{"id":"https://openalex.org/W7216631323","doi":"https://doi.org/10.5281/zenodo.24146159","title":"Multi-Expert Deep Learning Framework for DNS Attack Detection Using Adaptive Threshold Optimization and Zero-Data-Loss Temporal Modeling","display_name":"Multi-Expert Deep Learning Framework for DNS Attack Detection Using Adaptive Threshold Optimization and Zero-Data-Loss Temporal Modeling","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7216631323","doi":"https://doi.org/10.5281/zenodo.24146159"},"language":"en","primary_location":{"id":"pmh:oai:oai.as-proceeding.com:article/2926","doi":null,"is_oa":true,"landing_page_url":"https://as-proceeding.com/index.php/ijanser/article/view/2926","pdf_url":"https://as-proceeding.com/index.php/ijanser/article/download/2926/2780","source":{"id":"https://openalex.org/S4387288395","display_name":"International Journal of Advanced Natural Sciences and Engineering Researches","issn_l":"2980-0811","issn":["2980-0811"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2980-0811","raw_type":"info:eu-repo/semantics/article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://as-proceeding.com/index.php/ijanser/article/download/2926/2780","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5161480985","display_name":"All Sciences Academy","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"All Sciences Academy","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5161480985"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9731000065803528,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9731000065803528,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.012600000016391277,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11644","display_name":"Spam and Phishing Detection","score":0.008500000461935997,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/data-loss-prevention","display_name":"data loss prevention","score":0.75},{"id":"https://openalex.org/keywords/malware-detection","display_name":"malware detection","score":0.6740000247955322},{"id":"https://openalex.org/keywords/spam-detection","display_name":"spam detection","score":0.8899999856948853},{"id":"https://openalex.org/keywords/phishing-detection","display_name":"phishing detection","score":1.0},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.7639999985694885},{"id":"https://openalex.org/keywords/smote","display_name":"SMOTE","score":0.9210000038146973},{"id":"https://openalex.org/keywords/lstm","display_name":"LSTM","score":0.6480000019073486},{"id":"https://openalex.org/keywords/cnn-transformer","display_name":"CNN-Transformer","score":0.8930000066757202},{"id":"https://openalex.org/keywords/bilstm-with-attention","display_name":"BiLSTM with attention","score":0.9210000038146973},{"id":"https://openalex.org/keywords/confidence-fusion","display_name":"confidence fusion","score":0.503000020980835}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7527999877929688},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5961999893188477},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5406000018119812},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4668999910354614},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4535999894142151},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.44440001249313354},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.44350001215934753},{"id":"https://openalex.org/C83860907","wikidata":"https://www.wikidata.org/wiki/Q135005","display_name":"Phishing","level":3,"score":0.43619999289512634},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.4221999943256378},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.41940000653266907},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.39969998598098755},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.39649999141693115},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.3926999866962433},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.38929998874664307},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.38339999318122864},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.36149999499320984},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.33799999952316284},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.30489999055862427},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.30399999022483826},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.30300000309944153},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.29980000853538513},{"id":"https://openalex.org/C2779190172","wikidata":"https://www.wikidata.org/wiki/Q4913888","display_name":"Binary data","level":3,"score":0.2939000129699707},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.2915000021457672},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.28850001096725464},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.28839999437332153},{"id":"https://openalex.org/C173414695","wikidata":"https://www.wikidata.org/wiki/Q5510276","display_name":"Fusion mechanism","level":4,"score":0.28700000047683716},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.28060001134872437},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.2766999900341034},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.274399995803833},{"id":"https://openalex.org/C64413873","wikidata":"https://www.wikidata.org/wiki/Q21005","display_name":"Threshold limit value","level":2,"score":0.2727999985218048},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C3020028006","wikidata":"https://www.wikidata.org/wiki/Q9158","display_name":"Electronic mail","level":2,"score":0.2660999894142151},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.2603999972343445},{"id":"https://openalex.org/C92446256","wikidata":"https://www.wikidata.org/wiki/Q3306762","display_name":"Data validation","level":2,"score":0.26010000705718994},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.25870001316070557},{"id":"https://openalex.org/C2781345505","wikidata":"https://www.wikidata.org/wiki/Q2535979","display_name":"Blacklist","level":2,"score":0.2515000104904175}],"mesh":[],"locations_count":3,"locations":[{"id":"pmh:oai:oai.as-proceeding.com:article/2926","doi":null,"is_oa":true,"landing_page_url":"https://as-proceeding.com/index.php/ijanser/article/view/2926","pdf_url":"https://as-proceeding.com/index.php/ijanser/article/download/2926/2780","source":{"id":"https://openalex.org/S4387288395","display_name":"International