DEEP LEARNING FOR BEHAVIORAL INSIDER THREAT DETECTION

Insider threats remain a persistent challenge in cybersecurity, as malicious or negligent insiders exploit legitimate access to compromise systems and data. This study presents a bibliometric review of 325 peer-reviewed publications from 2015 to 2025 to examine how machine learning (ML) and deep learning (DL) techniques for insider threat detection have evolved. The analysis investigates temporal publication trends, influential authors, international collaboration networks, thematic shifts, and algorithmic preferences. Results show a steady rise in research output and a transition from traditional ML models, such as decision trees and random forests, toward advanced DL methods, including long short-term memory (LSTM) networks, autoencoders, and hybrid ML–DL frameworks. Co-authorship mapping highlights China, India, and the United States as leading contributors, while keyword analysis underscores the increasing focus on behavior-based and eXplainable AI models. Symmetry emerges as a central theme, reflected in balancing detection accuracy with computational efficiency, and minimizing false positives while avoiding false negatives. The study recommends adaptive hybrid architectures, particularly Bidirectional LSTM–Variational Auto-Encoder (BiLSTM-VAE) models with eXplainable AI, as promising solutions that restore symmetry between detection accuracy and transparency, strengthening both technical performance and organizational trust.

Enhancing false negative and positive rates for efficient insider threat detection

Organizations’ own personnel now have a greater ability than ever before to misuse their access to critical organizational assets. Insider threat detection is a key component in identifying rare anomalies in context, which is a growing concern for many organizations. Existing perimeter security mechanisms are proving to be ineffective against insider threats. As a prospective filter for the human analysts, a new deep learning based insider threat detection method that uses the Dempster-Shafer theory is proposed to handle both accidental as well as intentional insider threats via organization’s channels of communication in real time. The long short-term memory (LSTM) architecture together with multi-head attention mechanism is applied in this work to detect anomalous network behavior patterns. Furthermore, belief is updated with Dempster’s conditional rule and utilized to fuse evidence to achieve enhanced prediction. The CERT Insider Threat Dataset v6.2 is used to train the behavior model. Through performance evaluation, our proposed method is proven to be effective as an insider threat detection technique.

Wearable electroencephalography (EEG) devices for seizure detection accuracy and reliability are deep learning (DL) applications in the field of epilepsy diagnosis. In this study, we sought to increase the accuracy of seizure detection using advanced DL algorithms on the Children’s Hospital Boston - Massachusetts Institute of Technology (CHB-MIT) EEG database. First, a fully convolutional network (FCN) was trained and assessed using accuracy and recall/precision metrics, and the early stopping technique was used to avoid overfitting. To assess the performance, the FCN was evaluated in terms of various metrics, including accuracy, precision, recall, F1-score, and receiver operating characteristic (ROC)-area under the curve (AUC). In addition, two-dimensional (2D) convolutional neural networks (CNNs) and long short-term memory (LSTM) models were used to model the database, and their performance was thoroughly measured using different metrics, graphs, and confusion matrices. Using LSTM variants, such as standard LSTM, bidirectional LSTM, stacked LSTM, and LSTM attention mechanisms, hybrid convolutional LSTM (ConvLSTM) models were trained and compared. The comparison was conducted based on the training and validation accuracy and loss, as well as the graphs resulting from the precision–recall curves. Apart from DL approaches, EEG signal analysis using time–frequency techniques, such as wavelet transform and short-time Fourier transform, has also been investigated. These methods assisted in the analysis of the time–frequency features of EEG signals in combination with DL models. This study demonstrates that the performance of wearable EEG devices can be augmented using a combination of DL and seizure signal processing techniques. The FCN achieved an accuracy of 92%, with a recall for seizures of 33%, an F1-score of 0.03, and strong ROC-AUC results. The 2D CNN achieved 96% accuracy, a seizure recall of 70%, an F1-score of 0.12, and an ROC-AUC score of 78%. The baseline LSTM struggled with effectiveness at 53% accuracy with a seizure recall of 18%. In contrast, the LSTM model, which incorporated synthetic minority oversampling technique (SMOTE) balancing, was able to reach improvements of up to 89% accuracy, with a precision of 91%, a recall of 86%, an F1-score of 0.89, and a strong ROC curve performance. Among the models, the LSTM with SMOTE was the best performer, with 89% accuracy, 91% precision, 86% recall, and an F1-score of 0.89. These results provide evidence that applying techniques for data balancing in combination with certain DL network architectures significantly improves the detection of seizures using wearable EEG devices worn on the body. We believe that real-time monitoring and high-performance systems are feasible using optimized DL frameworks. The analysis of the performance of different models allows for the understanding of the possibilities of optimizing the architectures of DL algorithms for the modern diagnosis of epilepsy in real time. The source code used to carry out the experiments is publicly available at CHB-MIT EEG Dataset Python Scripts (https://www.kaggle.com/code/adnankust/adnaneeg1).

