{"id":"https://openalex.org/W7204797969","doi":"https://doi.org/10.29072/basjs.20260213","title":"A Behavioral Swarm Intelligence Framework with a Hybrid 1D-CNN for Identifying Zero-Day Attacks in Kubernetes-Driven Hybrid Clouds","display_name":"A Behavioral Swarm Intelligence Framework with a Hybrid 1D-CNN for Identifying Zero-Day Attacks in Kubernetes-Driven Hybrid Clouds","publication_year":2026,"publication_date":"2026-08-31","ids":{"openalex":"https://openalex.org/W7204797969","doi":"https://doi.org/10.29072/basjs.20260213"},"language":"en","primary_location":{"id":"doi:10.29072/cjm64c19","doi":"https://doi.org/10.29072/cjm64c19","is_oa":true,"landing_page_url":"https://doi.org/10.29072/cjm64c19","pdf_url":"https://basjsci.edu.iq/index.php/basjsci/article/download/335/298","source":{"id":"https://openalex.org/S4387279554","display_name":"BASRA JOURNAL OF SCIENCE","issn_l":"2664-8288","issn":["2664-8288","2664-8296"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I126633494","host_organization_name":"University of Basrah","host_organization_lineage":["https://openalex.org/I126633494"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Basrah Journal of Science","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://basjsci.edu.iq/index.php/basjsci/article/download/335/298","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035728801","display_name":"Shaymaa Mohammed Abdulameer","orcid":"https://orcid.org/0000-0003-4796-4053","observed_orcids":["https://orcid.org/0000-0003-4796-4053"]},"institutions":[{"id":"https://openalex.org/I56409017","display_name":"Nahrain University","ror":"https://ror.org/05v2p9075","country_code":"IQ","type":"education","lineage":["https://openalex.org/I56409017"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Shaymaa Mohammed Abdulameer","raw_affiliation_strings":["College of Information Engineering, Al-Nahrain University, Baghdad, Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Engineering, Al-Nahrain University, Baghdad, Iraq","institution_ids":["https://openalex.org/I56409017"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058686230","display_name":"Rana M. Hasan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I12150220","display_name":"University of Mosul","ror":"https://ror.org/039cf4q47","country_code":"IQ","type":"education","lineage":["https://openalex.org/I12150220"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Rana M. Hasan","raw_affiliation_strings":["Department of Computer Sciences, College of Computer Sciences and Mathematics, University of Mosul, Mosul"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, College of Computer Sciences and Mathematics, University of Mosul, Mosul","institution_ids":["https://openalex.org/I12150220"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148814858","display_name":"Raghad AbdulHadi AbdulQader","orcid":"https://orcid.org/0000-0002-6854-4552","observed_orcids":["https://orcid.org/0000-0002-6854-4552"]},"institutions":[{"id":"https://openalex.org/I12150220","display_name":"University of Mosul","ror":"https://ror.org/039cf4q47","country_code":"IQ","type":"education","lineage":["https://openalex.org/I12150220"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Raghad AbdulHadi AbdulQader","raw_affiliation_strings":["Department of Computer Sciences, College of Computer Sciences and Mathematics, University of Mosul, Mosul"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, College of Computer Sciences and Mathematics, University of Mosul, Mosul","institution_ids":["https://openalex.org/I12150220"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5024698376","display_name":"Maamoun Ahmed","orcid":"https://orcid.org/0000-0001-8808-4576","observed_orcids":["https://orcid.org/0000-0001-8808-4576"]},"institutions":[{"id":"https://openalex.org/I4405253454","display_name":"Military Technological College","ror":"https://ror.org/00p7fpt19","country_code":"OM","type":"education","lineage":["https://openalex.org/I4405253454"]}],"countries":["OM"],"is_corresponding":false,"raw_author_name":"Maamoun Ahmed","raw_affiliation_strings":["Military Technological College, Muscat, Oman"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Military Technological College, Muscat, Oman","institution_ids":["https://openalex.org/I4405253454"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"44","issue":"2","first_page":"258","last_page":"283"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/unknown-attack-detection","display_name":"unknown attack detection","score":0.9739999771118164},{"id":"https://openalex.org/keywords/kubernetes","display_name":"Kubernetes","score":0.8849999904632568},{"id":"https://openalex.org/keywords/hybrid-cloud-security","display_name":"hybrid