Journal of Advanced Natural Sciences and Engineering Researches","issn_l":"2980-0811","issn":["2980-0811"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2980-0811","raw_type":"info:eu-repo/semantics/article"},{"id":"doi:10.5281/zenodo.24146159","doi":"https://doi.org/10.5281/zenodo.24146159","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24146159","pdf_url":null,"source":{"id":"https://openalex.org/S4387288395","display_name":"International Journal of Advanced Natural Sciences and Engineering Researches","issn_l":"2980-0811","issn":["2980-0811"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.5281/zenodo.24146160","doi":"https://doi.org/10.5281/zenodo.24146160","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.24146160","pdf_url":null,"source":{"id":"https://openalex.org/S4387288395","display_name":"International Journal of Advanced Natural Sciences and Engineering Researches","issn_l":"2980-0811","issn":["2980-0811"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"pmh:oai:oai.as-proceeding.com:article/2926","doi":null,"is_oa":true,"landing_page_url":"https://as-proceeding.com/index.php/ijanser/article/view/2926","pdf_url":"https://as-proceeding.com/index.php/ijanser/article/download/2926/2780","source":{"id":"https://openalex.org/S4387288395","display_name":"International Journal of Advanced Natural Sciences and Engineering Researches","issn_l":"2980-0811","issn":["2980-0811"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2980-0811","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7216631323.pdf","grobid_xml":"https://content.openalex.org/works/W7216631323.grobid-xml"},"referenced_works_count":26,"referenced_works":["https://openalex.org/W3177389962","https://openalex.org/W4200312841","https://openalex.org/W4200353898","https://openalex.org/W4213454094","https://openalex.org/W4214874154","https://openalex.org/W4280612546","https://openalex.org/W4283661739","https://openalex.org/W4290998444","https://openalex.org/W4298227283","https://openalex.org/W4313315642","https://openalex.org/W4361265481","https://openalex.org/W4367016553","https://openalex.org/W4386022483","https://openalex.org/W4388451370","https://openalex.org/W4390063530","https://openalex.org/W4391538698","https://openalex.org/W4405718970","https://openalex.org/W4409156599","https://openalex.org/W4410057995","https://openalex.org/W4410400884","https://openalex.org/W4410771677","https://openalex.org/W4411551231","https://openalex.org/W4411592838","https://openalex.org/W4412389049","https://openalex.org/W4412398383","https://openalex.org/W4412445511"],"related_works":["https://openalex.org/W7155634157","https://openalex.org/W7149995116","https://openalex.org/W7161728744","https://openalex.org/W7057999067","https://openalex.org/W4285328063","https://openalex.org/W4404338703","https://openalex.org/W4312478921","https://openalex.org/W3162949719","https://openalex.org/W7137980696","https://openalex.org/W4220754043"],"abstract_inverted_index":{"This":[0],"study":[1],"proposes":[2],"a":[3,30,46,79,97,103,153,173],"new":[4],"method":[5,74,161],"to":[6,60,151],"address":[7],"limitations":[8],"encountered":[9],"in":[10,204,243],"detecting":[11],"DNS-basedattacks,":[12],"such":[13],"as":[14],"data":[15,35],"leakage,":[16],"sample":[17,59],"loss,":[18],"and":[19,106,169,187,219,230],"inadequate":[20],"representation":[21],"of":[22,68,72,78,176,202],"attack-specific":[23],"behavioraldifferences.":[24],"The":[25,193],"approach":[26,233],"is":[27,52,75,88,119,132],"based":[28],"on":[29],"pipeline":[31],"that":[32,54,159,226],"structurally":[33],"prevents":[34],"leakage":[36],"through":[37],"adiscrimination":[38],"process":[39],"performed":[40],"before":[41],"the":[42,69,73,76,125,138,141,146,160,205,209,227],"sequencing":[43],"operation.":[44],"Subsequently,":[45],"padding-based":[47],"fixedlength":[48],"sequence":[49],"generation":[50],"mechanism":[51],"used":[53],"does":[55],"not":[56],"allow":[57],"any":[58],"be":[61],"lost":[62],"from":[63],"variablelength":[64],"traffic":[65,87,95,101,108],"flows.":[66],"One":[67],"key":[70],"components":[71],"design":[77],"separate":[80],"expert":[81,131,147],"model":[82],"foreach":[83],"attack":[84,177],"type.":[85],"Benign":[86],"modeled":[89],"using":[90,96,102,109,121,134],"an":[91,114,199],"LSTM":[92],"architecture,":[93],"malware":[94],"CNN\u2013Transformer":[98],"combination,":[99],"spam":[100],"Transformer-based":[104],"model,":[105],"phishing":[107,190],"aBiLSTM":[110],"structure":[111],"enhanced":[112],"with":[113,198,215],"attention":[115],"mechanism.":[116],"Class":[117],"imbalance":[118],"addressed":[120],"SMOTEapplied":[122],"after":[123],"converting":[124],"sequences":[126],"into":[127],"vector":[128],"form.":[129],"Each":[130],"trained":[133],"binary":[135],"decisionlogic.":[136],"In":[137,172],"final":[139],"stage,":[140],"confidence":[142,231],"scores":[143,180],"produced":[144],"by":[145],"models":[148],"are":[149],"fused":[150],"obtain":[152],"singlestage":[154],"benign\u2013attack":[155],"decision.":[156],"Evaluations":[157],"show":[158],"achieves":[162],"96.24%":[163],"overall":[164],"accuracy,86.24%":[165],"recall,":[166],"44.14%":[167],"precision,":[168],"0.9691":[170],"AUROC.":[171],"specific":[174],"analysis":[175],"types,":[178],"F1":[179,200],"of0.954":[181],"for":[182,185,189],"malware,":[183],"0.905":[184],"spam,":[186],"0.770":[188],"were":[191],"obtained.":[192],"benign":[194],"class":[195],"demonstratedhigh":[196],"performance":[197,242],"value":[201],"0.993":[203],"validation":[206],"phase.":[207],"Additionally,":[208],"Brier":[210],"score":[211],"wasmeasured":[212],"at":[213,217,221],"0.0212,":[214],"FPR":[216],"3.44":[218],"FNR":[220],"13.76.":[222],"These":[223],"findings":[224],"support":[225],"attack-typespecific":[228],"specialization":[229],"fusion":[232],"provides":[234],"more":[235,237],"stable,":[236],"discriminative,":[238],"andmore":[239],"generalizable":[240],"detection":[241],"DNS":[244],"traffic.":[245]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-10-03T00:00:00"}