{"id":"https://openalex.org/W4415125439","doi":"https://doi.org/10.1109/icmlt65785.2025.11193250","title":"Cyber Threat Intelligence Using Ensemble Approach to Identify Ransomware Attacks","display_name":"Cyber Threat Intelligence Using Ensemble Approach to Identify Ransomware Attacks","publication_year":2025,"publication_date":"2025-05-23","ids":{"openalex":"https://openalex.org/W4415125439","doi":"https://doi.org/10.1109/icmlt65785.2025.11193250"},"language":"en","primary_location":{"id":"doi:10.1109/icmlt65785.2025.11193250","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icmlt65785.2025.11193250","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 10th International Conference on Machine Learning Technologies (ICMLT)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5005416486","display_name":"Umar Ibrahim","orcid":"https://orcid.org/0000-0002-2887-2877"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Umar Ibrahim","raw_affiliation_strings":["King Abdulaziz University,Faculty of Computing and Information Technology,Department of Information Technology,Jeddah,Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"King Abdulaziz University,Faculty of Computing and Information Technology,Department of Information Technology,Jeddah,Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036113623","display_name":"Rayan Mosli","orcid":"https://orcid.org/0000-0002-8694-7996"},"institutions":[{"id":"https://openalex.org/I185163786","display_name":"King Abdulaziz University","ror":"https://ror.org/02ma4wv74","country_code":"SA","type":"education","lineage":["https://openalex.org/I185163786"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Rayan Mosli","raw_affiliation_strings":["King Abdulaziz University,Faculty of Computing and Information Technology,Department of Information Technology,Jeddah,Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"King Abdulaziz University,Faculty of Computing and Information Technology,Department of Information Technology,Jeddah,Saudi Arabia","institution_ids":["https://openalex.org/I185163786"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I185163786"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.33766098,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"29","last_page":"36"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9979000091552734,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9929999709129333,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9790999889373779,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.9028000235557556},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.4683000147342682},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4320000112056732},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.42590001225471497},{"id":"https://openalex.org/keywords/social-media","display_name":"Social media","score":0.40529999136924744},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4041999876499176},{"id":"https://openalex.org/keywords/naive-bayes-classifier","display_name":"Naive Bayes classifier","score":0.40380001068115234},{"id":"https://openalex.org/keywords/preprocessor","display_name":"Preprocessor","score":0.38269999623298645},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.3677000105381012},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.35740000009536743}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.9028000235557556},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8105999827384949},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5077999830245972},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49320000410079956},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4683000147342682},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4320000112056732},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.42590001225471497},{"id":"https://openalex.org/C518677369","wikidata":"https://www.wikidata.org/wiki/Q202833","display_name":"Social media","level":2,"score":0.40529999136924744},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4041999876499176},{"id":"https://openalex.org/C52001869","wikidata":"https://www.wikidata.org/wiki/Q812530","display_name":"Naive Bayes classifier","level":3,"score":0.40380001068115234},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38659998774528503},{"id":"https://openalex.org/C34736171","wikidata":"https://www.wikidata.org/wiki/Q918333","display_name":"Preprocessor","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38040000200271606},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.3677000105381012},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.35740000009536743},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35260000824928284},{"id":"https://openalex.org/C10551718","wikidata":"https://www.wikidata.org/wiki/Q5227332","display_name":"Data pre-processing","level":2,"score":0.3465000092983246},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.34139999747276306},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.33320000767707825},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3294999897480011},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3215999901294708},{"id":"https://openalex.org/C119898033","wikidata":"https://www.wikidata.org/wiki/Q3433888","display_name":"Ensemble forecasting","level":2,"score":0.3206999897956848},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.3206000030040741},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3160000145435333},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2928999960422516},{"id":"https://openalex.org/C179717631","wikidata":"https://www.wikidata.org/wiki/Q2991667","display_name":"Multilayer