{"id":"https://openalex.org/W7225293113","doi":"https://doi.org/10.71422/jeit.0002","title":"Artificial Intelligence and Machine Learning in Cyber Threat Detection for Modern Organizations: A Systematic Review of Challenges and Solutions","display_name":"Artificial Intelligence and Machine Learning in Cyber Threat Detection for Modern Organizations: A Systematic Review of Challenges and Solutions","publication_year":2026,"publication_date":"2026-11-05","ids":{"openalex":"https://openalex.org/W7225293113","doi":"https://doi.org/10.71422/jeit.0002"},"language":"en","primary_location":{"id":"doi:10.71422/jeit.0002","doi":"https://doi.org/10.71422/jeit.0002","is_oa":true,"landing_page_url":"https://doi.org/10.71422/jeit.0002","pdf_url":"https://journals.qu.edu.sa/jeit/article/id/36/download/pdf/","source":{"id":"https://openalex.org/S7407122222","display_name":"Journal of Emerging and Innovative Technologies","issn_l":"3152-8651","issn":["3152-8651"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Emerging and Innovative Technologies","raw_type":"journal-article"},"volume":null,"type":"review","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://journals.qu.edu.sa/jeit/article/id/36/download/pdf/","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5064895609","display_name":"Abdul Wahid Khan","orcid":"https://orcid.org/0000-0001-9327-290X","observed_orcids":["https://orcid.org/0000-0001-9327-290X"]},"institutions":[{"id":"https://openalex.org/I4405275539","display_name":"Onaizah Colleges","ror":"https://ror.org/03sha9j83","country_code":"SA","type":"education","lineage":["https://openalex.org/I4405275539"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Abdul Wahid Khan","raw_affiliation_strings":["Onaizah Colleges"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Onaizah Colleges","institution_ids":["https://openalex.org/I4405275539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160779534","display_name":"Bassam Saleh F Alghashim","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405275539","display_name":"Onaizah Colleges","ror":"https://ror.org/03sha9j83","country_code":"SA","type":"education","lineage":["https://openalex.org/I4405275539"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Bassam Saleh F Alghashim","raw_affiliation_strings":["Onaizah Colleges"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Onaizah Colleges","institution_ids":["https://openalex.org/I4405275539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160780397","display_name":"Meshari Khalid N Alharb","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405275539","display_name":"Onaizah Colleges","ror":"https://ror.org/03sha9j83","country_code":"SA","type":"education","lineage":["https://openalex.org/I4405275539"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Meshari Khalid N Alharb","raw_affiliation_strings":["Onaizah Colleges"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Onaizah Colleges","institution_ids":["https://openalex.org/I4405275539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160888719","display_name":"Tamim Sulaiman A Alghomiz","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405275539","display_name":"Onaizah Colleges","ror":"https://ror.org/03sha9j83","country_code":"SA","type":"education","lineage":["https://openalex.org/I4405275539"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Tamim Sulaiman A Alghomiz","raw_affiliation_strings":["Onaizah Colleges"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Onaizah Colleges","institution_ids":["https://openalex.org/I4405275539"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160784079","display_name":"Faisal Fahad M Alshrahrani","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405275539","display_name":"Onaizah Colleges","ror":"https://ror.org/03sha9j83","country_code":"SA","type":"education","lineage":["https://openalex.org/I4405275539"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Faisal Fahad M Alshrahrani","raw_affiliation_strings":["Onaizah Colleges"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Onaizah Colleges","institution_ids":["https://openalex.org/I4405275539"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5160957982","display_name":"Faisal Saud F Almsaad","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405275539","display_name":"Onaizah Colleges","ror":"https://ror.org/03sha9j83","country_code":"SA","type":"education","lineage":["https://openalex.org/I4405275539"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Faisal Saud F Almsaad","raw_affiliation_strings":["Onaizah Colleges"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Onaizah