cloud security","score":0.8849999904632568},{"id":"https://openalex.org/keywords/1d-convolutional-neural-network","display_name":"1D convolutional neural network","score":0.8889999985694885},{"id":"https://openalex.org/keywords/network-flow-analysis","display_name":"network flow analysis","score":0.7820000052452087},{"id":"https://openalex.org/keywords/resource-usage-monitoring","display_name":"resource usage monitoring","score":0.6079999804496765},{"id":"https://openalex.org/keywords/decision-level-fusion","display_name":"decision fusion","score":0.6940000057220459},{"id":"https://openalex.org/keywords/false-positive-reduction","display_name":"false positive reduction","score":0.7020000219345093},{"id":"https://openalex.org/keywords/cloud-native-security","display_name":"cloud-native security","score":0.6980000138282776}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7635999917984009},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6884999871253967},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.6646000146865845},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.614300012588501},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5703999996185303},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5516999959945679},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.48840001225471497},{"id":"https://openalex.org/C119487961","wikidata":"https://www.wikidata.org/wiki/Q863960","display_name":"Swarm intelligence","level":3,"score":0.4569999873638153},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4555000066757202},{"id":"https://openalex.org/C112789634","wikidata":"https://www.wikidata.org/wiki/Q18207010","display_name":"False positives and false negatives","level":3,"score":0.40400001406669617},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.3898000121116638},{"id":"https://openalex.org/C181335050","wikidata":"https://www.wikidata.org/wiki/Q14915018","display_name":"Swarm behaviour","level":2,"score":0.36090001463890076},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.3440999984741211},{"id":"https://openalex.org/C100776233","wikidata":"https://www.wikidata.org/wiki/Q2532492","display_name":"Bridge (graph theory)","level":2,"score":0.3287000060081482},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.32109999656677246},{"id":"https://openalex.org/C83804111","wikidata":"https://www.wikidata.org/wiki/Q1063558","display_name":"Behavioral pattern","level":2,"score":0.3208000063896179},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.3197000026702881},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.3188999891281128},{"id":"https://openalex.org/C50897621","wikidata":"https://www.wikidata.org/wiki/Q2665508","display_name":"Hybrid system","level":2,"score":0.30489999055862427},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.29989999532699585},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2953000068664551},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.2906999886035919},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.2896000146865845},{"id":"https://openalex.org/C139502532","wikidata":"https://www.wikidata.org/wiki/Q1122090","display_name":"Computational intelligence","level":2,"score":0.28760001063346863},{"id":"https://openalex.org/C78639753","wikidata":"https://www.wikidata.org/wiki/Q3318160","display_name":"Behavioral modeling","level":2,"score":0.2867000102996826},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2799000144004822},{"id":"https://openalex.org/C85617194","wikidata":"https://www.wikidata.org/wiki/Q2072794","display_name":"Particle swarm optimization","level":2,"score":0.27559998631477356},{"id":"https://openalex.org/C33954974","wikidata":"https://www.wikidata.org/wiki/Q486494","display_name":"Sensor fusion","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.26409998536109924}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.29072/cjm64c19","doi":"https://doi.org/10.29072/cjm64c19","is_oa":true,"landing_page_url":"https://doi.org/10.29072/cjm64c19","pdf_url":"https://basjsci.edu.iq/index.php/basjsci/article/download/335/298","source":{"id":"https://openalex.org/S4387279554","display_name":"BASRA JOURNAL OF SCIENCE","issn_l":"2664-8288","issn":["2664-8288","2664-8296"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I126633494","host_organization_name":"University of Basrah","host_organization_lineage":["https://openalex.org/I126633494"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Basrah Journal of