{"id":"https://openalex.org/W4407702546","doi":"https://doi.org/10.3390/fi17020093","title":"Beyond Firewall: Leveraging Machine Learning for Real-Time Insider Threats Identification and User Profiling","display_name":"Beyond Firewall: Leveraging Machine Learning for Real-Time Insider Threats Identification and User Profiling","publication_year":2025,"publication_date":"2025-02-18","ids":{"openalex":"https://openalex.org/W4407702546","doi":"https://doi.org/10.3390/fi17020093"},"language":"en","primary_location":{"id":"doi:10.3390/fi17020093","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi17020093","pdf_url":"https://www.mdpi.com/1999-5903/17/2/93/pdf?version=1739850955","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/1999-5903/17/2/93/pdf?version=1739850955","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5093774940","display_name":"Saif Al-Dean Qawasmeh","orcid":"https://orcid.org/0009-0004-4793-158X"},"institutions":[{"id":"https://openalex.org/I35777872","display_name":"North Carolina Agricultural and Technical State University","ror":"https://ror.org/02aze4h65","country_code":"US","type":"education","lineage":["https://openalex.org/I35777872"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Saif Al-Dean Qawasmeh","raw_affiliation_strings":["Department of Applied Science and Technology, North Carolina Agricultural and Technical State University, Greensboro, NC 27411, USA"],"raw_orcid":"https://orcid.org/0009-0004-4793-158X","affiliations":[{"raw_affiliation_string":"Department of Applied Science and Technology, North Carolina Agricultural and Technical State University, Greensboro, NC 27411, USA","institution_ids":["https://openalex.org/I35777872"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5083471183","display_name":"Ali Abdullah S. AlQahtani","orcid":"https://orcid.org/0000-0002-8225-4180"},"institutions":[{"id":"https://openalex.org/I142024983","display_name":"Prince Sultan University","ror":"https://ror.org/053mqrf26","country_code":"SA","type":"education","lineage":["https://openalex.org/I142024983"]}],"countries":["SA"],"is_corresponding":true,"raw_author_name":"Ali Abdullah S. AlQahtani","raw_affiliation_strings":["Department of Software Engineering (Cybersecurity Track), Prince Sultan University, Riyadh 12435, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-8225-4180","affiliations":[{"raw_affiliation_string":"Department of Software Engineering (Cybersecurity Track), Prince Sultan University, Riyadh 12435, Saudi Arabia","institution_ids":["https://openalex.org/I142024983"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5083471183"],"corresponding_institution_ids":["https://openalex.org/I142024983"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1782},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1782},"fwci":4.1092,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.93631522,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":99},"biblio":{"volume":"17","issue":"2","first_page":"93","last_page":"93"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9993000030517578,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8959414958953857},{"id":"https://openalex.org/keywords/firewall","display_name":"Firewall (physics)","score":0.7922651171684265},{"id":"https://openalex.org/keywords/profiling","display_name":"Profiling (computer programming)","score":0.7748208045959473},{"id":"https://openalex.org/keywords/insider-threat","display_name":"Insider threat","score":0.740942120552063},{"id":"https://openalex.org/keywords/insider","display_name":"Insider","score":0.642309308052063},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5579737424850464},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.23427748680114746},{"id":"https://openalex.org/keywords/entropy","display_name":"Entropy (arrow of time)","score":0.09379252791404724}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8959414958953857},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.7922651171684265},{"id":"https://openalex.org/C187191949","wikidata":"https://www.wikidata.org/wiki/Q1138496","display_name":"Profiling (computer programming)","level":2,"score":0.7748208045959473},{"id":"https://openalex.org/C2776633304","wikidata":"https://www.wikidata.org/wiki/Q6038026","display_name":"Insider threat","level":3,"score":0.740942120552063},{"id":"https://openalex.org/C2778971194","wikidata":"https://www.wikidata.org/wiki/Q1664551","display_name":"Insider","level":2,"score":0.642309308052063},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5579737424850464},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.23427748680114746},{"id":"https://openalex.org/C106301342","wikidata":"https://www.wikidata.org/wiki/Q4117933","display_name":"Entropy (arrow of time)","level":2,"score":0.09379252791404724},{"id":"https://openalex.org/C17744445","wikidata":"https://www.wikidata.org/wiki/Q36442","display_name":"Political science","level":0,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0},{"id":"https://openalex.org/C183915046","wikidata":"https://www.wikidata.org/wiki/Q1316152","display_name":"Charged black hole","level":4,"score":0.0},{"id":"https://openalex.org/C104062141","wikidata":"https://www.wikidata.org/wiki/Q2601295","display_name":"Extremal black