Colleges","institution_ids":["https://openalex.org/I4405275539"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4405275539"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"1","issue":"1","first_page":"1","last_page":"21"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyber-threat-detection","display_name":"cyber threat detection","score":0.8849999904632568},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.8790000081062317},{"id":"https://openalex.org/keywords/artificial-intelligence-in-cybersecurity","display_name":"artificial intelligence in cybersecurity","score":0.8119999766349792},{"id":"https://openalex.org/keywords/machine-learning-challenges","display_name":"machine learning challenges","score":0.781000018119812},{"id":"https://openalex.org/keywords/unknown-attack-detection","display_name":"unknown attack detection","score":0.9570000171661377},{"id":"https://openalex.org/keywords/scalability","display_name":"scalability","score":0.5350000262260437},{"id":"https://openalex.org/keywords/big-data","display_name":"big data","score":0.902999997138977},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"false positive rate","score":0.871999979019165},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.8539999723434448},{"id":"https://openalex.org/keywords/explainable-ai","display_name":"explainable AI","score":0.9520000219345093},{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":0.8920000195503235},{"id":"https://openalex.org/keywords/deep-learning","display_name":"deep learning","score":0.5910000205039978},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"ensemble learning","score":0.6660000085830688},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.7559999823570251},{"id":"https://openalex.org/keywords/adversarial-robustness","display_name":"adversarial robustness","score":0.8679999709129333},{"id":"https://openalex.org/keywords/corporate-security","display_name":"enterprise security","score":0.6489999890327454},{"id":"https://openalex.org/keywords/resource-constraints","display_name":"resource constraints","score":0.31200000643730164}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7311999797821045},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6564000248908997},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6154999732971191},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5889000296592712},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5859000086784363},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5608999729156494},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5149999856948853},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.48010000586509705},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.46939998865127563},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.36039999127388},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.35929998755455017},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.32589998841285706},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.3163999915122986},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.31189998984336853},{"id":"https://openalex.org/C189708586","wikidata":"https://www.wikidata.org/wiki/Q1504425","display_name":"Systematic review","level":3,"score":0.3111000061035156},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3084999918937683},{"id":"https://openalex.org/C2778755073","wikidata":"https://www.wikidata.org/wiki/Q10858537","display_name":"Scale (ratio)","level":2,"score":0.3001999855041504},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2978000044822693},{"id":"https://openalex.org/C71745522","wikidata":"https://www.wikidata.org/wiki/Q2476929","display_name":"Confidentiality","level":2,"score":0.29660001397132874},{"id":"https://openalex.org/C3017813396","wikidata":"https://www.wikidata.org/wiki/Q17078173","display_name":"Resource constraints","level":2,"score":0.289900004863739},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C109747225","wikidata":"https://www.wikidata.org/wiki/Q815758","display_name":"Scarcity","level":2,"score":0.25929999351501465},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2578999996185303},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.25369998812675476},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.25220000743865967}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.71422/jeit.0002","doi":"https://doi.org/10.71422/jeit.0002","is_oa":true,"landing_page_url":"https://doi.org/10.71422/jeit.0002","pdf_url":"https://journals.qu.edu.sa/jeit/article/id/36/download/pdf/","source":{"id":"https://openalex.org/S7407122222","display_name":"Journal of Emerging and Innovative Technologies","issn_l":"3152-8651","issn":["3152-8651"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Emerging