Human-In-The-Loop Threat Detection

The increasing complexity of cyber threats has made automated systems essential for detecting and preventing malicious activities. However, fully automated models often struggle to handle ambiguous or novel attacks that require contextual understanding. This project, Human-in-the-Loop Threat Detection and Prevention System, integrates machine learning–based detection with human expertise to create a hybrid security framework. The system continuously monitors network logs to identify anomalies such as brute-force attacks, phishing attempts, and port scans. Detected threats are automatically categorized—known attacks are handled through automated prevention mechanisms, while uncertain cases are forwarded to a web-based human interface for expert review and decision-making. Human feedback is recorded and used to retrain the model, improving its accuracy and adaptability over time. This collaborative approach bridges the gap between automation and human judgment, enabling faster, more accurate, and adaptive cyber defense against evolving threats.

Publication Details

Journal
Zenodo (CERN European Organization for Nuclear Research)
Published
2025-11-26
DOI
https://doi.org/10.5281/zenodo.17722398
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Human-In-The-Loop Threat Detection

Zenodo (CERN European Organization for Nuclear Research)
Network Security and Intrusion Detection
article

Human-In-The-Loop Threat Detection

article en

Abstract

The increasing complexity of cyber threats has made automated systems essential for detecting and preventing malicious activities. However, fully automated models often struggle to handle ambiguous or novel attacks that require contextual understanding. This project, Human-in-the-Loop Threat Detection and Prevention System, integrates machine learning–based detection with human expertise to create a hybrid security framework. The system continuously monitors network logs to identify anomalies such as brute-force attacks, phishing attempts, and port scans. Detected threats are automatically categorized—known attacks are handled through automated prevention mechanisms, while uncertain cases are forwarded to a web-based human interface for expert review and decision-making. Human feedback is recorded and used to retrain the model, improving its accuracy and adaptability over time. This collaborative approach bridges the gap between automation and human judgment, enabling faster, more accurate, and adaptive cyber defense against evolving threats.

Zenodo (CERN European Organization for Nuclear Research)
Peace, Justice and strong institutions
Openalex Percentile: Top 39%
Network Security and Intrusion Detection
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.

Human-In-The-Loop Threat Detection · Zenodo (CERN European Organization for Nuclear Research) (2025) | TGRS Research Map | TGRS