{"id":"https://openalex.org/W7160986429","doi":"https://doi.org/10.1186/s42400-025-00435-9","title":"Radar: a realistic dataset for advancing ransomware detection","display_name":"Radar: a realistic dataset for advancing ransomware detection","publication_year":2026,"publication_date":"2026-05-14","ids":{"openalex":"https://openalex.org/W7160986429","doi":"https://doi.org/10.1186/s42400-025-00435-9"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-025-00435-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00435-9","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00435-9.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00435-9.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050531980","display_name":"Jamil Ispahany","orcid":"https://orcid.org/0000-0001-8224-2924"},"institutions":[{"id":"https://openalex.org/I153230381","display_name":"Charles Sturt University","ror":"https://ror.org/00wfvh315","country_code":"AU","type":"education","lineage":["https://openalex.org/I153230381"]},{"id":"https://openalex.org/I4210130318","display_name":"Cooperative Research Centre for Mental Health","ror":"https://ror.org/03f37fg05","country_code":"AU","type":"facility","lineage":["https://openalex.org/I4210130318"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Jamil Ispahany","raw_affiliation_strings":["Charles Sturt University, Bathurst, NSW, 2795, Australia","Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia"],"raw_orcid":"https://orcid.org/0000-0001-8224-2924","affiliations":[{"raw_affiliation_string":"Charles Sturt University, Bathurst, NSW, 2795, Australia","institution_ids":["https://openalex.org/I153230381"]},{"raw_affiliation_string":"Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia","institution_ids":["https://openalex.org/I4210130318"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037630855","display_name":"Oscar Blessed Deho","orcid":"https://orcid.org/0000-0001-5723-2564"},"institutions":[{"id":"https://openalex.org/I153230381","display_name":"Charles Sturt University","ror":"https://ror.org/00wfvh315","country_code":"AU","type":"education","lineage":["https://openalex.org/I153230381"]},{"id":"https://openalex.org/I4210130318","display_name":"Cooperative Research Centre for Mental Health","ror":"https://ror.org/03f37fg05","country_code":"AU","type":"facility","lineage":["https://openalex.org/I4210130318"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Oscar Blessed Deho","raw_affiliation_strings":["Charles Sturt University, Bathurst, NSW, 2795, Australia","Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles Sturt University, Bathurst, NSW, 2795, Australia","institution_ids":["https://openalex.org/I153230381"]},{"raw_affiliation_string":"Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia","institution_ids":["https://openalex.org/I4210130318"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5136017398","display_name":"Md Mahmudul Islam","orcid":null},"institutions":[{"id":"https://openalex.org/I153230381","display_name":"Charles Sturt University","ror":"https://ror.org/00wfvh315","country_code":"AU","type":"education","lineage":["https://openalex.org/I153230381"]},{"id":"https://openalex.org/I4210118547","display_name":"Albury Wodonga Health","ror":"https://ror.org/028ypwr15","country_code":"AU","type":"healthcare","lineage":["https://openalex.org/I4210118547"]},{"id":"https://openalex.org/I4210130318","display_name":"Cooperative Research Centre for Mental Health","ror":"https://ror.org/03f37fg05","country_code":"AU","type":"facility","lineage":["https://openalex.org/I4210130318"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Md Rafiqul Islam","raw_affiliation_strings":["Charles Sturt University, Albury-Wodonga, NSW, 2640, Australia","Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles Sturt University, Albury-Wodonga, NSW, 2640, Australia","institution_ids":["https://openalex.org/I153230381","https://openalex.org/I4210118547"]},{"raw_affiliation_string":"Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia","institution_ids":["https://openalex.org/I4210130318"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5126368791","display_name":"M. Arif Khan","orcid":null},"institutions":[{"id":"https://openalex.org/I153230381","display_name":"Charles Sturt University","ror":"https://ror.org/00wfvh315","country_code":"AU","type":"education","lineage":["https://openalex.org/I153230381"]},{"id":"https://openalex.org/I4210130318","display_name":"Cooperative Research Centre for Mental Health","ror":"https://ror.org/03f37fg05","country_code":"AU","type":"facility","lineage":["https://openalex.org/I4210130318"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"M. Arif Khan","raw_affiliation_strings":["Charles Sturt University, Bathurst, NSW, 2795, Australia","Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles Sturt University, Bathurst, NSW, 2795, Australia","institution_ids":["https://openalex.org/I153230381"]},{"raw_affiliation_string":"Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia","institution_ids":["https://openalex.org/I4210130318"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5136017398","display_name":"Md