Recently, deep neural networks (DNNs) have been widely studied and achieved tremendous success in a variety of real-world applications, such as computer vision, natural language processing, medical diagnosis, and machine translation. Deep reinforcement learning (DRL), as an emerging powerful deep learning technique, combines DNNs with reinforcement learning into an interactive system that enables the agent to learn the best policy from the environment to optimize their rewards. DRL opens up many new applications in domains such as healthcare, robotics, and smart grids. With the rapid evolution of IT infrastructures, cloud computing has been witnessed as the most common computing paradigm. The underlying infrastructure of cloud computing relies on a large amount of data centers. Nowadays, with the fast development of communication technologies, such as 5G, cloud computing is now evolving into yet another new paradigm called edge computing, providing for emerging applications, especially in the Internet-of-Things. The energy efficiency issue from both "cloud" and "edge" are becoming more crucial and calls for more attention. To solve the real-world energy efficiency problems, we take advantage of the deep learning and deep reinforcement learning techniques for efficient modeling of both "edge" and "cloud" applications. On the "edge" side, wearable technologies and the Internet of Things (IoT) are becoming increasingly popular in both personal and commercial applications with the employment of the embedded system technologies. Non-Volatile Processors (NVPs) have been proposed for the intermittent power supply problem, to ensure the instant on/off for embedded systems under the unstable power supply. We proposed neural network-based prediction techniques to derive the best power extraction policy and converter parameters optimization technique for NVPs. In cloud computing, we formulated a novel optimal power management problem of data centers to minimize the total cost by proposing the long short term memory (LSTM) neural network-based method for the prediction of future data center power consumption, and further we presented a novel DRL-based hierarchical framework for solving the overall resource allocation and power management problem in cloud computing systems. Furthermore, we explored the effectiveness of the DRL-based framework for high dimensional action and state spaces problem-dynamic treatment regimes, to model real-life complexity in heterogeneous disease progression and treatment choices, to provide doctors and patients the data-driven personalized decision recommendations. Last but not least, we explored the efficiency of deep neural networks. Structured weight pruning is a representative model compression technique of DNNs to reduce both the storage and computation requirements and meanwhile accelerate inference. An automatic hyperparameter determination process is necessary due to a large number of flexible hyperparameters. We propose an automatic structured pruning framework to compress the DNNs. Our framework outperforms the prior works on automatic model compression by up to 33× in pruning rate (120× reduction in the actual parameter count) under the same accuracy. Significant inference speedup has been observed from the proposed framework on actual measurements on the smartphone.

A new intelligent multilayer framework for insider threat detection

In today’s digital world, increase of Fake News rapidly spreads substantial threats to both the public and individuals, emphasizing the crucial necessity for better-quality News Authenticity confirmation. This study gives a summary of some of the detection of bogus news using a Deep Learning (DL) technique and classification-based authenticity prediction techniques that to a large extent applied in several ways to news detection applications. Fake?True News Detection is currently a hard subject that is attracting investigation due to its detrimental effects on society. Deep Learning is employed in the crucial and often-used field of Fake News classification. Due to its excellent classification accuracy, the DL based approach has been widely used in the classification of news. Neural Network based – Convolutional Neural Networks (CNN), Recurrent Neural Network (RNN), Long Short Term Memory (LSTM), Generative Adversarial Networks (GAN), Hierarchical Attention Network (HAN), and Graph-based CNN (GCN) are some of the Deep Learning approaches that have been taken into consideration in our study and are used for developing a variety of News Detection methods. The study also includes comparative studies on a few news detection and classification methods that have been used to various Fake News prediction issues.

