{"id":"https://openalex.org/W7129104008","doi":"https://doi.org/10.1007/s41060-025-00996-5","title":"Applying metaheuristic optimization for insider-threat detection using natural language processing","display_name":"Applying metaheuristic optimization for insider-threat detection using natural language processing","publication_year":2026,"publication_date":"2026-02-17","ids":{"openalex":"https://openalex.org/W7129104008","doi":"https://doi.org/10.1007/s41060-025-00996-5"},"language":"en","primary_location":{"id":"doi:10.1007/s41060-025-00996-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s41060-025-00996-5","pdf_url":null,"source":{"id":"https://openalex.org/S4210195017","display_name":"International Journal of Data Science and Analytics","issn_l":"2364-415X","issn":["2364-415X","2364-4168"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319972","host_organization_name":"Springer International Publishing","host_organization_lineage":["https://openalex.org/P4310319972","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer International Publishing","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Data Science and Analytics","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1007/s41060-025-00996-5","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056758186","display_name":"Tamara \u017divkovi\u0107","orcid":"https://orcid.org/0000-0003-2969-1709"},"institutions":[{"id":"https://openalex.org/I170253739","display_name":"Singidunum University","ror":"https://ror.org/017v7rz39","country_code":"RS","type":"education","lineage":["https://openalex.org/I170253739"]}],"countries":["RS"],"is_corresponding":false,"raw_author_name":"Tamara Zivkovic","raw_affiliation_strings":["Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia","institution_ids":["https://openalex.org/I170253739"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126115371","display_name":"Miodrag Zivkovic","orcid":null},"institutions":[{"id":"https://openalex.org/I170253739","display_name":"Singidunum University","ror":"https://ror.org/017v7rz39","country_code":"RS","type":"education","lineage":["https://openalex.org/I170253739"]}],"countries":["RS"],"is_corresponding":false,"raw_author_name":"Miodrag Zivkovic","raw_affiliation_strings":["Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia","institution_ids":["https://openalex.org/I170253739"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068911769","display_name":"Luka Jovanovi\u0107","orcid":"https://orcid.org/0000-0001-9402-7391"},"institutions":[{"id":"https://openalex.org/I170253739","display_name":"Singidunum University","ror":"https://ror.org/017v7rz39","country_code":"RS","type":"education","lineage":["https://openalex.org/I170253739"]}],"countries":["RS"],"is_corresponding":false,"raw_author_name":"Luka Jovanovic","raw_affiliation_strings":["Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia","institution_ids":["https://openalex.org/I170253739"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001650641","display_name":"Vladimir \u0160imi\u0107","orcid":"https://orcid.org/0000-0002-2483-1779"},"institutions":[{"id":"https://openalex.org/I129994210","display_name":"Do\u011fu\u015f University","ror":"https://ror.org/0272rjm42","country_code":"TR","type":"education","lineage":["https://openalex.org/I129994210"]},{"id":"https://openalex.org/I4068193","display_name":"University of Belgrade","ror":"https://ror.org/02qsmb048","country_code":"RS","type":"education","lineage":["https://openalex.org/I4068193"]},{"id":"https://openalex.org/I4210161052","display_name":"Korea University","ror":"https://ror.org/05m1gnk07","country_code":"JP","type":"education","lineage":["https://openalex.org/I4210161052"]}],"countries":["JP","RS","TR"],"is_corresponding":false,"raw_author_name":"Vladimir Simic","raw_affiliation_strings":["Department of Computer Science and Engineering, College of Informatics, Korea University, 145 Anam-ro, Seongbuk-gu, Seoul, 02841, Republic of Korea","Faculty of Engineering, Dogus University, Umraniye, Istanbul, 34775, T\u00fcrkiye","Faculty of Transport and Traffic Engineering, University of Belgrade, Vojvode Stepe 305, Belgrade, 11010, Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, College of Informatics, Korea University, 145 Anam-ro, Seongbuk-gu, Seoul, 02841, Republic of Korea","institution_ids":["https://openalex.org/I4210161052"]},{"raw_affiliation_string":"Faculty