Mahmudul Islam","orcid":null},"institutions":[{"id":"https://openalex.org/I153230381","display_name":"Charles Sturt University","ror":"https://ror.org/00wfvh315","country_code":"AU","type":"education","lineage":["https://openalex.org/I153230381"]},{"id":"https://openalex.org/I4210130318","display_name":"Cooperative Research Centre for Mental Health","ror":"https://ror.org/03f37fg05","country_code":"AU","type":"facility","lineage":["https://openalex.org/I4210130318"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Md Zahidul Islam","raw_affiliation_strings":["Charles Sturt University, Bathurst, NSW, 2795, Australia","Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Charles Sturt University, Bathurst, NSW, 2795, Australia","institution_ids":["https://openalex.org/I153230381"]},{"raw_affiliation_string":"Cyber Security Cooperative Research Centre, Kingston, ACT, 2600, Australia","institution_ids":["https://openalex.org/I4210130318"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5050531980"],"corresponding_institution_ids":["https://openalex.org/I153230381","https://openalex.org/I4210130318"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.83632385,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9876000285148621,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0017999999690800905,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ransomware","display_name":"Ransomware","score":0.941100001335144},{"id":"https://openalex.org/keywords/radar","display_name":"Radar","score":0.6265000104904175},{"id":"https://openalex.org/keywords/concept-drift","display_name":"Concept drift","score":0.5005999803543091},{"id":"https://openalex.org/keywords/data-stream","display_name":"Data stream","score":0.4194999933242798},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.3849000036716461},{"id":"https://openalex.org/keywords/replicate","display_name":"Replicate","score":0.33880001306533813}],"concepts":[{"id":"https://openalex.org/C2777667771","wikidata":"https://www.wikidata.org/wiki/Q926331","display_name":"Ransomware","level":3,"score":0.941100001335144},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7750999927520752},{"id":"https://openalex.org/C554190296","wikidata":"https://www.wikidata.org/wiki/Q47528","display_name":"Radar","level":2,"score":0.6265000104904175},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5303000211715698},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.5005999803543091},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.49639999866485596},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.43230000138282776},{"id":"https://openalex.org/C2778484313","wikidata":"https://www.wikidata.org/wiki/Q1172540","display_name":"Data stream","level":2,"score":0.4194999933242798},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.3849000036716461},{"id":"https://openalex.org/C2781162219","wikidata":"https://www.wikidata.org/wiki/Q26250693","display_name":"Replicate","level":2,"score":0.33880001306533813},{"id":"https://openalex.org/C89198739","wikidata":"https://www.wikidata.org/wiki/Q3079880","display_name":"Data stream mining","level":2,"score":0.31619998812675476},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3089999854564667},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3027999997138977},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2971000075340271},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.29600000381469727},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2865999937057495}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1186/s42400-025-00435-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00435-9","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00435-9.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:pure.atira.dk:publications/db634f01-dd3d-4888-9703-ea55d3defde5","is_oa":true,"landing_page_url":"https://researchoutput.csu.edu.au/en/publications/db634f01-dd3d-4888-9703-ea55d3defde5","pdf_url":null,"source":{"id":"https://openalex.org/S7407055442","display_name":"Charles Sturt University Research Output (CRO)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Ispahany, J, Islam, R, Deho, O, Khan, M A & Islam, Z 2026, 'RADAR: A realistic dataset for advancing ransomware detection', Journal of Cybersecurity, vol. 9, no. 1, 68. https://doi.org/10.1186/s42400-025-00435-9","raw_type":"info:eu-repo/semantics/publishedVersion"},{"id":"pmh:oai:doaj.org/article:b1e7968b60f549c2af07ef3db276d737","is_oa":false,"landing_page_url":"https://doaj.org/article/b1e7968b60f549c2af07ef3db276d737","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 9, Iss 1 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-025-00435-9","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-025-00435-9","pdf_url":"https://link.springer.com/content/pdf/10.1186/s42400-025-00435-9.pdf","source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320315885","display_name":"Australian