{"id":"https://openalex.org/W4283313119","doi":"https://doi.org/10.1145/3545574","title":"The Role of Machine Learning in Cybersecurity","display_name":"The Role of Machine Learning in Cybersecurity","publication_year":2022,"publication_date":"2022-07-07","ids":{"openalex":"https://openalex.org/W4283313119","doi":"https://doi.org/10.1145/3545574"},"language":"en","primary_location":{"id":"doi:10.1145/3545574","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3545574","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3545574","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://dl.acm.org/doi/pdf/10.1145/3545574","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5084036967","display_name":"Giovanni Apruzzese","orcid":"https://orcid.org/0000-0002-6890-9611"},"institutions":[{"id":"https://openalex.org/I184656255","display_name":"University of Liechtenstein","ror":"https://ror.org/01qjrx392","country_code":"LI","type":"education","lineage":["https://openalex.org/I184656255"]}],"countries":["LI"],"is_corresponding":false,"raw_author_name":"Giovanni Apruzzese","raw_affiliation_strings":["University of Liechtenstein, Vaduz, Liechtenstein"],"raw_orcid":"https://orcid.org/0000-0002-6890-9611","affiliations":[{"raw_affiliation_string":"University of Liechtenstein, Vaduz, Liechtenstein","institution_ids":["https://openalex.org/I184656255"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089735573","display_name":"Pavel Laskov","orcid":"https://orcid.org/0000-0002-3212-7167"},"institutions":[{"id":"https://openalex.org/I184656255","display_name":"University of Liechtenstein","ror":"https://ror.org/01qjrx392","country_code":"LI","type":"education","lineage":["https://openalex.org/I184656255"]}],"countries":["LI"],"is_corresponding":false,"raw_author_name":"Pavel Laskov","raw_affiliation_strings":["University of Liechtenstein, Vaduz, Liechtenstein"],"raw_orcid":"https://orcid.org/0000-0002-3212-7167","affiliations":[{"raw_affiliation_string":"University of Liechtenstein, Vaduz, Liechtenstein","institution_ids":["https://openalex.org/I184656255"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5083963581","display_name":"Edgardo Montes de","orcid":"https://orcid.org/0000-0001-6771-0689"},"institutions":[{"id":"https://openalex.org/I4210118939","display_name":"Montimage (France)","ror":"https://ror.org/02a8qtz61","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210118939"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Edgardo Montes de Oca","raw_affiliation_strings":["Montimage, France"],"raw_orcid":"https://orcid.org/0000-0001-6771-0689","affiliations":[{"raw_affiliation_string":"Montimage, France","institution_ids":["https://openalex.org/I4210118939"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084443011","display_name":"Wissam Mallouli","orcid":"https://orcid.org/0000-0003-2548-6628"},"institutions":[{"id":"https://openalex.org/I4210118939","display_name":"Montimage (France)","ror":"https://ror.org/02a8qtz61","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210118939"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Wissam Mallouli","raw_affiliation_strings":["Montimage, France"],"raw_orcid":"https://orcid.org/0000-0003-2548-6628","affiliations":[{"raw_affiliation_string":"Montimage, France","institution_ids":["https://openalex.org/I4210118939"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5112842159","display_name":"Luis Brdalo Rapa","orcid":null},"institutions":[{"id":"https://openalex.org/I4210164798","display_name":"S2 Grupo (Spain)","ror":"https://ror.org/05bvt3s14","country_code":"ES","type":"company","lineage":["https://openalex.org/I4210164798"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Luis Brdalo Rapa","raw_affiliation_strings":["S2 Grupo, Spain"],"raw_orcid":"https://orcid.org/0000-0002-2687-2873","affiliations":[{"raw_affiliation_string":"S2 Grupo, Spain","institution_ids":["https://openalex.org/I4210164798"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003373202","display_name":"Athanasios Vasileios Grammatopoulos","orcid":"https://orcid.org/0000-0001-8284-3797"},"institutions":[{"id":"https://openalex.org/I1295585255","display_name":"European Union Agency for Network and Information Security","ror":"https://ror.org/00wqx6897","country_code":"GR","type":"government","lineage":["https://openalex.org/I1295585255","https://openalex.org/I1320481043"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Athanasios Vasileios Grammatopoulos","raw_affiliation_strings":["ENISA, Greece"],"raw_orcid":"https://orcid.org/0000-0001-8284-3797","affiliations":[{"raw_affiliation_string":"ENISA, Greece","institution_ids":["https://openalex.org/I1295585255"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5001329022","display_name":"Fabio Di Franco","orcid":"https://orcid.org/0000-0002-7407-1077"},"institutions":[{"id":"https://openalex.org/I1295585255","display_name":"European Union Agency for Network and Information Security","ror":"https://ror.org/00wqx6897","country_code":"GR","type":"government","lineage":["https://openalex.org/I1295585255","https://openalex.org/I1320481043"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Fabio Di