Cybersecurity Incident Detection (IDs) Using Machine Learning

Rehan Raja; Hiba Saleem; Shayan Ahmad; Mohd Arslaan; Nida Khan

doi:10.55524/ijircst.2025.13.3.4

Abstract

Machine learning (ML) has emerged as a transformative tool in cybersecurity, particularly for automating threat detection processes that traditionally depend on manual analysis. By leveraging algorithms such as convolutional neural networks (CNNs), support vector machines (SVMs), and Bayesian classifiers, ML enables more efficient identification of malicious activities compared to human-driven approaches. However, the application of ML in security contexts faces distinct challenges, including adversarial evasion tactics and the need for interpretable decision-making frameworks. Recent advancements focus on extracting latent patterns from network traffic data to train adaptive models capable of preempting attacks like ransomware and advanced persistent threats (APTs). This review evaluates ML-driven methodologies for securing digital infrastructures, analyzing their efficacy against modern cyberattacks, and addressing limitations such as dataset bias and concept drift. Furthermore, it investigates shifts in attack vectors over the past decade, offering insights into how data-driven models can counteract evolving malware strategies that endanger global networked systems.

Keywords

Cybersecurity; Threads Detection; Machine Learning; Incident Detection; Classification; Anomaly Detection.

References

V. Thapliyal and P. Thapliyal, "Machine Learning for Cybersecurity: Threat Detection, Prevention, and Response," Darpan International Research Analysis, vol. 12, no. 1, pp. 1-7, 2024. Available from: https://doi.org/10.36676/dira.v12.i1.01
N. G. Camacho, "The Role of AI in Cybersecurity: Addressing Threats in the Digital Age," Journal of Artificial Intelligence General Science (JAIGS), vol. 3, no. 1, pp. 143-154, 2024. Available from: https://doi.org/10.60087/jaigs.v3i1.75
M. Ahsan, R. Gomes, J. F. Connolly, N. Rifat, K. E. Nygard, and M. M. Chowdhury, "Cybersecurity Threats and Their Mitigation Approaches Using Machine Learning—A Review," Journal of Cybersecurity, 2022. Available from: https://doi.org/10.3390/jcp2030027
S. Saeed et al., "A Systematic Literature Review on Cyber Threat Intelligence for Organizational Cybersecurity Resilience," Sensors, vol. 23, no. 16, p. 7273, 2023. Available from: https://doi.org/10.3390/s23167273
M. Joye and G. Neven, Identity-Based Cryptography, vol. 2, IOS Press, Amsterdam, The Netherlands, 2009.Available from: https://shorturl.at/qAMgS
N. Gisin, G. Ribordy, W. Tittel, and H. Zbinden, "Quantum cryptography," Rev. Mod. Phys., vol. 74, p. 145, 2002. Available from: https://doi.org/10.1103/RevModPhys.74.145
C. C. Zou, D. Towsley, and W. Gong, "A Firewall Network System for Worm Defense in Enterprise Networks," University of Massachusetts, Amherst, MA, USA, Tech. Rep. TR-04-CSE-01, 2004. Available from: https://shorturl.at/QByEQ
V. Corey, C. Peterman, S. Shearin, M. S. Greenberg, and J. Van Bokkelen, "Network forensics analysis," IEEE Internet Comput., vol. 6, no. 6, pp. 60-66, 2002. Available from: https://en.wikipedia.org/wiki/Network_forensics
V. C. Hu, D. Ferraiolo, and D. R. Kuhn, "Assessment of Access Control Systems," US Department of Commerce, National Institute of Standards and Technology, Gaithersburg, MD, USA, 2006.
S. A. Alawadhi, B. J. A. Ali, A. Zowayed, M. A. Khder, and H. Abdulla, "Impact of Artificial Intelligence on Information Security in Business," pp. 437-442, Jun. 2022. Available from: https://doi.org/10.1109/ICETSIS55481.2022.9888871
N. Thamer and R. Alubady, "A Survey of Ransomware Attacks for Healthcare Systems: Risks, Challenges, Solutions and Opportunity of Research," pp. 210-216, Apr. 2021. Available from: https://doi.org/10.1109/BICITS51482.2021.9509877
M. Alsharif, M. Alshehri, and S. Mishra, "Impact of Human Vulnerabilities on Cybersecurity," Computer Systems Science and Engineering, vol. 40, no. 3, pp. 1153-1166, Jan. 2022. Available from: https://doi.org/10.32604/csse.2022.019938
S. Kamil, H. S. A. Siti Norul, O. L. Usman, and A. Firdaus, "The Rise of Ransomware: A Review of Attacks, Detection Techniques, and Future Challenges," vol. 22, pp. 1-7, Feb. 2022. Available from: https://doi.org/10.1109/ICBATS54253.2022.9759000
C. Nobles, “Botching Human Factors in Cybersecurity in Business Organizations,” HOLISTICA – Journal of Business and Public Administration, vol. 9, no. 3, pp. 71–88, Dec. 2018, Available from: http://dx.doi.org/10.2478/hjbpa-2018-0024