In this paper, we develop a method based on a deep learning method in financial market prediction, which includes BRICS economies as the test cases. Financial markets are rife with volatility that is affected by a "bed of complexity," coddled by local and distal factors. To leverage these vast datasets both deep learning models such as Convolutional Neural Networks (CNNs), Long Short Term Memory (LSTM) networks as well as hybrid architectures are used in this study. The paper evaluates the predictive accuracy of the models, and by so doing, identifies their strengths in predicting temporal dependencies and intricate market patterns. In particular, deep learning techniques are applied to case studies of individual countries in the BRICS to highlight the application of deep learning to disparate country specific problems, such as liquidity crises and market shocks. These findings show that classical statistical methods are outperformed by deep learning systems in a precise and reliable financial forecasting. This research highlights the ability of AI driven systems to change financial decision making processes, improving investor confidence and improving economic stability in BRICS nations. This study also readers the value of deep learning in financial market analysis, especially in economies in the developing countries. Application of techniques and architectures e.g. Convolutional Neural Networks (CNNs) that excel at identifying spatial patterns, and Long Short-Term Memory (LSTM) networks renowned for their prowess on sequential and time series data, for real world market prediction are explained. In addition, the research discusses hybrid architectures which extend knowledge, fusing strengths of both architectures to improve prediction accuracy and how deep learning develops to solve particular financial challenges. Through reading these notes readers get exposed to data preprocessing techniques such as normalization and feature selection which are important for boosting deep learning performance. The paper also includes an introduction to the evaluation of models using MSE and R-squared values for validating them in terms of reliable outputs. This research combines deep learning theory and practical case study to offer a useful educational resource for students, researchers, and practitioners who want to apply AI in financial forecasting in complex and dynamic global markets.

In recent years, machine learning and Deep Learning have increased and gathered epic success in traditional application domains and new areas of Artificial Intelligence. The performance using Deep Learning has dominated experimental results compared to conventional machine learning algorithms. This paper presents an overview of the progress that has occurred in Deep Learning (DL) concerning some application domains like Autonomous Driving, Healthcare, Voice Recognition, Image Recognition, Advertising, Predicting Natural Calamities, National Stock Exchange and many more. Additionally, deeper insights into several Deep Learning techniques, their working principles, and experimental results are scrutinized. The survey covers Convolutional Neural Network (CNN), Recurrent Neural Network (RNN), including Long Short-Term Memory (LSTM) and Gated Recurrent Units (GRU), Auto-Encoder (AE), Deep Belief Network (DBN), Generative Adversarial Network (GAN), and Deep Reinforcement Learning (DRL).

Deepfakes, which are synthetic media realistic in nature generated using artificial intelligence (AI); pose a significant threat to individuals and society. The rapid advancement of deepfake technology has led to the creation of highly realistic synthetic content covering images, videos, audio, and news. While deepfake applications offer creative possibilities, their misuse for misinformation, identity fraud, and cybersecurity threats necessitates robust detection methods. Deepfake crimes are rising daily, wherein deepfake media detection has become a big challenge and has high claim in digital forensics. This review explores the state-of-the-art deep learning (DL) techniques for deepfake detection of four parameters, namely images, videos, audio, and news. The ML approaches rely on handcrafted features but struggle with evolving deepfake methods. In contrast, DL techniques, such as Convolutional Neural Networks (CNNs) and Long Short-Term Memory (LSTM) networks, have demonstrated superior detection accuracy by learning discriminative features. Even Recurrent Neural Networks (RNNs), and Transformer-based architectures like Bidirectional encoder representations from transformers (BERT), have demonstrated superior accuracy in identifying manipulated content. Furthermore, recent advancements such as Vision Transformers (ViTs) and Explainable AI (XAI) models are enhancing detection interpretability and robustness. This review highlights the future research directions for strengthening deepfake detection mechanisms. The rapid advancements in deepfake generation necessitate continuous research and development of countermeasures.

