Artificial Intelligence-Based Human Behavior Analysis for Reducing Cybersecurity Risks and Human Errors
Main
Ikramullah Maroof*
Shareefullah Mosazai
Islahuddin Jalal
Human behavior remains one of the most persistent contributors to cybersecurity incidents, as unintentional errors, social-engineering susceptibility, and insider misuse continue to bypass purely technical safeguards. This conceptual, literature-based study examines how artificial intelligence (AI) and machine learning (ML) techniques can be applied to analyze human behavioral patterns in order to reduce cybersecurity risk and human error within organizational information systems. Drawing on a structured review of insider-threat detection, phishing and social-engineering research, security-awareness training studies, and explainable-AI literature, the study synthesizes recurring behavioral indicators, modeling approaches, and evaluation practices reported across the field. A conceptual AI-based human-behavior-analysis framework is proposed, comprising data acquisition, behavioral feature engineering, AI/ML modeling, explainable risk scoring, and adaptive human-in-the-loop response. The review indicates that sequence-aware deep-learning models, such as long short-term memory networks and autoencoders, combined with explainable AI techniques, achieve strong reported detection performance while preserving analyst interpretability, and that adaptive, behavior-based training interventions are associated with measurably greater reductions in human-related risk than static, one-time awareness programs. The study concludes that integrating continuous behavioral analytics with human-centered training and feedback mechanisms offers a more resilient approach to cybersecurity risk management than technology-only or training-only strategies. Implications for organizational security governance, model interpretability, and future empirical validation are discussed.
Anderson, R. (2020). Security Engineering. Wiley. https://doi.org/10.1002/9781119644682
Basit, A., Zafar, M., Liu, X., Javed, A. R., Jalil, Z., & Kifayat, K. (2020). A comprehensive survey of AI-enabled phishing attacks detection techniques. Telecommunication Systems, 76(1), 139–154. https://doi.org/10.1007/s11235-020-00733-2
Bezerra, A., Pereira, I., Rebelo, M. Â., Coelho, D., Oliveira, D. A. de, Costa, J. F. P., & Cruz, R. P. M. (2024). A case study on phishing detection with a machine learning net. International Journal of Data Science and Analytics, 20(3), 2001–2020. https://doi.org/10.1007/s41060-024-00579-w
Buczak, A. L., & Guven, E. (2016). A Survey of Data Mining and Machine Learning Methods for Cyber Security Intrusion Detection. IEEE Communications Surveys & Tutorials, 18(2), 1153–1176. https://doi.org/10.1109/comst.2015.2494502
Capuano, N., Fenza, G., Loia, V., & Stanzione, C. (2022). Explainable Artificial Intelligence in CyberSecurity: A Survey. IEEE Access, 10, 93575–93600. https://doi.org/10.1109/access.2022.3204171
Chandola, V., Banerjee, A., & Kumar, V. (2009). Anomaly detection. ACM Computing Surveys, 41(3), 1–58. https://doi.org/10.1145/1541880.1541882
Cialdini, R. B. (2009). Influence: Science and Practice (5th ed.). Pearson Education.
Dixit, N., Gupta, R., & Yadav, P. (2024). User Behavior Analysis to Detect Insider Threat by Using Machine Learning Algorithms. In 2024 4th International Conference on Innovative Practices in Technology and Management (ICIPTM) (pp. 1–4). IEEE. https://doi.org/10.1109/iciptm59628.2024.10563542
Duman, S. A., Duman, A., Hayran, R., & Soğukpinar, İ. (2025). A Multi-Layer Model of Psychological Factors and Parametric Approaches for Human-Centric Phishing Prevention. In 2025 13th International Symposium on Digital Forensics and Security (ISDFS) (pp. 1–5). IEEE. https://doi.org/10.1109/isdfs65363.2025.11012100
Duman, Ş. A., Hayran, R., & Sogukpinar, İ. (2023). Impact Analysis and Performance Model of Social Engineering Techniques. In 2023 11th International Symposium on Digital Forensics and Security (ISDFS) (pp. 1–6). IEEE. https://doi.org/10.1109/isdfs58141.2023.10131771
Glasser, J., & Lindauer, B. (2013). Bridging the Gap: A Pragmatic Approach to Generating Insider Threat Data. In 2013 IEEE Security and Privacy Workshops (pp. 98–104). IEEE. https://doi.org/10.1109/spw.2013.37
Homoliak, I., Toffalini, F., Guarnizo, J., Elovici, Y., & Ochoa, M. (2019). Insight Into Insiders and IT. ACM Computing Surveys, 52(2), 1–40. https://doi.org/10.1145/3303771
IBM Security. (2024). Cost of a Data Breach Report 2024. IBM Corporation.
