{"id":"https://openalex.org/W4411208129","doi":"https://doi.org/10.1109/isdfs65363.2025.11011949","title":"User Behavior Analysis for Cyber Threat Detection: A Comparative Study of Machine Learning Algorithms","display_name":"User Behavior Analysis for Cyber Threat Detection: A Comparative Study of Machine Learning Algorithms","publication_year":2025,"publication_date":"2025-04-24","ids":{"openalex":"https://openalex.org/W4411208129","doi":"https://doi.org/10.1109/isdfs65363.2025.11011949"},"language":"en","primary_location":{"id":"doi:10.1109/isdfs65363.2025.11011949","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs65363.2025.11011949","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 13th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116307968","display_name":"Anant Wairagade","orcid":null},"institutions":[{"id":"https://openalex.org/I4210104856","display_name":"Phoenix (United States)","ror":"https://ror.org/01ggenr10","country_code":"US","type":"company","lineage":["https://openalex.org/I4210104856"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anant Wairagade","raw_affiliation_strings":["Independent Researcher,Phoenix,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Independent Researcher,Phoenix,USA","institution_ids":["https://openalex.org/I4210104856"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5002713271","display_name":"Sumit Ranjan","orcid":"https://orcid.org/0000-0002-5447-3378"},"institutions":[{"id":"https://openalex.org/I4210114892","display_name":"Applied StemCell (United States)","ror":"https://ror.org/01hbgfy53","country_code":"US","type":"company","lineage":["https://openalex.org/I4210114892"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Sumit Ranjan","raw_affiliation_strings":["Independent Researcher,Milpitas,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Independent Researcher,Milpitas,USA","institution_ids":["https://openalex.org/I4210114892"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.2161,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.88695307,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":91,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9243999719619751,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9243999719619751,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9138000011444092,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7328144311904907},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47760698199272156},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4581765830516815},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.33330845832824707}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7328144311904907},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47760698199272156},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4581765830516815},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.33330845832824707}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/isdfs65363.2025.11011949","is_oa":false,"landing_page_url":"https://doi.org/10.1109/isdfs65363.2025.11011949","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 13th International Symposium on Digital Forensics and Security (ISDFS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2961085424","https://openalex.org/W4306674287","https://openalex.org/W4387369504","https://openalex.org/W4394896187","https://openalex.org/W3170094116","https://openalex.org/W4386462264","https://openalex.org/W3107602296","https://openalex.org/W4364306694","https://openalex.org/W4312192474","https://openalex.org/W4283697347"],"abstract_inverted_index":{"Over":[0],"the":[1,3,44,77,80,83,133,142,154],"years,":[2],"increasing":[4],"sophistication":[5],"of":[6,48,59,76,79,85,116,162],"cyber-attacks":[7],"including":[8],"insider":[9,67,168],"threats,":[10,169],"advanced":[11],"persistent":[12],"threats":[13],"(APTs),":[14],"and":[15,26,46,70,105,107,139,171],"zero-day":[16,71,172],"vulnerabilities":[17],"have":[18],"placed":[19],"critical":[20],"sectors":[21],"such":[22,98],"as":[23,99],"health":[24],"care,":[25],"government":[27],"at":[28],"severe":[29],"risk.":[30],"User":[31],"behavioral":[32,88,118,164],"analysis":[33,89,119,165],"integration":[34,120],"with":[35,121,141],"machine":[36],"learning":[37],"(ML)":[38],"provides":[39],"an":[40],"efficient":[41],"solution":[42],"for":[43,123,145,167],"detection":[45],"mitigation":[47],"these":[49],"threats.":[50],"This":[51],"study":[52,75],"aims":[53],"to":[54,157],"perform":[55,158],"a":[56,159],"comparative":[57,160],"assessment":[58,161],"ML-based":[60,86,163],"methods,":[61],"analyzing":[62],"their":[63],"efficacy":[64],"in":[65],"handling":[66],"attacks,":[68],"APTs,":[69,170],"vulnerabilities.":[72,173],"The":[73,129],"detailed":[74],"state":[78],"art":[81],"showcases":[82],"ability":[84],"user":[87,117],"while":[90],"highlighting":[91],"key":[92],"challenges":[93],"faced":[94],"by":[95],"existing":[96],"solutions":[97,166],"data":[100],"imbalance,":[101],"high":[102],"energy":[103],"consumption,":[104],"scalability":[106],"latency":[108],"concerns,":[109],"among":[110],"others.":[111],"Moreover,":[112],"real-life":[113],"use":[114],"cases":[115],"ML":[122],"cyber":[124,146],"security":[125,147],"are":[126],"also":[127,131],"explored.":[128],"article":[130,156],"explores":[132],"research":[134],"directions,":[135],"providing":[136],"future":[137],"professionals":[138],"researchers":[140],"road":[143],"map":[144],"enhancement.":[148],"To":[149],"our":[150],"knowledge,":[151],"this":[152],"is":[153],"first":[155]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}