{"id":"https://openalex.org/W7203633033","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11647866","title":"A Multi-Class Supervised Neural Network Framework for Cyber Threat Classification in Telecommunications Traffic","display_name":"A Multi-Class Supervised Neural Network Framework for Cyber Threat Classification in Telecommunications Traffic","publication_year":2026,"publication_date":"2026-06-01","ids":{"openalex":"https://openalex.org/W7203633033","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11647866"},"language":"en","primary_location":{"id":"doi:10.1109/iccsdfai70505.2026.11647866","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11647866","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iccsdfai70505.2026.11647866","pdf_url":null,"source":{"id":"https://openalex.org/S7407096290","display_name":"International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","raw_type":"proceedings-article"},"parent_works":[],"lineage":["https://openalex.org/W7203633033"],"child_works_count":0,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/iccsdfai70505.2026.11647866","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114443843","display_name":"Aidar Ispussinov","orcid":"https://orcid.org/0009-0001-4134-776X","observed_orcids":["https://orcid.org/0009-0001-4134-776X"]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Aidar Ispussinov","raw_affiliation_strings":["Astana IT University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University","institution_ids":["https://openalex.org/I4405257690"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106548807","display_name":"Arstan Makatov","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Arstan Makatov","raw_affiliation_strings":["Astana IT University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University","institution_ids":["https://openalex.org/I4405257690"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058152956","display_name":"Ruslan Omirgaliyev","orcid":"https://orcid.org/0000-0003-3834-2359","observed_orcids":["https://orcid.org/0000-0003-3834-2359"]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Ruslan Omirgaliyev","raw_affiliation_strings":["Astana IT University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University","institution_ids":["https://openalex.org/I4405257690"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5147348586","display_name":"Gaukhar Yerzhigitova","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Gaukhar Yerzhigitova","raw_affiliation_strings":["Astana IT University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University","institution_ids":["https://openalex.org/I4405257690"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5147344526","display_name":"Aruzhan Abdulina","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405257690","display_name":"Astana IT University","ror":"https://ror.org/05jnvbc31","country_code":"KZ","type":"education","lineage":["https://openalex.org/I4405257690"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Aruzhan Abdulina","raw_affiliation_strings":["Astana IT University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Astana IT University","institution_ids":["https://openalex.org/I4405257690"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I4405257690"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"411","last_page":"416"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyber-threat-classification","display_name":"cyber threat classification","score":0.9789999723434448},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.8629999756813049},{"id":"https://openalex.org/keywords/telecommunication-traffic","display_name":"telecommunication traffic","score":0.890999972820282},{"id":"https://openalex.org/keywords/cicids2017","display_name":"CICIDS2017","score":0.8889999985694885},{"id":"https://openalex.org/keywords/hybrid-machine-learning-and-deep-learning","display_name":"hybrid machine learning and deep learning","score":0.7889999747276306},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.6850000023841858},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.9509999752044678},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.6349999904632568},{"id":"https://openalex.org/keywords/false-positive-reduction","display_name":"false positive reduction","score":0.5460000038146973},{"id":"https://openalex.org/keywords/5g","display_name":"5G","score":0.871999979019165},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.8730000257492065},{"id":"https://openalex.org/keywords/denial-of-service-attacks","display_name":"denial-of-service attacks","score":0.8299999833106995},{"id":"https://openalex.org/keywords/web-attacks","display_name":"web attacks","score":0.6539999842643738},{"id":"https://openalex.org/keywords/feature-importance","display_name":"feature importance","score":0.550000011920929}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6376000046730042},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5562999844551086},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3905999958515167},{"id":"https://openalex.org/C192126672","wikidata":"https://www.wikidata.org/wiki/Q1068715","display_name":"Telecommunications network","level":2,"score":0.36480000615119934},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.36419999599456787},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34630000591278076},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.3366999924182892},{"id":"https://openalex.org/C51675839","wikidata":"https://www.wikidata.org/wiki/Q1665681","display_name":"Intelligent