“Cyber Security Threats and Countermeasures in Digital Age,” Journal of Applied Science and Education (JASE), vol. 4, no. 1, pp. 1–20, Jan. 2024, Available from: https://doi.org/10.54060/a2zjournals.jase.42
B. Pranggono and A. Arabo, “COVID?19 pandemic cybersecurity issues,” Internet Technology Letters, vol. 4, no. 2, Oct. 2020, Available from: https://doi.org/10.1002/itl2.247
S. Saeed, M. S. Al-Ghamdi, H. Al-Muhaisen, A. M. Almuhaideb, and S. A. Suayyid, “A A systematic Literature Review on Cyber Threat Intelligence for Organizational Cybersecurity Resilience.,” Sensors, vol. 23, no. 16, p. 7273, Aug. 2023, Available from: https://doi.org/10.3390/s23167273
B. Singh and C. Kaunert, “Intelligent Machine Learning Solutions for Cybersecurity,” igi global, 2024, pp. 359–386. Available from: https://doi.org/10.4018/979-8-3693-5380-6.ch014
L. Flower, “Doing Loyalty: Defense Lawyers’ Subtle Dramas in the Courtroom,” Journal of Contemporary Ethnography, vol. 47, no. 2, pp. 226–254, May 2016, Available from: https://doi.org/10.1177/0891241616646826
I. Schoultz and J. Flyghed, “Performing unbelonging in court. Observations from a transnational corporate bribery trial\u2014a dramaturgical approach,” Crime, Law and Social Change, vol. 77, no. 3, pp. 321–340, Oct. 2021, Available from: https://doi.org/10.1007/s10611-021-09990-x
S. B. Goyal, R. K. Solanki, A. S. Rajawat, M. A. Majmi Zaaba, and Z. A. Long, “Integrating AI With Cyber Security for Smart Industry 4.0 Application,” Apr. 2023, vol. 54, pp. 1223 1232. Available from: https://doi.org/10.1109/icict57646.2023.10134374
I. H. Sarker, “Multi?aspects AI?based modeling and adversarial learning for cybersecurity intelligence and robustness: A comprehensive overview,” SECURITY AND PRIVACY, vol. 6, no. 5, Jan. 2023, Available from: https://doi.org/10.1002/spy2.295
I. H. Sarker, S. Badsha, P. Watters, A. Ng, H. Alqahtani, and A. S. M. Kayes, “Cybersecurity data science: an overview from machine learning perspective,” Journal of Big Data, vol. 7, no. 1, Jul. 2020, Available from: https://doi.org/10.1186/s40537-020-00318-5
L. F. Sikos, “Cybersecurity knowledge graphs,” Knowledge and Information Systems, vol. 65, no. 9, pp. 3511–3531, Apr. 2023, Available from: https://doi.org/10.1007/s10115-023-01860-3
D. Jonas, N. Aprila Yusuf, and A. Rahmania Az Zahra, “Enhancing Security Frameworks with Artificial Intelligence in Cybersecurity,” International Transactions on Education Technology (ITEE), vol. 2, no. 1, pp. 83–91, Nov. 2023, Available from: https://doi.org/10.33050/itee.v2i1.428
KDD Cup 1999 Data. Available from: http://kdd.ics.uci.edu/databases/kddcup99/kddcup99.html
Traffic Data from Kyoto University’s Honeypots. Available from: http://www.takakura.com/Kyoto_data/
Stanford Large Network Dataset Collection. Available from: https://snap.stanford.edu/data/index.html
IMPACT. (accessed on 10 March 2025). Available from: https://www.impactcybertrust.org/
C. Thomas, V. Sharma, and N. Balakrishnan, "Usefulness of DARPA dataset for intrusion detection system evaluation," in Data Mining, Intrusion Detection, Information Assurance, and Data Networks Security 2008, vol. 6973, pp. 164–171, SPIE, Mar. 2008.. Available from: https://shorturl.at/aLkEa
SL-KDD|Datasets|Research|Canadian Institute for Cybersecurity|UNB. (accessed on 10 March 2025). Available from: https://www.unb.ca/cic/datasets/nsl.html
ADFA IDS Datasets|UNSW Research. (accessed on 10 March 2025). Available from: https://research.unsw.edu.au/projects/adfa-ids-datasets
The UNSW-NB15 Dataset|UNSW Research. (accessed on 10 March 2025). Available from: https://research.unsw.edu.au/projects/unsw-nb15-dataset
MAWI Working Group Traffic Archive. (accessed on 10 March 2025). Available from: https://mawi.wide.ad.jp/mawi/
CAIDA Data—Completed Datasets—CAIDA. (accessed on 10 March 2025). Available from: https://www.caida.org/catalog/datasets/completed-datasets/
L. Yang, A. Ciptadi, I. Laziuk, A. Ahmadzadeh, and G. Wang, "BODMAS: An open dataset for learning based temporal analysis of PE malware," in 2021 IEEE Security and Privacy Workshops (SPW), Virtual, May 2021, pp. 78-84. Available from: https://doi.org/10.1109/SPW53761.2021.00020
P. S. Keila and D. B. Skillicorn, "Structure in the Enron Email Dataset," Computational & Mathematical Organization Theory, vol. 11, pp. 183-199, 2005. Available from: https://doi.org/10.1007/s10588-005-5379-y
Arp, D.; Spreitzenbarth, M.; Hübner, M.; Gascon, H.; Rieck, K. Drebin: Effective and Explainable Detection of Android Malware in Your Pocket. In Proceedings of the NDSS’14, San Diego, CA, USA, 23–26 February 2014. Available from: https://shorturl.at/tY5D9