PurposeThe purpose of this paper is to analyze and build a deep learning model that can furnish statistics of COVID-19 and is able to forecast pandemic outbreak using Kaggle open research COVID-19 data set. As COVID-19 has an up-to-date data collection from the government, deep learning techniques can be used to predict future outbreak of coronavirus. The existing long short-term memory (LSTM) model is fine-tuned to forecast the outbreak of COVID-19 with better accuracy, and an empirical data exploration with advanced picturing has been made to comprehend the outbreak of coronavirus.Design/methodology/approachThis research work presents a fine-tuned LSTM deep learning model using three hidden layers, 200 LSTM unit cells, one activation function ReLu, Adam optimizer, loss function is mean square error, the number of epochs 200 and finally one dense layer to predict one value each time.FindingsLSTM is found to be more effective in forecasting future predictions. Hence, fine-tuned LSTM model predicts accurate results when applied to COVID-19 data set.Originality/valueThe fine-tuned LSTM model is developed and tested for the first time on COVID-19 data set to forecast outbreak of pandemic according to the authors’ knowledge.

Xuliujing section, Yangtze River Estuary, China. Predicting discharge in tidal rivers is challenging due to complex flow dynamics influenced by topography, tides, runoff, and weather. Traditional forecasting methods struggle with fixed parameters, limiting their adaptability and accuracy over time. To address this, we propose an enhanced deep learning model, A KAN-augmented LSTM framework, which integrates a Kolmogorov-Arnold network (KAN) with a long short-term memory (LSTM) network. This model retains LSTM's ability to handle long-term dependencies while replacing the fully connected layer with a KAN layer. A learnable B-spline activation function in the KAN layer improves the model's capacity to capture nonlinear dynamics and long-term dependencies in time series data, enhancing forecasting accuracy. This paper applies the LSTM-KAN model to the Xuliujing section of the Yangtze River Estuary and compares its performance with traditional harmonic analysis (HA) and four neural network models: LSTM, XGBoost, DLinear, and Informer. The results demonstrate that the LSTM-KAN model significantly enhances discharge forecasting accuracy, outperforming all comparative methods across short-term (6 h), medium-term (12–24 h), and long-term (36–48 h) forecasts. Specifically, it achieved relative accuracy improvements of 12.1 %–35.2 % over HA and 7 %–52.8 % over the traditional LSTM model. These findings suggest that the complex interplay of tidal forcing, runoff, and weather in the Yangtze Estuary is better represented by the adaptive, function-learning paradigm of KAN than by models with fixed nonlinearities. The model's superior performance offers new insights for studying complex flow dynamics, indicating that deep learning techniques with learnable activation functions provide a more powerful and accurate tool for operational forecasting in highly dynamic tidal river environments. • This study developed an LSTM-KAN model for more accurate discharge forecasting in tidal rivers. • KAN leverages adaptive edge-weight activation to capture tidal-hydrodynamic nonlinearities with fewer parameters. • This study first embeds the architecture in hydrologic forecasting, using the Yangtze Xuliujing reach as the pilot. • The proposed model significantly outperforms traditional approaches in streamflow-forecasting accuracy.