Ibraheem, I., Morufat, A. T., Segbefia, S. K., & Abdulrasaq, A. A. (2025). Detecting Malicious Insider Threats through Anomaly-Based User Behaviour Analytics in Enterprise Networks: Machine Learning Approach. Southern African Journal of Security, 3. https://doi.org/10.25159/3005-4222/18099
Jain, A. K., & Gupta, B. B. (2018). A machine learning based approach for phishing detection using hyperlinks information. Journal of Ambient Intelligence and Humanized Computing, 10(5), 2015–2028. https://doi.org/10.1007/s12652-018-0798-z
Jayatilaka, A., Beu, N., Baetu, I., Zahedi, M., Babar, M. A., Hartley, L., & Lewinsmith, W. (2021). Evaluation of Security Training and Awareness Programs: Review of Current Practices and Guideline. ArXiv Preprint. http://arxiv.org/abs/2112.06356
Kahneman, D. (2011). Thinking, Fast and Slow. Farrar, Straus and Giroux.
Kim, J., Park, M., Kim, H., Cho, S., & Kang, P. (2019). Insider Threat Detection Based on User Behavior Modeling and Anomaly Detection Algorithms. Applied Sciences, 9(19), 4018. https://doi.org/10.3390/app9194018
Lindauer, B., Glasser, J., Rosen, M., & Wallnau, K. C. (2014). Generating Test Data for Insider Threat Detectors. Usenix Workshop on Cybersecurity Experimentation and Test (WCSET14).
Mitnick, K. D., & Simon, W. L. (2002). The Art of Deception: Controlling the Human Element of Security. Wiley.
Mocerino, G. E., Velotti, C., Gentile, D., Gallo, L., Botta, A., & Ventre, G. (2024). Work in Progress: Implicit Association Tests for Understanding Human Factor in Phishing Beyond Awareness. In 2024 IEEE European Symposium on Security and Privacy Workshops (EuroS&PW) (pp. 519–526). IEEE. https://doi.org/10.1109/eurospw61312.2024.00063
Papatsaroucha, D., Psaroudaki, S., Vassilaki, E., Pityanou, K., Kourtis, M. A., Politis, I., & Markakis, E. K. (2026). Human Vulnerability Assessment in Cybersecurity: A Systematic Literature Review of Methods, Models, and Instruments. ArXiv Preprint. http://arxiv.org/abs/2605.22119
Parsons, K., McCormac, A., Butavicius, M., Pattinson, M., & Jerram, C. (2014). Determining employee awareness using the Human Aspects of Information Security Questionnaire (HAIS-Q). Computers & Security, 42, 165–176. https://doi.org/10.1016/j.cose.2013.12.003
Paul, M., Bartlett, G., Mirkovic, J., & Freedman, M. (2024). Phishing Email Detection Using Inputs From Artificial Intelligence. ArXiv Preprint. http://arxiv.org/abs/2405.12494
Pennada, S. S. P., Nayak, S. K., & M, V. K. (2025). Insider Threat Detection Using Behavioural Analysis through Machine Learning and Deep Learning Techniques. International Research Journal of Multidisciplinary Technovation, 74–86. https://doi.org/10.54392/irjmt2527
Rjoub, G., Bentahar, J., Abdel Wahab, O., Mizouni, R., Song, A., Cohen, R., Otrok, H., & Mourad, A. (2023). A Survey on Explainable Artificial Intelligence for Cybersecurity. IEEE Transactions on Network and Service Management, 20(4), 5115–5140. https://doi.org/10.1109/tnsm.2023.3282740