Cites this article as

R. Raja, H. Saleem, S. Ahmad, M. Arslaan, N. Khan, "Cybersecurity Incident Detection (IDs) Using Machine Learning", International Journal of Innovative Research in Computer Science and Technology (IJIRCST), Vol-13, Issue-3, Page No-15-25, 2025. Available from: https://doi.org/10.55524/ijircst.2025.13.3.4

Corresponding Author

Rehan Raja

B.Tech Scholar, Department of Computer Science & Engineering, Integral University, Lucknow, India

Download Full Paper

Download PDF

No. of Downloads: 44 | No. of Views: 2400

Handwritten Notes Digitization and Multilingual Summarization Using OCR and Generative AI

Suchetha N V, Anisha Upadhayaya H S, Anushree U Rao, H N Swati, Mallana Gowda G S.

January 2026 - Vol 14, Issue 1
AgriPulse: Smart Grain Storage System

Dhawal Jain, Omkar S, Pragathi, Sanidhya M Jain, Vishal Raju Angadi.

January 2026 - Vol 14, Issue 1
Generation of Human Faces Using Generative Adversarial Network

Supritha P O, Prajwal, Saikumar Laxman Pujari, Siddartha R, Adarsh Shendage.

January 2026 - Vol 14, Issue 1

Cybersecurity Incident Detection (IDs) Using Machine Learning

Citations

Download Full Paper PDF

Total View 2400

Total Download 44