of Engineering, Dogus University, Umraniye, Istanbul, 34775, T\u00fcrkiye","institution_ids":["https://openalex.org/I129994210"]},{"raw_affiliation_string":"Faculty of Transport and Traffic Engineering, University of Belgrade, Vojvode Stepe 305, Belgrade, 11010, Serbia","institution_ids":["https://openalex.org/I4068193"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092476131","display_name":"Branislav Radomirovi\u0107","orcid":"https://orcid.org/0000-0002-0490-167X"},"institutions":[{"id":"https://openalex.org/I4210100255","display_name":"Beijing Academy of Artificial Intelligence","ror":"https://ror.org/016a74861","country_code":"CN","type":"other","lineage":["https://openalex.org/I4210100255"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Branislav Radomirovic","raw_affiliation_strings":["Institute of Artificial Intelligence, Belgrade, 11000, Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Artificial Intelligence, Belgrade, 11000, Serbia","institution_ids":["https://openalex.org/I4210100255"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090075748","display_name":"Toufik Mzili","orcid":"https://orcid.org/0000-0002-5733-3119"},"institutions":[{"id":"https://openalex.org/I4210125507","display_name":"Chouaib Doukkali University","ror":"https://ror.org/036kgyt43","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210125507"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Toufik Mzili","raw_affiliation_strings":["Computer Science Department, LAROSERI Lab, Faculty of Sciences, Universit\u00e9 Chouaib Doukkali, El Jadida, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, LAROSERI Lab, Faculty of Sciences, Universit\u00e9 Chouaib Doukkali, El Jadida, Morocco","institution_ids":["https://openalex.org/I4210125507"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015471891","display_name":"Vico Zeljkovic","orcid":"https://orcid.org/0009-0004-5578-3804"},"institutions":[{"id":"https://openalex.org/I170253739","display_name":"Singidunum University","ror":"https://ror.org/017v7rz39","country_code":"RS","type":"education","lineage":["https://openalex.org/I170253739"]}],"countries":["RS"],"is_corresponding":false,"raw_author_name":"Vico Zeljkovic","raw_affiliation_strings":["Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia","institution_ids":["https://openalex.org/I170253739"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5064081550","display_name":"Neboj\u0161a Ba\u010danin","orcid":"https://orcid.org/0000-0002-2062-924X"},"institutions":[{"id":"https://openalex.org/I170253739","display_name":"Singidunum University","ror":"https://ror.org/017v7rz39","country_code":"RS","type":"education","lineage":["https://openalex.org/I170253739"]},{"id":"https://openalex.org/I85461943","display_name":"Saveetha University","ror":"https://ror.org/0034me914","country_code":"IN","type":"education","lineage":["https://openalex.org/I85461943"]}],"countries":["IN","RS"],"is_corresponding":true,"raw_author_name":"Nebojsa Bacanin","raw_affiliation_strings":["Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia","Department of Mathematics, Saveetha School of Engineering, SIMATS Thandalam, Chennai, Tamilnadu, 602105, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Informatics and Computing, Singidunum University, Danijelova 32, Belgrade, 11000, Serbia","institution_ids":["https://openalex.org/I170253739"]},{"raw_affiliation_string":"Department of Mathematics, Saveetha School of Engineering, SIMATS Thandalam, Chennai, Tamilnadu, 602105, India","institution_ids":["https://openalex.org/I85461943"]}]}],"institutions":[],"countries_distinct_count":6,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5064081550"],"corresponding_institution_ids":["https://openalex.org/I170253739","https://openalex.org/I85461943"],"apc_list":{"value":2390,"currency":"EUR","value_usd":2990},"apc_paid":{"value":2390,"currency":"EUR","value_usd":2990},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.26722581,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"22","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.22460000216960907,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.22460000216960907,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12488","display_name":"Mental Health via Writing","score":0.147599995136261,"subfield":{"id":"https://openalex.org/subfields/3207","display_name":"Social