Rohan, R., Funilkul, S., Pal, D., & Chutimaskul, W. (2021). Understanding of Human Factors in Cybersecurity: A Systematic Literature Review. In 2021 International Conference on Computational Performance Evaluation (ComPE) (pp. 133–140). IEEE. https://doi.org/10.1109/compe53109.2021.9752358
Saeed, S., Suayyid, S. A., Al-Ghamdi, M. S., Al-Muhaisen, H., & Almuhaideb, A. M. (2023). A Systematic Literature Review on Cyber Threat Intelligence for Organizational Cybersecurity Resilience. Sensors, 23(16), 7273. https://doi.org/10.3390/s23167273
Salahdine, F., El Mrabet, Z., & Kaabouch, N. (2021). Phishing Attacks Detection A Machine Learning-Based Approach. In 2021 IEEE 12th Annual Ubiquitous Computing, Electronics & Mobile Communication Conference (UEMCON) (pp. 250–255). IEEE. https://doi.org/10.1109/uemcon53757.2021.9666627
Sarker, I. H. (2021). Machine Learning: Algorithms, Real-World Applications and Research Directions. SN Computer Science, 2(3). https://doi.org/10.1007/s42979-021-00592-x
Sarker, I. H., Kayes, A. S. M., Badsha, S., Alqahtani, H., Watters, P., & Ng, A. (2020). Cybersecurity data science: an overview from machine learning perspective. Journal of Big Data, 7(1). https://doi.org/10.1186/s40537-020-00318-5
Sasse, M. A., Brostoff, S., & Weirich, D. (2001). Transforming the ‘Weakest Link’ — a Human/Computer Interaction Approach to Usable and Effective Security. BT Technology Journal, 19(3), 122–131. https://doi.org/10.1023/a:1011902718709
Shimmi, S., Okhravi, H., & Rahimi, M. (2025). AI-Based Software Vulnerability Detection: A Systematic Literature Review. ArXiv Preprint. http://arxiv.org/abs/2506.10280
Song, Y., & Yuan, J. (2024). Insider Threat Detection Based on User and Entity Behavior Analysis with a Hybrid Model. In Lecture Notes in Computer Science (pp. 323–340). Springer Nature Switzerland. https://doi.org/10.1007/978-3-031-75764-8_17
Tuor, A., Kaplan, S., Hutchinson, B., Nichols, N., & Robinson, S. (2017). Deep Learning for Unsupervised Insider Threat Detection in Structured Cybersecurity Data Streams. ArXiv Preprint. http://arxiv.org/abs/1710.00811
Verizon. (2024). Data Breach Investigations Report. Verizon. https://www.verizon.com/business/content/business/us/en/index/resources/reports/dbir/
Whitman, M. E., & Mattord, H. J. (2008). Teaching Information Security in a Hybrid Distance Learning Setting. In Handbook of Distance Learning for Real-Time and Asynchronous Information Technology Education (pp. 239–258). IGI Global. https://doi.org/10.4018/978-1-59904-964-9.ch013
Wijesinghe, W. M. A. J., Abeysinghe, Y. P. P., Rukshana, M. A. F., Adhikari, A. M. P. S., Abeywardhana, K. Y., & Siriwardhana, D. (2024). Polymorphic Security Enhancements for Corporate Environments Utilizing Behavior Analytics. In 2024 International Conference on Computer and Applications (ICCA) (pp. 1–6). IEEE. https://doi.org/10.1109/icca62237.2024.10928161
Wilk-Jakubowski, J. L., Pawlik, L., Wilk-Jakubowski, G., & Sikora, A. (2025). Machine Learning and Neural Networks for Phishing Detection: A Systematic Review (2017–2024). Electronics, 14(18), 3744. https://doi.org/10.3390/electronics14183744