Science","raw_type":"journal-article"},{"id":"doi:10.29072/basjs.20260213","doi":"https://doi.org/10.29072/basjs.20260213","is_oa":true,"landing_page_url":"https://doi.org/10.29072/basjs.20260213","pdf_url":null,"source":{"id":"https://openalex.org/S4387279554","display_name":"BASRA JOURNAL OF SCIENCE","issn_l":"2664-8288","issn":["2664-8288","2664-8296"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I126633494","host_organization_name":"University of Basrah","host_organization_lineage":["https://openalex.org/I126633494"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Basrah Journal of Science","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.29072/cjm64c19","doi":"https://doi.org/10.29072/cjm64c19","is_oa":true,"landing_page_url":"https://doi.org/10.29072/cjm64c19","pdf_url":"https://basjsci.edu.iq/index.php/basjsci/article/download/335/298","source":{"id":"https://openalex.org/S4387279554","display_name":"BASRA JOURNAL OF SCIENCE","issn_l":"2664-8288","issn":["2664-8288","2664-8296"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I126633494","host_organization_name":"University of Basrah","host_organization_lineage":["https://openalex.org/I126633494"],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Basrah Journal of Science","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204797969.pdf","grobid_xml":"https://content.openalex.org/works/W7204797969.grobid-xml"},"referenced_works_count":14,"referenced_works":["https://openalex.org/W3185153723","https://openalex.org/W4306411400","https://openalex.org/W4308219550","https://openalex.org/W4381956001","https://openalex.org/W4385485717","https://openalex.org/W4402437224","https://openalex.org/W4404939896","https://openalex.org/W4406325182","https://openalex.org/W4408591294","https://openalex.org/W4413103941","https://openalex.org/W4415548244","https://openalex.org/W4415918357","https://openalex.org/W7118183417","https://openalex.org/W7127989854"],"related_works":["https://openalex.org/W7213988104","https://openalex.org/W7168036547","https://openalex.org/W7220702529","https://openalex.org/W7153885095","https://openalex.org/W7171725922","https://openalex.org/W7218141898","https://openalex.org/W7047811431","https://openalex.org/W7167035482","https://openalex.org/W7133317099","https://openalex.org/W7128693315"],"abstract_inverted_index":{"Zero-day":[0],"exploitation":[1],"in":[2,35,53,184],"hybrid":[3,48],"clouds":[4],"based":[5,75],"on":[6,76,88,127],"Kubernetes":[7],"is":[8,110],"difficult":[9],"to":[10,30],"detect,":[11],"as":[12,138],"traditional":[13],"signature":[14],"detection":[15,20,49,166],"systems":[16],"and":[17,27,69,93,133,145,153,170],"standalone":[18],"anomaly":[19],"models":[21,147],"are":[22,28],"running":[23,61],"out":[24],"of":[25,73,123,151,158],"context":[26],"prone":[29],"generating":[31],"numerous":[32],"false":[33,155],"positives":[34],"dynamic":[36],"workloads.":[37],"In":[38],"this":[39,43],"paper,":[40],"we":[41],"bridge":[42],"gap":[44],"with":[45,148,174],"Cerberus,":[46,125],"a":[47,54,57,62,70,111,134,154,164],"framework":[50,161],"that":[51,113,179],"integrates,":[52],"unique":[55],"manner,":[56],"container-level":[58],"behavioral":[59,77],"analysis":[60,74],"lightweight":[63],"one-dimensional":[64],"convolutional":[65],"neural":[66],"network":[67,91],"(1D-CNN)":[68],"collective":[71],"level":[72],"swarm":[78],"intelligence":[79],"(BSI).":[80],"The":[81,160],"1D-CNN":[82],"captures":[83],"low-level":[84],"anomalies":[85],"at":[86,119],"runtime":[87],"system":[89],"calls,":[90],"flows,":[92],"resource":[94],"usage,":[95],"whereas":[96],"the":[97,115,121],"BSI":[98],"identifies":[99],"anomalous":[100],"interaction":[101],"patterns":[102],"among":[103],"services.":[104],"A":[105],"weighted":[106],"decision":[107],"fusion":[108],"scheme":[109],"method":[112],"combines":[114],"two":[116],"results":[117],"aimed":[118],"improving":[120],"trustworthiness":[122],"detection.":[124],"tested":[126],"three":[128],"datasets":[129],"including":[130],"UNSW-NB15,":[131],"CIC-IDS2017,":[132],"custom":[135],"Kubernetes-specific":[136],"(termed":[137],"Kube-ZeroDay,":[139],"KZD-2026)":[140],"dataset,":[141],"outperforms":[142],"LSTM,":[143],"autoendetraining":[144],"graph-based":[146],"an":[149],"accuracy":[150],"96.8":[152],"positive":[156],"rate":[157],"2.1.":[159],"also":[162],"presents":[163],"low":[165],"latency":[167],"(29":[168],"ms)":[169],"has":[171],"good":[172],"behavior":[173],"cluster":[175],"scalability,":[176],"which":[177],"demonstrates":[178],"it":[180],"can":[181],"be":[182],"applied":[183],"practical":[185],"cloud-native":[186],"scenario.":[187]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-09-01T00:00:00"}