{"id":"https://openalex.org/W4415280403","doi":"https://doi.org/10.58496//mjcs/2025/063","title":"Mitigating Zero-Day Vulnerabilities in IIoT Systems: Challenges and Advances in AI-Powered Intrusion Detection Systems","display_name":"Mitigating Zero-Day Vulnerabilities in IIoT Systems: Challenges and Advances in AI-Powered Intrusion Detection Systems","publication_year":2025,"publication_date":"2025-10-17","ids":{"openalex":"https://openalex.org/W4415280403","doi":"https://doi.org/10.58496//mjcs/2025/063"},"language":"en","primary_location":{"id":"doi:10.58496//mjcs/2025/063","doi":"https://doi.org/10.58496//mjcs/2025/063","is_oa":true,"landing_page_url":"https://doi.org/10.58496//mjcs/2025/063","pdf_url":"https://mesopotamian.press/journals/index.php/CyberSecurity/article/download/935/908","source":{"id":"https://openalex.org/S5407037797","display_name":"Mesopotamian Journal of CyberSecurity","issn_l":"2958-6542","issn":["2958-6542"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mesopotamian Journal of CyberSecurity","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://mesopotamian.press/journals/index.php/CyberSecurity/article/download/935/908","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5045624295","display_name":"Khalid Asaad Hashim","orcid":"https://orcid.org/0000-0001-8477-9477","observed_orcids":["https://orcid.org/0000-0001-8477-9477"]},"institutions":[{"id":"https://openalex.org/I4210138650","display_name":"Universiti Teknologi MARA System","ror":"https://ror.org/030847t23","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210138650","https://openalex.org/I82724352"]},{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Khalid Asaad Hashim","raw_affiliation_strings":["Faculty of Electrical Engineering, Universiti Teknologi MARA, Shah Alam, Malaysia"],"raw_orcid":"https://orcid.org/0000-0001-8477-9477","affiliations":[{"raw_affiliation_string":"Faculty of Electrical Engineering, Universiti Teknologi MARA, Shah Alam, Malaysia","institution_ids":["https://openalex.org/I4210138650","https://openalex.org/I82724352"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019048662","display_name":"Yusnani Mohd Yussoff","orcid":"https://orcid.org/0000-0001-8052-7694","observed_orcids":["https://orcid.org/0000-0001-8052-7694"]},"institutions":[{"id":"https://openalex.org/I4210138650","display_name":"Universiti Teknologi MARA System","ror":"https://ror.org/030847t23","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210138650","https://openalex.org/I82724352"]},{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Yusnani Binti Mohd Yussoff","raw_affiliation_strings":["Faculty of Electrical Engineering, Universiti Teknologi MARA, Shah Alam, Malaysia"],"raw_orcid":"https://orcid.org/0000-0001-8052-7694","affiliations":[{"raw_affiliation_string":"Faculty of Electrical Engineering, Universiti Teknologi MARA, Shah Alam, Malaysia","institution_ids":["https://openalex.org/I4210138650","https://openalex.org/I82724352"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5053158927","display_name":"Shahrani Shahbudin","orcid":"https://orcid.org/0000-0002-7232-0826","observed_orcids":["https://orcid.org/0000-0002-7232-0826"]},"institutions":[{"id":"https://openalex.org/I4210138650","display_name":"Universiti Teknologi MARA System","ror":"https://ror.org/030847t23","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210138650","https://openalex.org/I82724352"]},{"id":"https://openalex.org/I82724352","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92","country_code":"MY","type":"education","lineage":["https://openalex.org/I82724352"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Shahrani Binti Shahbudin","raw_affiliation_strings":["Faculty of Electrical Engineering, Universiti Teknologi MARA, Shah Alam, Malaysia"],"raw_orcid":"https://orcid.org/0000-0002-7232-0826","affiliations":[{"raw_affiliation_string":"Faculty of Electrical Engineering, Universiti Teknologi MARA, Shah Alam, Malaysia","institution_ids":["https://openalex.org/I4210138650","https://openalex.org/I82724352"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.7913,"has_fulltext":true,"cited_by_count":6,"citation_normalized_percentile":{"value":0.84599898,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"5","issue":"3","first_page":"1184","last_page":"1198"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/zero-day-attacks","display_name":"zero-day attacks","score":0.8519999980926514},{"id":"https://openalex.org/keywords/industrial-internet-of-things","display_name":"Industrial Internet of