Government","ror":"https://ror.org/0314h5y94"},{"id":"https://openalex.org/F4320321836","display_name":"Cooperative Research Centres, Australian Government Department of Industry","ror":"https://ror.org/04k59bg10"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7160986429.pdf","grobid_xml":"https://content.openalex.org/works/W7160986429.grobid-xml"},"referenced_works_count":57,"referenced_works":["https://openalex.org/W1525426144","https://openalex.org/W2118023920","https://openalex.org/W2626498001","https://openalex.org/W2750651073","https://openalex.org/W2765331456","https://openalex.org/W2784113120","https://openalex.org/W2800557391","https://openalex.org/W2843669218","https://openalex.org/W2885747980","https://openalex.org/W2887506070","https://openalex.org/W2915893383","https://openalex.org/W2954539634","https://openalex.org/W2963563709","https://openalex.org/W2988961468","https://openalex.org/W2991585564","https://openalex.org/W3003433587","https://openalex.org/W3013896538","https://openalex.org/W3014902384","https://openalex.org/W3015800066","https://openalex.org/W3039822732","https://openalex.org/W3040422908","https://openalex.org/W3080622597","https://openalex.org/W3099702369","https://openalex.org/W3127601194","https://openalex.org/W3165106224","https://openalex.org/W3178593045","https://openalex.org/W3197120839","https://openalex.org/W3201224956","https://openalex.org/W3202594349","https://openalex.org/W3203652228","https://openalex.org/W3205163562","https://openalex.org/W4200569302","https://openalex.org/W4214733430","https://openalex.org/W4214746841","https://openalex.org/W4214850595","https://openalex.org/W4288461328","https://openalex.org/W4312653795","https://openalex.org/W4316690373","https://openalex.org/W4316813679","https://openalex.org/W4327768002","https://openalex.org/W4367319959","https://openalex.org/W4382397550","https://openalex.org/W4384823681","https://openalex.org/W4384835155","https://openalex.org/W4386033761","https://openalex.org/W4386838013","https://openalex.org/W4386996799","https://openalex.org/W4389332030","https://openalex.org/W4389454898","https://openalex.org/W4390673835","https://openalex.org/W4391877129","https://openalex.org/W4394893882","https://openalex.org/W4396712725","https://openalex.org/W4396853080","https://openalex.org/W4398199982","https://openalex.org/W4402775759","https://openalex.org/W6907130120"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Ransomware":[1],"threats":[2],"are":[3],"growing":[4],"in":[5,155,177],"frequency":[6],"and":[7,37,56,70,85,104,111,123,139,209],"severity,":[8],"posing":[9],"significant":[10],"challenges":[11],"to":[12,52,87,128,193],"cybersecurity":[13],"defences.":[14],"Machine":[15],"learning":[16,181],"(ML)":[17],"has":[18,41],"gained":[19],"attention":[20],"as":[21,97],"a":[22,48,98,148,202],"promising":[23],"tool":[24],"for":[25,35,151,205,213],"detecting":[26],"ransomware,":[27,145],"but":[28],"the":[29,75,89,130,141,186],"lack":[30],"of":[31,77,92,101,132,144,163,188],"realistic":[32,106,149],"ransomware":[33,58,68,197,215],"datasets":[34,79],"training":[36],"evaluating":[38,152],"ML":[39,153,207],"models":[40,154],"limited":[42],"progress.":[43],"This":[44,199],"paper":[45],"introduces":[46],"RADAR,":[47],"comprehensive":[49],"dataset":[50,115],"designed":[51],"address":[53,195],"this":[54],"challenge":[55],"advance":[57],"detection.":[59,216],"With":[60],"over":[61],"400,000":[62],"system":[63,102],"events":[64,103],"from":[65,120],"seven":[66],"prominent":[67],"families":[69],"benign":[71],"activities,":[72],"RADAR":[73,94,146,164],"overcomes":[74],"limitations":[76],"existing":[78],"that":[80,157],"rely":[81],"on":[82],"outdated":[83],"samples":[84],"fail":[86],"capture":[88],"evolving":[90,196],"nature":[91,143],"ransomware.":[93],"is":[95,165],"structured":[96],"continuous":[99],"stream":[100],"incorporates":[105],"scenarios,":[107],"including":[108],"data":[109,137],"drift":[110,138],"class":[112],"imbalance.":[113],"The":[114,161,183],"features":[116,127],"48":[117],"attributes":[118],"extracted":[119],"Sysmon":[121],"logs":[122],"19":[124],"additional":[125],"engineered":[126],"improve":[129],"analysis":[131],"behavioural":[133],"patterns.":[134],"By":[135],"simulating":[136],"reflecting":[140],"minority-class":[142],"provides":[147],"environment":[150],"conditions":[156],"replicate":[158],"real-world":[159],"operations.":[160],"utility":[162],"demonstrated":[166],"through":[167],"an":[168,172,178],"experimental":[169],"framework":[170],"using":[171],"adaptive":[173],"random":[174],"forest":[175],"algorithm":[176],"online":[179],"incremental":[180],"setting.":[182],"results":[184],"underscore":[185],"importance":[187],"continually":[189],"adapting":[190],"detection":[191],"methods":[192,212],"effectively":[194],"threats.":[198],"research":[200],"lays":[201],"solid":[203],"foundation":[204],"improving":[206],"algorithms":[208],"fostering":[210],"innovative":[211],"real-time":[214]},"counts_by_year":[],"updated_date":"2026-06-01T08:46:32.239190","created_date":"2026-05-14T00:00:00"}