliation_string":"CyberTech Research and Innovation Center","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5140735299","display_name":"Gul Gabdulualitovna Dzhussupova","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4401200292","display_name":"Ministry of Science and Higher Education of the Republic of Kazakhstan","ror":"https://ror.org/05tyne317","country_code":"KZ","type":"government","lineage":["https://openalex.org/I4401200292"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Gul Dzhussupova","raw_affiliation_strings":["Ministry of Science and Higher Education of the Republic of Kazakhstan"],"raw_orcid":"https://orcid.org/0009-0009-7205-3666","affiliations":[{"raw_affiliation_string":"Ministry of Science and Higher Education of the Republic of Kazakhstan","institution_ids":["https://openalex.org/I4401200292"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"26","issue":"2","first_page":"76","last_page":"91"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9814000129699707,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12034","display_name":"Digital and Cyber Forensics","score":0.9814000129699707,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.008200000040233135,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11800","display_name":"User Authentication and Security Systems","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/user-behavior-patterns","display_name":"user behavior patterns","score":0.7080000042915344},{"id":"https://openalex.org/keywords/k-nearest-neighbors","display_name":"k-nearest neighbors","score":0.8220000267028809},{"id":"https://openalex.org/keywords/similarity-based-classification","display_name":"similarity-based classification","score":0.8619999885559082},{"id":"https://openalex.org/keywords/digital-evidence","display_name":"digital evidence","score":0.4790000021457672},{"id":"https://openalex.org/keywords/browsing-history","display_name":"browsing history","score":0.4429999887943268},{"id":"https://openalex.org/keywords/search-queries","display_name":"search queries","score":0.7350000143051147},{"id":"https://openalex.org/keywords/user-behavior-profiling","display_name":"user behavior profiling","score":0.6700000166893005},{"id":"https://openalex.org/keywords/automated-behavioral-analysis","display_name":"automated behavioral analysis","score":0.6650000214576721}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8066999912261963},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.6116999983787537},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5065000057220459},{"id":"https://openalex.org/C2983909278","wikidata":"https://www.wikidata.org/wiki/Q6368","display_name":"Web browser","level":3,"score":0.49959999322891235},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.45579999685287476},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.44830000400543213},{"id":"https://openalex.org/C21959979","wikidata":"https://www.wikidata.org/wiki/Q36774","display_name":"Web page","level":2,"score":0.43290001153945923},{"id":"https://openalex.org/C61096286","wikidata":"https://www.wikidata.org/wiki/Q7978592","display_name":"Web navigation","level":3,"score":0.42239999771118164},{"id":"https://openalex.org/C89505385","wikidata":"https://www.wikidata.org/wiki/Q47146","display_name":"User interface","level":2,"score":0.4131999909877777},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4004000127315521},{"id":"https://openalex.org/C83804111","wikidata":"https://www.wikidata.org/wiki/Q1063558","display_name":"Behavioral pattern","level":2,"score":0.39570000767707825},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.3912999927997589},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.36169999837875366},{"id":"https://openalex.org/C197046077","wikidata":"https://www.wikidata.org/wiki/Q785337","display_name":"Web mining","level":3,"score":0.337799996137619},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.33640000224113464},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.33390000462532043},{"id":"https://openalex.org/C115537543","wikidata":"https://www.wikidata.org/wiki/Q165596","display_name":"Cache","level":2,"score":0.3321000039577484},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3301999866962433},{"id":"https://openalex.org/C23123220","wikidata":"https://www.wikidata.org/wiki/Q816826","display_name":"Information retrieval","level":1,"score":0.32089999318122864},{"id":"https://openalex.org/C189119545","wikidata":"https://www.wikidata.org/wiki/Q5128022","display_name":"Probabilistic classification","level":4,"score":0.3156999945640564},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.30489999055862427},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.29249998927116394},{"id":"https://openalex.org/C118643609","wikidata":"https://www.wikidata.org/wiki/Q189210","display_name":"Web application","level":2,"score":0.2766000032424927},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C11392498","wikidata":"https://www.wikidata.org/wiki/Q11288","display_name":"Web server","level":3,"score":0.26429998874664307},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.25209999084472656}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.37943/bttb5517","doi":"https://doi.org/10.37943/bttb5517","is_oa":true,"landing_page_url":"https://doi.org/10.37943/bttb5517","pdf_url":"https://journal.astanait.edu.kz/index.php/ojs/article/download/996/338","source":{"id":"https://openalex.org/S4210225114","display_name":"Scientific Journal of Astana IT University","issn_l":"2707-9031","issn":["2707-9031","2707-904X"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj","erih-plus"],"host_organization":"https://openalex.org/I4405257690","host_organization_name":"Astana IT University","host_organization_lineage":["https://openalex.org/I4405257690"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Journal of Astana IT