Things","score":0.9039999842643738},{"id":"https://openalex.org/keywords/intrusion-detection-systems","display_name":"intrusion detection systems","score":0.9940000176429749},{"id":"https://openalex.org/keywords/ai-based-intrusion-detection","display_name":"AI-based intrusion detection","score":0.9300000071525574},{"id":"https://openalex.org/keywords/deep-learning-for-intrusion-detection","display_name":"deep learning for intrusion detection","score":0.7829999923706055},{"id":"https://openalex.org/keywords/machine-learning-based-intrusion-detection","display_name":"machine learning for intrusion detection","score":0.9049999713897705},{"id":"https://openalex.org/keywords/deep-reinforcement-learning","display_name":"deep reinforcement learning","score":0.9900000095367432},{"id":"https://openalex.org/keywords/false-negative-results","display_name":"false-negative results","score":0.8240000009536743},{"id":"https://openalex.org/keywords/detection-accuracy","display_name":"detection accuracy","score":0.5680000185966492},{"id":"https://openalex.org/keywords/adversarial-attacks","display_name":"adversarial attacks","score":0.8899999856948853},{"id":"https://openalex.org/keywords/performance-degradation","display_name":"performance degradation","score":0.5329999923706055}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7210000157356262},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6830999851226807},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5752999782562256},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5113000273704529},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.48010000586509705},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.45890000462532043},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4514000117778778},{"id":"https://openalex.org/C86844869","wikidata":"https://www.wikidata.org/wiki/Q2798820","display_name":"Hacker","level":2,"score":0.4092000126838684},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.40389999747276306},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.39739999175071716},{"id":"https://openalex.org/C112930515","wikidata":"https://www.wikidata.org/wiki/Q4389547","display_name":"Risk analysis (engineering)","level":1,"score":0.3905999958515167},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3896999955177307},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.36579999327659607},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.36500000953674316},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3034000098705292},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.299699991941452},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2775000035762787},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2711000144481659},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.2581000030040741}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.58496//mjcs/2025/063","doi":"https://doi.org/10.58496//mjcs/2025/063","is_oa":true,"landing_page_url":"https://doi.org/10.58496//mjcs/2025/063","pdf_url":"https://mesopotamian.press/journals/index.php/CyberSecurity/article/download/935/908","source":{"id":"https://openalex.org/S5407037797","display_name":"Mesopotamian Journal of CyberSecurity","issn_l":"2958-6542","issn":["2958-6542"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mesopotamian Journal of CyberSecurity","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.58496//mjcs/2025/063","doi":"https://doi.org/10.58496//mjcs/2025/063","is_oa":true,"landing_page_url":"https://doi.org/10.58496//mjcs/2025/063","pdf_url":"https://mesopotamian.press/journals/index.php/CyberSecurity/article/download/935/908","source":{"id":"https://openalex.org/S5407037797","display_name":"Mesopotamian Journal of CyberSecurity","issn_l":"2958-6542","issn":["2958-6542"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Mesopotamian Journal of CyberSecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[{"display_name":"Systematic Review","id":"https://openalex.org/study-designs/systematic-review"}],"awards":[{"id":"https://openalex.org/G6059128714","display_name":null,"funder_award_id":"40450","funder_id":"https://openalex.org/F4320322780","funder_display_name":"Universiti Teknologi MARA"}],"funders":[{"id":"https://openalex.org/F4320322780","display_name":"Universiti Teknologi MARA","ror":"https://ror.org/05n8tts92"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415280403.pdf","grobid_xml":"https://content.openalex.org/works/W4415280403.