hole","level":3,"score":0.0},{"id":"https://openalex.org/C199539241","wikidata":"https://www.wikidata.org/wiki/Q7748","display_name":"Law","level":1,"score":0.0},{"id":"https://openalex.org/C62520636","wikidata":"https://www.wikidata.org/wiki/Q944","display_name":"Quantum mechanics","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/fi17020093","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi17020093","pdf_url":"https://www.mdpi.com/1999-5903/17/2/93/pdf?version=1739850955","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:15dfde9ae67c4d09a1ba2398a557d9c7","is_oa":true,"landing_page_url":"https://doaj.org/article/15dfde9ae67c4d09a1ba2398a557d9c7","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Future Internet, Vol 17, Iss 2, p 93 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/fi17020093","is_oa":true,"landing_page_url":"https://doi.org/10.3390/fi17020093","pdf_url":"https://www.mdpi.com/1999-5903/17/2/93/pdf?version=1739850955","source":{"id":"https://openalex.org/S34838331","display_name":"Future Internet","issn_l":"1999-5903","issn":["1999-5903"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Internet","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4407702546.pdf","grobid_xml":"https://content.openalex.org/works/W4407702546.grobid-xml"},"referenced_works_count":69,"referenced_works":["https://openalex.org/W1458873377","https://openalex.org/W1859925930","https://openalex.org/W2553160602","https://openalex.org/W2582257950","https://openalex.org/W2783047817","https://openalex.org/W2887799638","https://openalex.org/W2899653275","https://openalex.org/W2910314742","https://openalex.org/W2911505293","https://openalex.org/W2922226136","https://openalex.org/W2923501234","https://openalex.org/W2958285686","https://openalex.org/W2976051608","https://openalex.org/W2979948793","https://openalex.org/W2990412120","https://openalex.org/W2990528700","https://openalex.org/W2997439297","https://openalex.org/W2998566746","https://openalex.org/W3000429356","https://openalex.org/W3002827238","https://openalex.org/W3014071235","https://openalex.org/W3081308505","https://openalex.org/W3092155847","https://openalex.org/W3092236329","https://openalex.org/W3102089875","https://openalex.org/W3129768586","https://openalex.org/W3133740671","https://openalex.org/W3153493802","https://openalex.org/W3158536712","https://openalex.org/W3160841033","https://openalex.org/W3184866730","https://openalex.org/W3202156390","https://openalex.org/W3208604243","https://openalex.org/W3216768217","https://openalex.org/W4205519045","https://openalex.org/W4205860452","https://openalex.org/W4206015085","https://openalex.org/W4206409835","https://openalex.org/W4225304567","https://openalex.org/W4300962606","https://openalex.org/W4309640167","https://openalex.org/W4309939034","https://openalex.org/W4313116287","https://openalex.org/W4321510606","https://openalex.org/W4375928287","https://openalex.org/W4383751149","https://openalex.org/W4383889282","https://openalex.org/W4384557563","https://openalex.org/W4385731184","https://openalex.org/W4386160489","https://openalex.org/W4386715559","https://openalex.org/W4390013300","https://openalex.org/W4390343272","https://openalex.org/W4390528436","https://openalex.org/W4391759517","https://openalex.org/W4392379942","https://openalex.org/W4392406063","https://openalex.org/W4392716258","https://openalex.org/W4399886286","https://openalex.org/W4400977268","https://openalex.org/W4401017301","https://openalex.org/W6760679213","https://openalex.org/W6770272141","https://openalex.org/W6772385473","https://openalex.org/W6782109787","https://openalex.org/W6845024859","https://openalex.org/W6854147871","https://openalex.org/W6860958213","https://openalex.org/W7002326743"],"related_works":["https://openalex.org/W2766781562","https://openalex.org/W4205304595","https://openalex.org/W2792608345","https://openalex.org/W2979782961","https://openalex.org/W308359497","https://openalex.org/W1499596878","https://openalex.org/W3136170567","https://openalex.org/W2947769183","https://openalex.org/W26305611","https://openalex.org/W4399147188"],"abstract_inverted_index":{"Insider":[0],"threats":[1,34],"pose":[2],"a":[3,41,72],"significant":[4],"challenge":[5],"to":[6,11,29],"organizational":[7],"cybersecurity,":[8],"often":[9],"leading":[10],"catastrophic":[12],"financial":[13],"and":[14,22,31,64],"reputational":[15],"damages.":[16],"Traditional":[17],"tools":[18],"such":[19],"as":[20,85],"firewalls":[21],"antivirus":[23],"systems":[24],"lack":[25],"the":[26,55,86],"sophistication":[27],"needed":[28],"detect":[30],"mitigate":[32],"these":[33],"in":[35],"real":[36],"time.":[37],"This":[38],"paper":[39],"introduces":[40],"machine":[42,79],"learning-based":[43],"system":[44,68],"that":[45],"integrates":[46],"real-time":[47],"anomaly":[48],"detection":[49],"with":[50,82],"dynamic":[51],"user":[52],"profiling,":[53],"enabling":[54],"classification":[56],"of":[57,61],"employees":[58],"into":[59],"categories":[60],"low,":[62],"medium,":[63],"high":[65],"risk.":[66],"The":[67],"was":[69],"validated":[70],"using":[71],"synthetic":[73],"dataset,":[74],"achieving":[75],"exceptional":[76],"accuracy":[77],"across":[78],"learning":[80],"models,":[81],"XGBoost":[83],"emerging":[84],"most":[87],"effective.":[88]},"counts_by_year":[{"year":2026,"cited_by_count":3},{"year":2025,"cited_by_count":3}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}