Talk · International Conference on Cybersecurity, Digital Forensics, and AI Applications · June 1, 2026
A Multi-Source Event Correlation Framework for IAM Security Using Machine Learning and Zero Trust Principles
Md. Mushfiqur Rahman, Mekhriddin Nurmamatov, Aswani Kumar Cherukuri, Sazzad Hossain
Abstract
Identity and Access Management (IAM) systems struggle to counter insider threats. With the increased use of the cloud and the difficulties posed by remote working, managing enterprise system activity logs is more complex. This makes it difficult to monitor behaviors within the system. This paper proposes a novel insider threat detection method that integrates sliding window behavior analytics, Extreme Gradient Boosting (XGBoost) detection, and Zero Trust risk Assessment (ZTA), all contained within a single system. This method frames time-based behavior with the application of risk-based access control. This is achieved by using the CERT dataset and covers user authentication, file access, e-mail, and web activity. The results demonstrate a notable level of accuracy of over 98.89%, with a precision of 99%, a recall of 96.5%, and a Receiver Operating Characteristic Area Under the Curve (ROC-AUC) of 0.9815, from a considerably large sample of close to 5 million records. Additionally, the method demonstrated an impressive level of generalization on the Los Alamos National Laboratory (LANL) Windows Logging Service dataset with an accuracy of 99.76% and an ROC-AUC of 99.82%. The experimental results substantiate the efficacy of the proposed framework for insider threat detection and Zero Trust-based IAM security enforcement in enterprise environments.
More by Mekhriddin Nurmamatov
- Lean Quantum Intelligence: A Compact Variational-Circuit Hybrid for Turbofan RUL Prediction with SHAP AttributionComputers · 2026
- Investigation of Vulnerabilities of Machine Learning Models to Adversarial Attacks in Smart Grid Forecasting SystemsAdvances in computational intelligence and robotics book series · 2026
- Capacity-Constrained Multi-robot Task Allocation via Quantum Approximate Optimisation: A Reproducible Benchmark on a Solomon VRPTW C101-Derived InstanceCommunications in computer and information science · 2026
- Forecasting Electrical Load and Renewable Energy Generation Using Machine Learning MethodsAdvances in computational intelligence and robotics book series · 2026