Franco","raw_affiliation_strings":["ENISA, Greece"],"raw_orcid":"https://orcid.org/0000-0002-7407-1077","affiliations":[{"raw_affiliation_string":"ENISA, Greece","institution_ids":["https://openalex.org/I1295585255"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":23.6499,"has_fulltext":true,"cited_by_count":252,"citation_normalized_percentile":{"value":0.99855021,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":89,"max":100},"biblio":{"volume":"4","issue":"1","first_page":"1","last_page":"38"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9987000226974487,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/leverage","display_name":"Leverage (statistics)","score":0.7793927192687988},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.7052286267280579},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.6895104050636292},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.6587007641792297},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.532605767250061},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.470674604177475},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.4173964858055115},{"id":"https://openalex.org/keywords/root-cause-analysis","display_name":"Root cause analysis","score":0.41025733947753906},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2965235412120819},{"id":"https://openalex.org/keywords/software-engineering","display_name":"Software engineering","score":0.16367140412330627},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.15302026271820068}],"concepts":[{"id":"https://openalex.org/C153083717","wikidata":"https://www.wikidata.org/wiki/Q6535263","display_name":"Leverage (statistics)","level":2,"score":0.7793927192687988},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.7052286267280579},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6895104050636292},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6587007641792297},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.532605767250061},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.470674604177475},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.4173964858055115},{"id":"https://openalex.org/C130963320","wikidata":"https://www.wikidata.org/wiki/Q1401207","display_name":"Root cause analysis","level":2,"score":0.41025733947753906},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2965235412120819},{"id":"https://openalex.org/C115903868","wikidata":"https://www.wikidata.org/wiki/Q80993","display_name":"Software engineering","level":1,"score":0.16367140412330627},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.15302026271820068},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C77595967","wikidata":"https://www.wikidata.org/wiki/Q3151013","display_name":"Forensic engineering","level":1,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1145/3545574","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3545574","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3545574","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},{"id":"pmh:oai:arXiv.org:2206.09707","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2206.09707","pdf_url":"https://arxiv.org/pdf/2206.09707","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1145/3545574","is_oa":true,"landing_page_url":"https://doi.org/10.1145/3545574","pdf_url":"https://dl.acm.org/doi/pdf/10.1145/3545574","source":{"id":"https://openalex.org/S4210235901","display_name":"Digital Threats Research and Practice","issn_l":"2576-5337","issn":["2576-5337","2692-1626"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319798","host_organization_name":"Association for Computing Machinery","host_organization_lineage":["https://openalex.org/P4310319798"],"host_organization_lineage_names":["Association for Computing Machinery"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Digital Threats: Research and Practice","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4283313119.pdf","grobid_xml":"https://content.openalex.org/works/W4283313119.grobid-xml"},"referenced_works_count":102,"referenced_works":["https://openalex.org/W51113573","https://openalex.org/W1197477582","https://openalex.org/W1901616594","https://openalex.org/W2049652236","https://openalex.org/W2083876371","https://openalex.org/W2109983959","https://openalex.org/W2150069190","https://openalex.org/W2155903900","https://openalex.org/W2258956667","https://openalex.org/W2336566325","https://openalex.org/W2342408547","https://openalex.org/W2407313496","https://openalex.org/W2464629196","https://openalex.org/W2516066574","https://openalex.org/W2517229335","https://openalex.org/W2604955674","https://openalex.org/W2611170103","https://openalex.org/W2615497679","https://openalex.org/W2736668610","https://openalex.org/W2739053192","https://openalex.org/W2744999500","https://openalex.org/W2749928722","https://openalex.org/W2753415590","https://openalex.org/W2766537588","https://openalex.org/W2773446523","https://openalex.org/W2774398706","https://openalex.org/W2788346622","https://openalex.org/W2828409123","https://openalex.org/W2890718808","https://openalex.org/W2891807831","https://openalex.org/W2894278110","https://openalex.org/W2896480560","https://openalex.org/W2899221877","https://openalex.org/W2900633536","https://openalex.org/W2901683