analysis of machine learning algorithms towards cyberattacks detection: a survey

The rising complexity of cyber threats calls for more sophisticated and automated detection mechanisms. this paper provides a thorough review and performance comparison of traditional machine learning algorithms for detecting major cyberattacks, including distributed denial of service (ddos), phishing, malware, ransomware, sql injection, zero-day exploits, and man-in-the-middle (mitm) attacks. we evaluate widely used algorithms such as random forest, gradient boosting, support vector machines (svm), decision trees, naïve bayes, and k-nearest neighborsbased on key metrics like accuracy, detection rate, and computational efficiency. our findings indicate that ensemble methods, particularly random forest and gradient boosting; consistently achieve high performance across diverse attack scenarios, whereas simpler models often struggle with complex or evolving threats. the study also discusses the emerging role of deep learning in cybersecurity, highlighting its potential for advanced threat detection alongside current challenges such as high computational demands and data dependencies. this reviewserves as a practical guide for selecting effective ml-baseddetection tools and points toward future integrations of mland dl for stronger cyber defense. the escalating complexity of cyber threats necessitates the development of more sophisticated and automated detection mechanisms. this paper provides a comprehensive survey and performance comparison of traditional machine learning algorithms for detecting major cyberattacks, including distributed denial of service (ddos), phishing, malware, ransomware, sql injection, zero-day exploits, and man-in-the-middle (mitm) attacks. the performance of widely used algorithms, such as random forest, gradient boosting, support vector machines (svm), decision trees, naïve bayes, and k-nearest neighbors, is evaluated based on key metrics including accuracy, detection rate, and computational efficiency. the findings indicate that ensemble methods, particularly random forest and gradient boosting, consistently achieve high performance across diverse attack scenarios, whereas simpler models often struggle with complex or evolving threats. the study also discusses the emerging role of deep learning in cybersecurity, highlighting its potential for advanced threat detection alongside current challenges such as high computational demands and data dependencies. this review serves as a valuable resource and a practical guide for researchers and practitioners seeking to select effective ml-based detection tools, while also pointing toward the future integration of ml and dl for more robust cyber defense.