Psychology"},"field":{"id":"https://openalex.org/fields/32","display_name":"Psychology"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.08110000193119049,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.5605000257492065},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4997999966144562},{"id":"https://openalex.org/keywords/word2vec","display_name":"Word2vec","score":0.44519999623298645},{"id":"https://openalex.org/keywords/convergence","display_name":"Convergence (economics)","score":0.3874000012874603},{"id":"https://openalex.org/keywords/natural-language","display_name":"Natural language","score":0.38370001316070557},{"id":"https://openalex.org/keywords/metaheuristic","display_name":"Metaheuristic","score":0.3531999886035919},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.351500004529953},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.34200000762939453}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7376000285148621},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.5605000257492065},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5544000267982483},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5152000188827515},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4997999966144562},{"id":"https://openalex.org/C2776461190","wikidata":"https://www.wikidata.org/wiki/Q22673982","display_name":"Word2vec","level":3,"score":0.44519999623298645},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42410001158714294},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.3874000012874603},{"id":"https://openalex.org/C195324797","wikidata":"https://www.wikidata.org/wiki/Q33742","display_name":"Natural language","level":2,"score":0.38370001316070557},{"id":"https://openalex.org/C109718341","wikidata":"https://www.wikidata.org/wiki/Q1385229","display_name":"Metaheuristic","level":2,"score":0.3531999886035919},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.351500004529953},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.34200000762939453},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.33869999647140503},{"id":"https://openalex.org/C34736171","wikidata":"https://www.wikidata.org/wiki/Q918333","display_name":"Preprocessor","level":2,"score":0.3188000023365021},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.30640000104904175},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.29980000853538513},{"id":"https://openalex.org/C2781170535","wikidata":"https://www.wikidata.org/wiki/Q30587856","display_name":"Noisy data","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.28439998626708984},{"id":"https://openalex.org/C125014702","wikidata":"https://www.wikidata.org/wiki/Q4680749","display_name":"Adaptive learning","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C85617194","wikidata":"https://www.wikidata.org/wiki/Q2072794","display_name":"Particle swarm optimization","level":2,"score":0.27140000462532043},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.25929999351501465},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.2578999996185303}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s41060-025-00996-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s41060-025-00996-5","pdf_url":null,"source":{"id":"https://openalex.org/S4210195017","display_name":"International Journal of Data Science and Analytics","issn_l":"2364-415X","issn":["2364-415X","2364-4168"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319972","host_organization_name":"Springer International Publishing","host_organization_lineage":["https://openalex.org/P4310319972","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer International Publishing","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Data Science and Analytics","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s41060-025-00996-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s41060-025-00996-5","pdf_url":null,"source":{"id":"https://openalex.org/S4210195017","display_name":"International Journal of Data Science and Analytics","issn_l":"2364-415X","issn":["2364-415X","2364-4168"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319972","host_organization_name":"Springer International Publishing","host_organization_lineage":["https://openalex.org/P4310319972","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer International Publishing","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Data