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W1496376327","https://openalex.org/W2007087405","https://openalex.org/W2026559036","https://openalex.org/W2315980794","https://openalex.org/W2902363804","https://openalex.org/W2921339519","https://openalex.org/W3003685271","https://openalex.org/W3038270335","https://openalex.org/W3047838906","https://openalex.org/W3087849800","https://openalex.org/W3185692078","https://openalex.org/W3192519096","https://openalex.org/W3200617211","https://openalex.org/W4200037416","https://openalex.org/W4200094870","https://openalex.org/W4220957574","https://openalex.org/W4281693015","https://openalex.org/W4282930719","https://openalex.org/W4283792068","https://openalex.org/W4285199572","https://openalex.org/W4285818738","https://openalex.org/W4289130121","https://openalex.org/W4289528587","https://openalex.org/W4294631279","https://openalex.org/W4353055587","https://openalex.org/W4386220180","https://openalex.org/W4386850845","https://openalex.org/W4386963537","https://openalex.org/W4388201655","https://openalex.org/W4389829966","https://openalex.org/W4396669024","https://openalex.org/W4401023138","https://openalex.org/W4402437224","https://openalex.org/W4403389808"],"related_works":["https://openalex.org/W7137028228","https://openalex.org/W7134250224","https://openalex.org/W7172524250","https://openalex.org/W7167893094","https://openalex.org/W4220919890","https://openalex.org/W4409641655","https://openalex.org/W7167267767","https://openalex.org/W7039445878","https://openalex.org/W4413179877","https://openalex.org/W7163507753"],"abstract_inverted_index":{"Zero-day":[0],"attacks":[1,72],"are":[2,224],"one":[3,204],"of":[4,25,34,42,56,66,70,114,163,208,226,246,261],"the":[5,64,68,111,120,128,164,173,180,192,200,241,244,259],"great":[6],"challenges":[7],"that":[8,50,58,179],"intrusion":[9],"detection":[10,220],"systems":[11,184],"have":[12,59,93],"been":[13,60,94,108],"facing":[14,18],"and":[15,85,144,222,250],"keep":[16],"on":[17],"today,":[19],"especially":[20],"worsening":[21],"within":[22],"Industrial":[23],"Internet":[24],"Things":[26],"environments":[27],"since":[28],"their":[29],"ability":[30],"to":[31,75,98,123,158,172],"take":[32],"advantage":[33],"unknown":[35],"vulnerabilities":[36],"results":[37],"in":[38,78,104,215,257],"a":[39,54,206],"high":[40],"rate":[41],"false":[43,196],"negatives.":[44],"It":[45,212],"is":[46],"under":[47],"this":[48,51],"framework":[49],"paper":[52],"presents":[53],"set":[55],"experiments":[57],"carried":[61],"out":[62,96],"with":[63,73,86,182,188,230],"objective":[65],"analyzing":[67],"consequences":[69],"zero-day":[71,235],"regard":[74],"performance":[76,260],"degradation":[77],"Intrusion":[79],"Detection":[80],"System":[81],"(IDS)":[82],"and,":[83],"secondly,":[84],"greater":[87],"emphasis,":[88],"about":[89,166],"those":[90,101],"failings":[91],"which":[92],"pointed":[95],"up":[97,187],"now":[99],"as":[100],"affecting":[102],"precision":[103],"detection.":[105],"This":[106],"has":[107],"done":[109],"through":[110],"systematic":[112],"review":[113],"200":[115],"research":[116],"papers":[117],"published":[118],"from":[119,218],"years":[121],"2023":[122],"2024,":[124],"further":[125,239],"categorized":[126],"into":[127],"four":[129],"main":[130],"focus":[131],"areas:":[132],"general":[133],"AI-based":[134,175],"IDS,":[135,139,143,216],"Machine":[136],"learning":[137,249,252],"(ML)-based":[138],"Deep":[140,145],"Learning":[141,147],"(DL)-based":[142],"Reinforcement":[146],"(DRL)-based":[148],"IDS.":[149,262],"Accordingly,":[150],"45%":[151],"were":[152],"DL-based":[153,183],"IDS":[154],"reviews;":[155],"35%":[156],"related":[157],"machine":[159,248],"learning;":[160],"15%":[161],"consisted":[162],"ones":[165],"DRL-based":[167],"ones,":[168],"while":[169],"5%":[170],"pertain":[171],"General":[174],"ones.":[176],"Results":[177],"show":[178],"approaches":[181],"will":[185],"come":[186],"extensive":[189],"promises,":[190],"reducing":[191],"impact":[193],"brought":[194],"by":[195],"negatives,":[197],"besides":[198],"extending":[199],"issues":[201],"even":[202],"when":[203],"considers":[205],"background":[207],"adversarial":[209],"attack":[210],"issues.":[211],"underlines":[213],"that,":[214],"apart":[217],"accuracy,":[219],"specificity":[221],"recall":[223],"also":[225],"essence":[227],"for":[228],"dealing":[229],"low":[231],"frequent":[232],"but":[233],"high-impact":[234],"threats.":[236],"These":[237],"techniques":[238,253],"make":[240],"following":[242],"proposal:":[243],"use":[245],"both":[247],"deep":[251],"should":[254],"be":[255],"improved":[256],"enhancing":[258]},"counts_by_year":[{"year":2026,"cited_by_count":6}],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2025-10-17T00:00:00"}