perceptron","level":3,"score":0.29170000553131104},{"id":"https://openalex.org/C4727928","wikidata":"https://www.wikidata.org/wiki/Q17164759","display_name":"Social network (sociolinguistics)","level":3,"score":0.28540000319480896},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.2676999866962433},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C143275388","wikidata":"https://www.wikidata.org/wiki/Q92438","display_name":"Microblogging","level":3,"score":0.2614000141620636},{"id":"https://openalex.org/C66402592","wikidata":"https://www.wikidata.org/wiki/Q2271421","display_name":"Sentiment analysis","level":2,"score":0.259799987077713},{"id":"https://openalex.org/C60908668","wikidata":"https://www.wikidata.org/wiki/Q690207","display_name":"Perceptron","level":3,"score":0.2574000060558319},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/icmlt65785.2025.11193250","is_oa":false,"landing_page_url":"https://doi.org/10.1109/icmlt65785.2025.11193250","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 10th International Conference on Machine Learning Technologies (ICMLT)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W2552981364","https://openalex.org/W2948113838","https://openalex.org/W3000208506","https://openalex.org/W3017774323","https://openalex.org/W3042672578","https://openalex.org/W3048726132","https://openalex.org/W3082433973","https://openalex.org/W3087352798","https://openalex.org/W3171687382","https://openalex.org/W4200000055","https://openalex.org/W4210739838","https://openalex.org/W4225140064","https://openalex.org/W4293192745","https://openalex.org/W4310931642","https://openalex.org/W4312887856","https://openalex.org/W4323315151","https://openalex.org/W4352977368","https://openalex.org/W4376648608","https://openalex.org/W4380990032","https://openalex.org/W4380996693","https://openalex.org/W4383899490","https://openalex.org/W4386220651","https://openalex.org/W4386378792","https://openalex.org/W4386647260","https://openalex.org/W4386945737","https://openalex.org/W4387490462","https://openalex.org/W4388666470","https://openalex.org/W4390098783","https://openalex.org/W4390636702","https://openalex.org/W4390805757","https://openalex.org/W4391333914","https://openalex.org/W4391756333","https://openalex.org/W4392095766","https://openalex.org/W4402444628"],"related_works":[],"abstract_inverted_index":{"Numerous":[0],"research":[1],"studies":[2],"have":[3],"been":[4],"carried":[5],"out":[6],"utilizing":[7],"different":[8,29],"datasets":[9],"from":[10,61],"X":[11,76,106],"(formally":[12],"Twitter)":[13],"to":[14,36,48,91,128,183,196,222,233],"other":[15,69],"social":[16,70],"media":[17,71],"contents":[18],"as":[19,86,227],"sources":[20],"of":[21,26,42,51,65,132,140,172,244,250,260],"cyber":[22,115,121],"threat":[23,116],"intelligence.":[24],"Some":[25],"these":[27],"use":[28,83],"machine":[30,156],"learning":[31,34],"and":[32,40,54,59,68,103,113,123,138,163,192,231,246,262],"deep":[33],"techniques":[35],"automate":[37],"the":[38,49,84,130,179,258],"identification":[39],"profiling":[41],"emerging":[43],"threats.":[44],"This":[45],"is":[46,77,253],"due":[47],"difficulty":[50],"manually":[52],"locating":[53],"analyzing":[55],"insightful":[56],"patterns,":[57],"trends,":[58],"insights":[60],"a":[62,149,158,164,247,254],"large":[63],"volume":[64],"unstructured":[66],"tweets":[67],"contents.":[72],"Because":[73],"information":[74],"on":[75],"updated":[78],"in":[79,110,257],"real":[80],"time,":[81],"researchers":[82],"microblog":[85],"an":[87,242],"open-source":[88],"intelligence":[89,93,117],"gateway":[90],"gather":[92],"about":[94,118],"various":[95],"events":[96],"like":[97,135],"earthquakes,":[98],"forest":[99],"fires,":[100],"terrorist":[101],"attacks,":[102],"more.":[104],"While":[105],"has":[107],"proven":[108],"useful":[109],"providing":[111],"accurate":[112],"timely":[114],"software":[119],"vulnerabilities,":[120],"threats,":[122],"exploits,":[124],"this":[125,145],"work":[126],"attempts":[127],"overcome":[129],"shortcomings":[131],"existing":[133],"systems,":[134],"low":[136],"accuracy":[137,243],"lack":[139],"feature":[141,190,210],"contribution":[142,211],"analysis.":[143,212],"In":[144],"paper,":[146],"we":[147],"proposed":[148],"novel":[150],"ensemble":[151,181,239],"approach":[152,214],"that":[153],"integrates":[154],"traditional":[155],"learning,":[157],"convolutional":[159],"neural":[160],"network":[161],"(CNN)":[162],"fine-tuned":[165],"BERT":[166],"model":[167,177,182,188,240],"for":[168,204,208],"more":[169],"efficient":[170],"way":[171],"identifying":[173],"ransomware":[174,199,228,236,263],"attacks.":[175],"The":[176,238],"leverages":[178],"weighted":[180],"achieve":[184],"higher":[185],"accuracy.":[186],"Our":[187,213],"uses":[189],"engineering":[191],"sophisticated":[193],"text":[194],"preprocessing":[195],"identify":[197,234],"important":[198],"indicators.":[200],"We":[201],"employed":[202],"LIME":[203],"Explainable":[205],"AI,":[206],"allowing":[207],"in-depth":[209],"also":[215],"utilizes":[216],"Ransomware.live":[217],"API,":[218],"which":[219,252],"enabled":[220],"us":[221],"obtain":[223],"real-time":[224],"indicators,":[225],"such":[226],"groups,":[229],"domains,":[230],"keywords":[232],"possible":[235],"conversations.":[237],"achieved":[241],"0.9859":[245],"ROC":[248],"score":[249],"1.00,":[251],"significant":[255],"improvement":[256],"field":[259],"cybersecurity":[261],"identification.":[264]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-14T00:00:00"}