318","https://openalex.org/W2911273633","https://openalex.org/W2912568927","https://openalex.org/W2913153485","https://openalex.org/W2917582573","https://openalex.org/W2917878349","https://openalex.org/W2918664583","https://openalex.org/W2919115771","https://openalex.org/W2924689635","https://openalex.org/W2926701059","https://openalex.org/W2929803724","https://openalex.org/W2944103016","https://openalex.org/W2947600276","https://openalex.org/W2947934595","https://openalex.org/W2952298682","https://openalex.org/W2963203015","https://openalex.org/W2964262308","https://openalex.org/W2973449430","https://openalex.org/W2980576170","https://openalex.org/W2991305957","https://openalex.org/W2992225566","https://openalex.org/W2999461149","https://openalex.org/W3005630930","https://openalex.org/W3006140559","https://openalex.org/W3006834142","https://openalex.org/W3007481080","https://openalex.org/W3011610465","https://openalex.org/W3032638893","https://openalex.org/W3034673956","https://openalex.org/W3034863102","https://openalex.org/W3048997728","https://openalex.org/W3084338062","https://openalex.org/W3084939998","https://openalex.org/W3092065255","https://openalex.org/W3093266389","https://openalex.org/W3104926413","https://openalex.org/W3111237076","https://openalex.org/W3111563271","https://openalex.org/W3119246679","https://openalex.org/W3122424966","https://openalex.org/W3129623658","https://openalex.org/W3163315201","https://openalex.org/W3174930054","https://openalex.org/W3174935995","https://openalex.org/W3176065393","https://openalex.org/W3184796286","https://openalex.org/W3199368030","https://openalex.org/W3200840849","https://openalex.org/W3201894803","https://openalex.org/W3206286092","https://openalex.org/W3208494809","https://openalex.org/W3212137514","https://openalex.org/W3215966579","https://openalex.org/W4200017346","https://openalex.org/W4213245422","https://openalex.org/W4220846496","https://openalex.org/W4239237857","https://openalex.org/W4246580442","https://openalex.org/W4247200422","https://openalex.org/W4287637491","https://openalex.org/W4297822040","https://openalex.org/W4297927038","https://openalex.org/W4298134634","https://openalex.org/W4302442766","https://openalex.org/W4315746341","https://openalex.org/W6743073161","https://openalex.org/W6784472380","https://openalex.org/W6987090368"],"related_works":["https://openalex.org/W2110363179","https://openalex.org/W2770234245","https://openalex.org/W96612179","https://openalex.org/W4229499248","https://openalex.org/W2566006169","https://openalex.org/W2987774938","https://openalex.org/W4256492088","https://openalex.org/W632915154","https://openalex.org/W2055733372","https://openalex.org/W3022067003"],"abstract_inverted_index":{"Machine":[0],"Learning":[1],"(ML)":[2],"represents":[3],"a":[4,35,43,86,97],"pivotal":[5],"technology":[6],"for":[7,175],"current":[8,51],"and":[9,13,40,81],"future":[10,166],"information":[11],"systems,":[12],"many":[14],"domains":[15],"already":[16],"leverage":[17],"the":[18,50,54,63,92,101,106,121,134],"capabilities":[19],"of":[20,24,53,65,72,100,103,123,168,193],"ML.":[21],"However,":[22],"deployment":[23],"ML":[25,66,73,104,124,142,153,169,194],"in":[26,49,67,105,116,143,155,170,178],"cybersecurity":[27,108],"is":[28,91,173],"still":[29],"at":[30],"an":[31,114],"early":[32],"stage,":[33],"revealing":[34],"significant":[36],"discrepancy":[37,44],"between":[38],"research":[39],"practice.":[41],"Such":[42],"has":[45],"its":[46,79],"root":[47],"cause":[48],"state":[52],"art,":[55],"which":[56,172],"does":[57],"not":[58],"allow":[59],"us":[60],"to":[61,95,127,165],"identify":[62],"role":[64,102],"cybersecurity.":[68,144,156],"The":[69],"full":[70],"potential":[71,111],"will":[74],"never":[75],"be":[76,139],"unleashed":[77],"unless":[78],"pros":[80],"cons":[82],"are":[83,183],"understood":[84],"by":[85,141],"broad":[87],"audience.":[88],"This":[89],"article":[90],"first":[93],"attempt":[94],"provide":[96],"holistic":[98],"understanding":[99],"entire":[107],"domain\u2014to":[109],"any":[110],"reader":[112],"with":[113,125,185],"interest":[115],"this":[117,179],"topic.":[118],"We":[119],"highlight":[120],"advantages":[122],"respect":[126],"human-driven":[128],"detection":[129],"methods,":[130],"as":[131,133,195],"well":[132],"additional":[135],"tasks":[136],"that":[137],"can":[138,163],"addressed":[140],"Moreover,":[145],"we":[146,158],"elucidate":[147],"various":[148,161],"intrinsic":[149],"problems":[150],"affecting":[151],"real":[152,187],"deployments":[154],"Finally,":[157],"present":[159],"how":[160],"stakeholders":[162],"contribute":[164],"developments":[167],"cybersecurity,":[171],"essential":[174],"further":[176],"progress":[177],"field.":[180],"Our":[181],"contributions":[182],"complemented":[184],"two":[186],"case":[188],"studies":[189],"describing":[190],"industrial":[191],"applications":[192],"defense":[196],"against":[197],"cyber-threats.":[198]},"counts_by_year":[{"year":2026,"cited_by_count":43},{"year":2025,"cited_by_count":82},{"year":2024,"cited_by_count":94},{"year":2023,"cited_by_count":30},{"year":2022,"cited_by_count":2},{"year":2021,"cited_by_count":1}],"updated_date":"2026-08-05T07:39:15.569665","created_date":"2025-10-10T00:00:00"}