University","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:e85e76979fc24501844b6dffe5f288f1","doi":null,"is_oa":false,"landing_page_url":"https://doaj.org/article/e85e76979fc24501844b6dffe5f288f1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Scientific Journal of Astana IT University, Vol 26, Iss 2 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.37943/bttb5517","doi":"https://doi.org/10.37943/bttb5517","is_oa":true,"landing_page_url":"https://doi.org/10.37943/bttb5517","pdf_url":"https://journal.astanait.edu.kz/index.php/ojs/article/download/996/338","source":{"id":"https://openalex.org/S4210225114","display_name":"Scientific Journal of Astana IT University","issn_l":"2707-9031","issn":["2707-9031","2707-904X"],"is_oa":true,"is_in_doaj":true,"is_core":false,"listed_in":["doaj","erih-plus"],"host_organization":"https://openalex.org/I4405257690","host_organization_name":"Astana IT University","host_organization_lineage":["https://openalex.org/I4405257690"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Journal of Astana IT University","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204238765.pdf","grobid_xml":"https://content.openalex.org/works/W7204238765.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W2943680588","https://openalex.org/W3015392158","https://openalex.org/W3015461837","https://openalex.org/W3040266635","https://openalex.org/W3082097862","https://openalex.org/W4206506949","https://openalex.org/W4226414102","https://openalex.org/W4324148718","https://openalex.org/W4368617887","https://openalex.org/W4384385637","https://openalex.org/W4386376246","https://openalex.org/W4392379942","https://openalex.org/W4400798637","https://openalex.org/W4401495975","https://openalex.org/W4409191816","https://openalex.org/W7124466507"],"related_works":["https://openalex.org/W7124466507","https://openalex.org/W7106832195","https://openalex.org/W4413912814","https://openalex.org/W4411892739","https://openalex.org/W1987217960","https://openalex.org/W7147357686","https://openalex.org/W7154150407","https://openalex.org/W7161052756","https://openalex.org/W2786872253","https://openalex.org/W2383377001"],"abstract_inverted_index":{"The":[0,99,213,238],"rapid":[1],"growth":[2],"of":[3,11,23,136,142,203,244,267,289],"internet":[4],"usage":[5],"has":[6],"significantly":[7],"increased":[8],"the":[9,119,140,149,152,178,184,189,208,242,264,282,285,302],"volume":[10],"digital":[12,26],"traces":[13],"created":[14],"by":[15,78,115,271],"users,":[16],"making":[17],"web":[18,92,268,296],"browsers":[19,29],"a":[20,143],"critical":[21],"source":[22],"evidence":[24],"in":[25,197,234],"forensics.":[27],"Web":[28],"store":[30],"extensive":[31],"user-related":[32],"data,":[33],"including":[34,170],"browsing":[35],"history,":[36],"search":[37,129],"queries,":[38,130],"visited":[39,137],"domains,":[40],"cookies,":[41],"and":[42,50,62,85,106,133,161,175,192,200,210,258,287,300,312],"cache":[43],"files,":[44],"which":[45],"collectively":[46],"reflect":[47],"behavioral":[48,71,88,145,256,274,293],"patterns":[49,89,202],"decision-making":[51],"processes.":[52],"However,":[53],"existing":[54],"forensic":[55],"tools":[56],"primarily":[57],"focus":[58],"on":[59,91,104],"manually":[60],"extracting":[61,105],"visualizing":[63],"browser":[64,93,108,223,246,269,297],"artifacts,":[65],"providing":[66],"limited":[67],"capabilities":[68],"for":[69,83,222,304],"automated":[70,81],"analysis.":[72,280],"This":[73,262],"study":[74,283],"addresses":[75],"this":[76],"shortcoming":[77],"proposing":[79],"an":[80],"method":[82,240],"identifying":[84,198],"analyzing":[86],"user":[87,204,227,250],"based":[90,103],"activity":[94,224],"using":[95,118,166],"machine":[96,291],"learning":[97,314],"techniques.":[98],"proposed":[100,239],"approach":[101],"is":[102,219],"structuring":[107],"history":[109],"data":[110,247,279],"from":[111,127],"personal":[112],"computers,":[113],"followed":[114],"similarity-based":[116,217],"classification":[117,218],"k-nearest":[120,153,185],"neighbors":[121,154,186],"algorithm.":[122],"Behavioral":[123],"characteristics":[124],"are":[125],"extracted":[126],"recurring":[128],"domain":[131],"frequency,":[132],"content":[134],"categories":[135],"websites,":[138],"enabling":[139],"creation":[141],"structured":[144,273],"dataset.":[146],"To":[147],"justify":[148],"model":[150,187],"selection,":[151],"classifier":[155],"was":[156],"evaluated":[157],"alongside":[158],"logistic":[159],"regression":[160],"Gaussian":[162],"naive":[163],"Bayes":[164],"classifiers":[165],"standard":[167],"performance":[168,196],"metrics,":[169],"accuracy,":[171],"precision,":[172],"recall,":[173],"F1-score,":[174,193],"area":[176],"under":[177],"curve.":[179],"Experimental":[180],"results":[181,214],"show":[182],"that":[183,216,253],"achieves":[188],"highest":[190],"recall":[191],"indicating":[194],"superior":[195],"clustered":[199],"nonlinear":[201],"behavior":[205,251],"compared":[206],"to":[207,230],"baseline":[209],"probabilistic":[211],"models.":[212],"confirm":[215],"particularly":[220],"effective":[221],"analysis,":[225],"where":[226],"actions":[228],"tend":[229],"form":[231],"localized":[232],"groups":[233],"high-dimensional":[235],"feature":[236],"spaces.":[237],"enables":[241],"transformation":[243],"raw":[245,278],"into":[248,295],"interpretable":[249],"profiles":[252],"integrate":[254],"interests,":[255],"indicators,":[257],"visit":[259],"frequency":[260],"statistics.":[261],"improves":[263],"practical":[265],"applicability":[266],"analysis":[270,294],"supporting":[272],"assessment":[275],"rather":[276],"than":[277],"Overall,":[281],"demonstrates":[284],"feasibility":[286],"effectiveness":[288],"integrating":[290],"learning-based":[292],"forensics":[298],"workflows":[299],"lays":[301],"foundation":[303],"future":[305],"research":[306],"incorporating":[307],"temporal":[308],"features,":[309],"larger":[310],"datasets,":[311],"hybrid":[313],"approaches.":[315]},"counts_by_year":[],"updated_date":"2026-10-21T09:56:26.102985","created_date":"2026-08-27T00:00:00"}