Skip to content
Open access

Ensemble probability meta-classifier for attack detection leveraging user behavior and big data analytics

Sep 2026 · Discover Artificial Intelligence · Vol 6 · 0 citations · 25 references

TL;DR

The proposed EPMC algorithm integrates multiple base classifiers, including transformer models, deep neural networks (DNN), and gated recurrent units (GRU) to enhance detection accuracy and robustness and shows the uses of ensemble learning techniques for deployment in existing security solutions.

Abstract

The rapid rise in cyber threats requires effective detection methodologies to accurately identify malicious behavior. Conventional detection techniques often struggle with the volume and complexity of data generated in today’s computing environments. This study focuses on detecting attacks by analyzing user behavior and describes an ensemble-based approach. The proposed EPMC algorithm integrates multiple base classifiers, including transformer models, deep neural networks (DNN), and gated recurrent units (GRU) to enhance detection accuracy and robustness. The EPMC method combines the probabilistic outputs of these classifiers and integrates them through a softmax-based fusion mechanism, which enables data-dependent weighting of base classifiers. The fused representation is then used to train a meta-classifier for final prediction. Extensive studies with large-scale datasets show that our technique is excellent for capturing unusual user activity. Overall, these results suggest that our EPMC-based model is able to achieve accuracy of 95%, recall of 96% and F1-score of 95%. The technology proposed in this paper, integrated with big data analytics offers a effective detection of intricate attacks and adapts to the changing safety conditions. These results tend to improve cyber defense capabilities and show the uses of ensemble learning techniques for deployment in existing security solutions.

Read PDF

Similar papers

Open access Aug 2026

HADS-Net: A Hybrid Attention-Based Deep Security Network for Network Intrusion Detection

The principal contribution of this work is architectural and diagnostic rather than a performance improvement: it documents that combining feature-wise attention with out-of-fold stacked generalization does not, in this setting, outperform a plain multi-layer perceptron, while incurring the highest memory footprint of...

Mahima Khanna, V. Murthy, Siva Ramavarapu et al. · 0 citations
Conference Sep 2026

Uncertainty-Aware Intrusion Detection: Selective Reclassification Using Error-Driven Auxiliary Models

Modern intrusion detection systems (IDS) increasingly rely on machine learning and deep learning models to identify complex attack patterns in network traffic. However, such models often produce uncertain predictions under class imbalance, overlapping feature distributions, and evolving attack behaviors. This paper pro...

Bohdan Semenuik, Anatoliy Sachenko, B. Savenko · 0 citations
Open access Sep 2026

A Hybrid Stacking-Based Ensemble Learning Framework with Temporal Feature Modelling for Zero-Day Attack Prediction in Enterprise Environments

A Hybrid Stacking-Based Ensemble Learning Framework that integrates Random Forest, Support Vector Machine, Extreme Gradient Boosting, and Long Short-Term Memory models through a Logistic Regression meta-classifier to enhance zero-day attack prediction is proposed.

Hrishikesh Parabhat Mishra, Supragya Verma · 0 citations
#explainable ai Open access Sep 2026

Hybrid Machine Learning Model for Phishing Detection Using Multi-Modal Data

A hybrid machine learning model that leverages multi-modal data—including textual URL features, HTML content, webpage screenshots, and metadata—to achieve robust and accurate phishing detection is proposed, highlighting the efficacy of multi-modal fusion in overcoming limitations of unimodal approaches.

Epelle Bright Curthbert · 0 citations
Open access Aug 2026

AI-Driven Security: Detecting Cyber Attacks in IoT Networks

LSTM had good detection for frequent attacks and slow-changing patterns, which shows its capacity in learning long-lasting dependencies, which shows its capacity in learning long-lasting dependencies.

Jawad Hussain Awan, Misbah Safdar, Muhammad Ayaz Shirazi et al. · 0 citations
Open access Sep 2026

Lightweight AI Models for Cyber Threat Detection: An Evaluation of MobileNetV2, Random Forest, and CNN-LSTM for Phishing and Network Anomaly Detection

This work contributes a comparative evaluation of lightweight detection models, consistent attention to security-critical metrics, and interpretable insights to support practical cybersecurity deployment.

Nwagbara Chisom Telvin, Gilbert Imuetin Osaze Aimufua, Raymond Ternenge Igbudu · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.