Science and Analytics","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":57,"referenced_works":["https://openalex.org/W1991210879","https://openalex.org/W2010334716","https://openalex.org/W2043845271","https://openalex.org/W2053154970","https://openalex.org/W2140448605","https://openalex.org/W2143560894","https://openalex.org/W2151554678","https://openalex.org/W2152195021","https://openalex.org/W2274083676","https://openalex.org/W2295598076","https://openalex.org/W2609923048","https://openalex.org/W2779958744","https://openalex.org/W3014071235","https://openalex.org/W3083112738","https://openalex.org/W3083528220","https://openalex.org/W3123084659","https://openalex.org/W3130625521","https://openalex.org/W3153493802","https://openalex.org/W3186172578","https://openalex.org/W3194627252","https://openalex.org/W3202156390","https://openalex.org/W3202733154","https://openalex.org/W3212797097","https://openalex.org/W3217083123","https://openalex.org/W4220705580","https://openalex.org/W4220905779","https://openalex.org/W4233415207","https://openalex.org/W4237798528","https://openalex.org/W4249545506","https://openalex.org/W4289913121","https://openalex.org/W4293676882","https://openalex.org/W4309544872","https://openalex.org/W4313245390","https://openalex.org/W4361275072","https://openalex.org/W4386275771","https://openalex.org/W4387731484","https://openalex.org/W4389386867","https://openalex.org/W4390343272","https://openalex.org/W4390481482","https://openalex.org/W4392151675","https://openalex.org/W4398199930","https://openalex.org/W4399435690","https://openalex.org/W4401979652","https://openalex.org/W4402189371","https://openalex.org/W4402563056","https://openalex.org/W4403842423","https://openalex.org/W4404994138","https://openalex.org/W4405361295","https://openalex.org/W4407614889","https://openalex.org/W4407702546","https://openalex.org/W4408295981","https://openalex.org/W4410415966","https://openalex.org/W4411121141","https://openalex.org/W4414009702","https://openalex.org/W4414153810","https://openalex.org/W4414325695","https://openalex.org/W4415030170"],"related_works":[],"abstract_inverted_index":{"Maintaining":[0],"trust":[1],"among":[2],"employees,":[3],"employers,":[4],"and":[5,11,20,34,49,84,123,149],"institutions":[6],"is":[7,76],"fundamental":[8],"to":[9,26,42,64,68],"business":[10],"research,":[12],"yet":[13],"the":[14,133,137,141,150],"rise":[15],"of":[16,57,136,147],"always-online":[17],"digital":[18],"systems":[19],"expanding":[21],"workforces":[22],"poses":[23],"new":[24],"risks":[25],"operational":[27],"integrity.":[28],"Fluctuating":[29],"work":[30],"environments,":[31],"evolving":[32],"motivations,":[33],"gaps":[35],"in":[36],"training":[37],"can":[38],"leave":[39],"organizations":[40],"vulnerable":[41],"insider":[43,71],"threats,":[44],"including":[45],"inadvertent":[46],"data":[47],"leaks":[48],"intentional":[50],"exfiltration.":[51],"In":[52],"this":[53],"study,":[54],"an":[55,91,145],"investigation":[56],"natural":[58],"language":[59],"processing":[60],"(NLP)":[61],"methods":[62],"applied":[63],"HTTP":[65],"activity":[66],"logs":[67],"identify":[69],"potential":[70],"threats":[72],"through":[73],"behavioral":[74],"patterns":[75],"conducted.":[77],"Two":[78],"experiments":[79],"were":[80,96],"conducted":[81],"using":[82,98],"TF-IDF":[83],"Word2Vec":[85],"text":[86],"representations,":[87],"each":[88],"combined":[89],"with":[90,140],"XGBoost":[92],"classifier":[93],"whose":[94],"hyperparameters":[95],"optimized":[97],"a":[99,112],"newly":[100],"proposed":[101,138],"iteration":[102],"stagnation-aware":[103],"variable":[104],"neighborhood":[105],"search":[106],"(ISAVNS)":[107],"metaheuristic.":[108],"The":[109],"ISAVNS":[110],"introduces":[111],"stagnation-detection":[113],"mechanism":[114],"that":[115],"enables":[116],"adaptive":[117],"recovery":[118],"during":[119],"optimization,":[120],"improving":[121],"exploration":[122],"convergence":[124],"stability.":[125],"Evaluation":[126],"on":[127],"publicly":[128],"available":[129],"insider-threat":[130],"datasets":[131],"confirmed":[132],"high":[134],"effectiveness":[135],"framework,":[139],"TF-IDF-based":[142],"model":[143],"reaching":[144],"accuracy":[146],"97.63%":[148],"Word2Vec-based":[151],"counterpart":[152],"attaining":[153],"97.71%.":[154]},"counts_by_year":[],"updated_date":"2026-05-05T08:41:31.759640","created_date":"2026-02-17T00:00:00"}