Customer attrition is especially an issue in industries such as retail, banking, and telecommunications where customer acquisition costs are significantly higher than the costs of retaining repeat customers. The customer lack of interest is now predictable through machine learning models, and deep learning has become instrumental in early intervention for retention. In order to assess the quality of churn prediction, the study tests six basic machine learning techniques: random forest, logistic regression, and the k-nearest neighbors method, as well as four deep learning techniques: long short term memory (LSTM), bidirectional LSTM, convolutional neural networks (CNN), and artificial neural networks (ANN). The performance of the model is then assessed via the evaluation matrices, including the accuracy, precision, recall, and F1-score from the customer's behavioral data after feature extraction from large datasets. The study reveals that DL models offer improved handling of the churn and non-churn customer classification and Random Forest as well as other ML models comparable accuracy. This research can conclude that LSTM and ANN models outshine in actual-world churn prediction circumstances, especially when long-term consumer behavior evaluation is required. To enhance the current outcomes of a given prediction model, this research focuses on data preprocessing and the utilization of bootstrapping, feature extraction, and the combination of multiple models. The implications of the study provide specific practical recommendations for firms to effectively manage customer churn and increase customer retention by employing data-dealing techniques.

Customer sentiment analytics has emerged as a critical tool for retail businesses aiming to understand consumer perceptions, improve customer experience, and enhance decision-making. This paper explores the application of Natural Language Processing (NLP) and deep learning techniques in analyzing unstructured textual data such as customer reviews, social media posts, and feedback to extract actionable insights for the retail industry. Traditional sentiment analysis methods often rely on keyword-based approaches, which lack the contextual understanding necessary to interpret nuanced emotions and implicit meanings. In contrast, NLP combined with advanced deep learning models, such as Long Short-Term Memory (LSTM), Convolutional Neural Networks (CNN), and Transformers (e.g., BERT), enables more accurate sentiment classification by capturing semantic relationships, context, and sentiment polarity. The study presents a comprehensive framework that leverages data preprocessing, tokenization, embedding layers (e.g., Word2Vec, GloVe), and model training pipelines to analyze large volumes of customer-generated content. Experimental results from real-world retail datasets demonstrate the superiority of deep learning models over traditional machine learning techniques in sentiment prediction accuracy, especially in multilingual and noisy data scenarios. Moreover, the paper discusses the integration of sentiment scores with customer segmentation and product performance metrics to drive personalized marketing, inventory adjustments, and service enhancements. Challenges such as data labeling, domain adaptation, and interpretability of deep models are also addressed, along with strategies to overcome them using transfer learning, attention mechanisms, and explainable AI tools. The research concludes that customer sentiment analytics using NLP and deep learning is not merely a technological advancement but a strategic enabler for data-driven retail transformation. By systematically capturing and interpreting customer voices, retail businesses can proactively respond to market demands, enhance loyalty, and gain a competitive edge in an increasingly digital consumer landscape.

With the huge success of applying deep learning (DL) methodologies to image recognition and natural language processing in recent years, researchers are now keen to use them in the machine condition monitoring (MCM) context. There are numerous papers in applying various DL techniques, such as auto-encoder, restricted Boltzmann machine, convolutional neural network and recurrent neural network, etc., to MCM problems ranging from component-level condition monitoring (machine tool wear prediction, bearing fault diagnosis and classification and hydraulic pump fault diagnosis) to system-level health management (aircraft and spacecraft diagnosis). In this paper, we give a brief overview in the area of DL for MCM with a focus on reviewing the most recent papers published since 2019. In Part 1, we present some critical views regarding whether any breakthrough has been achieved from an MCM domain expert perspective, with the main conclusion that DL has great potential for MCM applications, and a major breakthrough could come soon since the shortfalls lie more in data than in the DL methodologies. Our overall impression is that (a) DL models are not really showing their great potentials with only a small training data; (b) faulty-condition data is hard to come by for training DL, but normal condition data is abundant, so anomaly detection makes more sense; (c) applying DL only to the Case Western Reserve University (CWRU) bearing fault dataset is not sufficient for real world industrial applications as it was from a very simple test rig, and applying DL to data from complex systems like helicopter gearbox data may deliver much more convincing results. In Part 2, we enhance the main conclusion of the critical review with supplement views and a case study on analysing Bell-206B helicopter main gearbox planet bearing failure data using some traditional MCM techniques in contrast to applying the long short-term memory (LSTM) DL method. We can conclude from the case study that the DL-based methods are not necessarily always superior to the traditional MCM techniques for dataset from moderately complex machinery.