Network","level":2,"score":0.319599986076355},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.29589998722076416},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28610000014305115},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.2590000033378601}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/iccsdfai70505.2026.11647866","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11647866","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iccsdfai70505.2026.11647866","pdf_url":null,"source":{"id":"https://openalex.org/S7407096290","display_name":"International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1109/iccsdfai70505.2026.11647866","doi":"https://doi.org/10.1109/iccsdfai70505.2026.11647866","is_oa":true,"landing_page_url":"https://doi.org/10.1109/iccsdfai70505.2026.11647866","pdf_url":null,"source":{"id":"https://openalex.org/S7407096290","display_name":"International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Conference on Cybersecurity, Digital Forensics, and AI Applications (ICCSDFAI)","raw_type":"proceedings-article"},"sustainable_development_goals":[{"score":0.4943999946117401,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":13,"referenced_works":["https://openalex.org/W3043530913","https://openalex.org/W3089831155","https://openalex.org/W3217476786","https://openalex.org/W4226061308","https://openalex.org/W4284896524","https://openalex.org/W4295788744","https://openalex.org/W4296420817","https://openalex.org/W4307561204","https://openalex.org/W4381744402","https://openalex.org/W4386598127","https://openalex.org/W4399207401","https://openalex.org/W4400878470","https://openalex.org/W4409761106"],"related_works":["https://openalex.org/W7169862525","https://openalex.org/W4410318169","https://openalex.org/W7222921296","https://openalex.org/W7169883229","https://openalex.org/W7166641660","https://openalex.org/W7203716436","https://openalex.org/W2893306292","https://openalex.org/W7169499496","https://openalex.org/W7214597211","https://openalex.org/W7165656203"],"abstract_inverted_index":{"Telecommunication":[0],"environments":[1],"such":[2],"as":[3,201],"5G":[4,234],"and":[5,56,62,69,84,93,104,107,113,128,152,161,170,177,209,235,238,245],"Internet":[6],"of":[7,66,182],"Things":[8],"(IoT)":[9],"networks":[10],"generate":[11],"massive,":[12],"heterogeneous":[13],"traffic":[14,159],"that":[15,72,116,134,194],"is":[16],"increasingly":[17],"difficult":[18],"to":[19,173,178,186,247],"protect":[20],"with":[21,39,52,82,224],"traditional":[22],"signature-based":[23],"intrusion":[24,207,249],"detection":[25,150,208,250],"systems.":[26],"In":[27],"this":[28],"work":[29,241],"we":[30],"investigate":[31],"supervised":[32],"threat":[33],"classification":[34],"using":[35],"the":[36,135,144,180,187,229],"CIC-IDS-2017":[37],"dataset":[38],"a":[40,64,90],"focus":[41],"on":[42,242],"realistic":[43],"telecom":[44,120],"scenarios,":[45],"where":[46],"high":[47],"accuracy":[48],"must":[49],"be":[50,211],"balanced":[51],"low":[53],"false-positive":[54],"rates":[55],"strict":[57],"latency":[58],"constraints.":[59],"We":[60,165],"design":[61],"evaluate":[63],"family":[65],"hybrid":[67,197],"machine-learning":[68],"deep-learning":[70],"models":[71,198],"combine":[73],"classical":[74],"algorithms":[75],"(Random":[76],"Forest,":[77],"k-Nearest":[78],"Neighbors,":[79],"K-Means,":[80],"Birch)":[81],"convolutional":[83],"fully":[85],"connected":[86],"neural":[87,140,189],"architectures":[88],"under":[89,158],"unified":[91],"preprocessing":[92],"feature-engineering":[94],"pipeline.":[95],"The":[96,191,221],"study":[97],"compares":[98],"alternative":[99],"input":[100],"representations,":[101],"normalization":[102],"schemes":[103],"class-balancing":[105],"strategies,":[106],"reports":[108],"detailed":[109],"results":[110,132],"for":[111,119,205,227],"benign":[112],"attack":[114],"classes":[115],"are":[117],"critical":[118],"operators,":[121],"including":[122],"DoS,":[123],"DDoS,":[124],"infiltration,":[125],"web":[126],"attacks":[127],"brute-force":[129],"attempts.":[130],"Experimental":[131],"show":[133],"Random":[136],"Forest":[137],"plus":[138],"deep":[139],"network":[141],"configuration":[142],"achieves":[143],"best":[145],"trade-off":[146],"between":[147],"macro-average":[148],"F1-score,":[149],"rate":[151],"computational":[153],"cost,":[154],"while":[155],"preserving":[156],"robustness":[157],"imbalance":[160],"previously":[162],"unseen":[163],"flows.":[164],"further":[166],"analyze":[167],"feature":[168,184],"importance":[169],"confusion":[171],"patterns":[172],"explain":[174],"typical":[175],"misclassifications":[176],"highlight":[179],"contribution":[181],"RF-based":[183],"construction":[185],"final":[188],"classifier.":[190],"findings":[192],"indicate":[193],"carefully":[195],"engineered":[196],"can":[199,210],"serve":[200],"an":[202],"effective":[203],"core":[204],"telecom-oriented":[206],"integrated":[212],"into":[213],"existing":[214],"monitoring":[215],"pipelines":[216],"without":[217],"prohibitive":[218],"hardware":[219],"upgrades.":[220],"paper":[222],"concludes":[223],"practical":[225],"recommendations":[226],"deploying":[228],"proposed":[230],"architecture":[231],"in":[232],"real":[233],"IoT":[236],"infrastructures":[237],"outlines":[239],"future":[240],"online":[243],"learning":[244],"transferability":[246],"newer":[248],"datasets.":[251]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-08-18T00:00:00"}