and Innovative Technologies","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.71422/jeit.0002","doi":"https://doi.org/10.71422/jeit.0002","is_oa":true,"landing_page_url":"https://doi.org/10.71422/jeit.0002","pdf_url":"https://journals.qu.edu.sa/jeit/article/id/36/download/pdf/","source":{"id":"https://openalex.org/S7407122222","display_name":"Journal of Emerging and Innovative Technologies","issn_l":"3152-8651","issn":["3152-8651"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc-sa","license_id":"https://openalex.org/licenses/cc-by-nc-sa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Emerging and Innovative Technologies","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[{"display_name":"Systematic Review","id":"https://openalex.org/study-designs/systematic-review"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225293113.pdf","grobid_xml":"https://content.openalex.org/works/W7225293113.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7223288455","https://openalex.org/W7105800288","https://openalex.org/W7214980096","https://openalex.org/W7214908475","https://openalex.org/W7207533746","https://openalex.org/W4406103438","https://openalex.org/W7221844760","https://openalex.org/W4411983499","https://openalex.org/W7078182168","https://openalex.org/W7221707413"],"abstract_inverted_index":{"The":[0,132,179,233],"ability":[1],"to":[2,4,27,65,67,103,135,245],"adapt":[3],"threats":[5],"using":[6],"AI":[7,246],"and":[8,40,61,88,93,99,120,141,147,157,161,170,174,189,199,209,219,222,242,251,259],"ML":[9],"techniques":[10],"has":[11,48],"become":[12],"a":[13,23,76,89,236],"major":[14],"factor":[15],"in":[16,51,196,205,216,229,276],"the":[17,35,52,55,62,69,84,94,104,114,182,187,193,202,213,226,230,267,273],"fight":[18],"against":[19],"cyber":[20,109],"threats,":[21],"offering":[22],"data-driven,":[24],"adaptive":[25],"approach":[26],"threat":[28,110],"detection":[29,144,191],"that":[30,248],"transcends":[31],"signature-based":[32],"methods.":[33],"With":[34],"growing":[36],"surge":[37],"of":[38,54,96,106,130,269,278],"research":[39,264],"development":[41],"on":[42,75,181],"AI/ML-based":[43],"intrusion":[44,282],"detection,":[45],"however,":[46],"there":[47],"been":[49],"disarray":[50],"perception":[53],"challenges":[56,119,134,270],"which":[57,123],"organizations":[58],"are":[59],"facing":[60],"solutions":[63],"available":[64],"them":[66],"tackle":[68],"challenges.":[70,131],"This":[71,263],"paper":[72],"is":[73],"based":[74],"systematic":[77],"literature":[78],"review":[79],"(SLR)":[80],"carried":[81],"out":[82],"following":[83],"Kitchenham":[85],"SLR":[86],"protocol":[87],"PICOC":[90],"search":[91],"strategy,":[92],"analysis":[95],"45":[97],"peer-reviewed":[98],"industry-reported":[100],"studies":[101],"related":[102],"application":[105],"AI/ML":[107,279],"for":[108,280],"detection.":[111,283],"In":[112],"total,":[113],"corpus":[115],"identified":[116,186],"271":[117],"different":[118],"252":[121],"solutions,":[122],"were":[124,138],"grouped":[125],"into":[126],"seventeen":[127],"recurring":[128],"categories":[129],"biggest":[133],"successful":[136],"adoption":[137],"zero":[139],"day":[140],"novel":[142],"attack":[143],"(36),":[145],"scalability":[146,188],"big":[148],"data":[149],"(34),":[150],"high":[151,175],"false":[152],"positive/negative":[153],"rates":[154],"(33),":[155],"computational":[156],"resource":[158],"constraints":[159],"(32),":[160],"dataset":[162],"imbalance":[163],"(31),":[164],"followed":[165],"by":[166,272],"outdated":[167],"datasets,":[168],"privacy":[169,198],"regulatory":[171],"compliance,":[172],"explainability,":[173],"dimensional":[176],"feature":[177],"spaces.":[178],"comparison":[180],"continental":[183],"level":[184],"also":[185],"IoT-based":[190],"as":[192,201,212,225],"main":[194,214,227],"challenge":[195,204,215,228],"Asia,":[197],"explainability":[200],"primary":[203],"Europe,":[206],"adversarial":[207],"robustness":[208],"enterprise":[210],"security":[211,247],"North":[217],"America":[218],"foundational":[220],"infrastructure":[221],"capacity":[223],"limitations":[224],"Middle":[231],"East/Africa.":[232],"findings":[234],"indicate":[235],"trajectory":[237],"towards":[238],"more":[239],"hybrid,":[240],"adaptive,":[241],"privacy-conscious":[243],"approaches":[244],"integrate":[249],"ensemble":[250],"deep":[252],"learning":[253],"techniques,":[254],"federated":[255],"learning,":[256],"explainable":[257],"AI,":[258],"ongoing":[260],"training":[261],"pipelines.":[262],"work":[265],"highlights":[266],"severity":[268],"faced":[271],"future":[274],"organisations":[275],"implementation":[277],"cybersecurity":[281]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-11-06T00:00:00"}