Expressway tunnels are semi-enclosed structures characterized by monotonous alignment transitions and unique lighting environments, which can easily lead to drivers developing constrained and irritable psychology. This may result in risky behaviors such as speeding and fatigued driving. Previous research on tunnel driving behavior mainly focuses on visual factors, neglecting the nonstationary time-series impacts of combined parameters on risky driving. Firstly, 30 drivers were recruited to carry out the real test. Then, based on the evolution of time series, drawing inspiration from the concept of lineage in biology, and considering multiple driving performance indicators, driving behavior chains and the feature spectrum were constructed. The characteristics of the behavioral spectrum were divided into six groups: electroencephalogram, heart rate, eye movement, speed, steering, and car-following behavior. Subsequently, spectral analysis using the spectral radius property of matrix theory revealed distinctive characteristics of risky driving behavior. The study deeply explored the inducing mechanism, hidden patterns, and rules of risky driving behavior under the coupling effect of tunnel environment and drivers’ attributes. Finally, the significant features that influence driving behavior were used as input variables for constructing identification models using the Adaptive Boosting (AdaBoost) and Random Forest (RF) algorithms. Synthetic Minority Over-sampling Technique (SMOTE) and Adaptive Synthetic Sampling (ADASYN) were employed for oversampling. The results indicate that the ADASYN-RF algorithm outperformed others, achieving a precise recall rate area under the curve (AUPRC) of 0.978 when using the spectral radius of the speed and steering groups as input variables. These findings offer theoretical guidance for developing tunnel traffic safety strategies. © 2023 Tongji University and Tongji University Press.