{"id":"https://openalex.org/W7203544025","doi":"https://doi.org/10.5281/zenodo.21944039","title":"Temporal Dynamics of AI-Driven Cyberattacks: Timing-Based Detection and Sub-Second Defense Against Autonomous Attack Agents","display_name":"Temporal Dynamics of AI-Driven Cyberattacks: Timing-Based Detection and Sub-Second Defense Against Autonomous Attack Agents","publication_year":2026,"publication_date":"2026-08-15","ids":{"openalex":"https://openalex.org/W7203544025","doi":"https://doi.org/10.5281/zenodo.21944039"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.21944039","doi":"https://doi.org/10.5281/zenodo.21944039","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.21944039","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},"volume":null,"type":"dataset","is_traditional":false,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.5281/zenodo.21944039","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133484551","display_name":"Sridhar Govardhan","orcid":"https://orcid.org/0000-0002-2099-9283","observed_orcids":["https://orcid.org/0000-0002-2099-9283"]},"institutions":[{"id":"https://openalex.org/I83737708","display_name":"REVA University","ror":"https://ror.org/03gtcxd54","country_code":"IN","type":"education","lineage":["https://openalex.org/I83737708"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Govardhan, Sridhar","raw_affiliation_strings":["REVA University"],"raw_orcid":"https://orcid.org/0000-0002-2099-9283","affiliations":[{"raw_affiliation_string":"REVA University","institution_ids":["https://openalex.org/I83737708"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5133484551"],"corresponding_institution_ids":["https://openalex.org/I83737708"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.0008999999845400453,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ai-driven-cyberattacks","display_name":"AI-driven cyberattacks","score":0.9190000295639038},{"id":"https://openalex.org/keywords/temporal-dynamics","display_name":"temporal dynamics","score":0.49399998784065247},{"id":"https://openalex.org/keywords/honeypots","display_name":"honeypots","score":0.8029999732971191},{"id":"https://openalex.org/keywords/credential-stuffing","display_name":"credential stuffing","score":0.9909999966621399}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7224000096321106},{"id":"https://openalex.org/C199168358","wikidata":"https://www.wikidata.org/wiki/Q3367000","display_name":"Orchestration","level":3,"score":0.6000000238418579},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5529999732971191},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.41609999537467957},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.3700999915599823},{"id":"https://openalex.org/C109297577","wikidata":"https://www.wikidata.org/wiki/Q161157","display_name":"Password","level":2,"score":0.3562000095844269},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.35589998960494995},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35519999265670776},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.351500004529953},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.3172999918460846},{"id":"https://openalex.org/C35578498","wikidata":"https://www.wikidata.org/wiki/Q193424","display_name":"Web service","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C2777810591","wikidata":"https://www.wikidata.org/wiki/Q16861606","display_name":"Credential","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C145912823","wikidata":"https://www.wikidata.org/wiki/Q113558","display_name":"Dynamics (music)","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C9628104","wikidata":"https://www.wikidata.org/wiki/Q788009","display_name":"Autonomous system (mathematics)","level":2,"score":0.28189998865127563},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.28119999170303345},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2775999903678894},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.2754000127315521},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.27219998836517334},{"id":"https://openalex.org/C167900197","wikidata":"https://www.wikidata.org/wiki/Q11081100","display_name":"Spoofing attack","level":2,"score":0.27160000801086426},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2676999866962433},{"id":"https://openalex.org/C147494362","wikidata":"https://www.wikidata.org/wiki/Q2078905","display_name":"Troubleshooting","level":2,"score":0.25870001316070557}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.5281/zenodo.21944039","doi":"https://doi.org/10.5281/zenodo.21944039","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.21944039","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},{"id":"doi:10.5281/zenodo.21944040","doi":"https://doi.org/10.5281/zenodo.21944040","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.21944040","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},{"id":"doi:10.5281/zenodo.23560539","doi":"https://doi.org/10.5281/zenodo.23560539","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23560539","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"}],"best_oa_location":{"id":"doi:10.5281/zenodo.21944039","doi":"https://doi.org/10.5281/zenodo.21944039","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.21944039","pdf_url":null,"source":{"id":"https://openalex.org/S4306400562","display_name":"Zenodo (CERN European Organization for Nuclear Research)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I67311998","host_organization_name":"European Organization for Nuclear Research","host_organization_lineage":["https://openalex.org/I67311998"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Dataset"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7161919445","https://openalex.org/W7202247594","https://openalex.org/W7206162987","https://openalex.org/W7162662484","https://openalex.org/W7206430876","https://openalex.org/W7161159531","https://openalex.org/W7147511341","https://openalex.org/W7220654762","https://openalex.org/W7155827872","https://openalex.org/W7165984461"],"abstract_inverted_index":{"The":[0,64],"data":[1],"were":[2],"collected":[3],"from":[4,43],"a":[5,81,90],"multiprotocol":[6],"honeypot":[7],"deployment":[8],"comprising":[9],"ten":[10],"service":[11],"types":[12],"spanning":[13],"network":[14],"protocols":[15],"(SSH,":[16],"RDP,":[17],"SMB),":[18],"applications":[19],"(database,":[20],"web":[21],"server,":[22],"email),":[23],"and":[24,30,57,79],"cloud-native":[25],"attack":[26,41,72],"surfaces":[27],"(container":[28],"orchestration":[29],"ICS/SCADA).":[31],"Over":[32],"the":[33,36,67,75],"collection":[34],"period,":[35],"environment":[37],"recorded":[38],"40,153":[39],"unsolicited":[40],"events":[42],"327":[44],"distinct":[45],"source":[46],"IP":[47],"addresses,":[48],"encompassing":[49],"approximately":[50],"8,400":[51],"attacker":[52],"sessions,":[53],"8,437":[54],"captured":[55],"commands,":[56],"more":[58],"than":[59],"155,000":[60],"attempted":[61],"credential":[62],"pairs.":[63],"study":[65],"characterizes":[66],"timing":[68],"signatures":[69],"of":[70],"AI-agent-like":[71],"sessions":[73],"across":[74],"full":[76],"reconnaissance-to-exploitation":[77],"pathway":[78],"validates":[80],"behavioral":[82],"detection":[83],"rubric":[84],"against":[85,99],"known":[86],"ground":[87],"truth":[88],"in":[89],"blinded,":[91],"four-arm":[92],"controlled":[93],"experiment":[94],"(ROC-AUC":[95],"0.970":[96],"overall;":[97],"0.964":[98],"delay-matched":[100],"scripted":[101],"bots).":[102]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-08-16T00:00:00"}