{"id":"https://openalex.org/W7220729986","doi":"https://doi.org/10.1109/rusautocon69876.2026.11707505","title":"Adaptive Divergence-Based Detection of Port Scanning Attacks in Network Traffic","display_name":"Adaptive Divergence-Based Detection of Port Scanning Attacks in Network Traffic","publication_year":2026,"publication_date":"2026-09-01","ids":{"openalex":"https://openalex.org/W7220729986","doi":"https://doi.org/10.1109/rusautocon69876.2026.11707505"},"language":"en","primary_location":{"id":"doi:10.1109/rusautocon69876.2026.11707505","doi":"https://doi.org/10.1109/rusautocon69876.2026.11707505","is_oa":true,"landing_page_url":"https://doi.org/10.1109/rusautocon69876.2026.11707505","pdf_url":null,"source":{"id":"https://openalex.org/S4306498558","display_name":"International Russian Automation Conference (RusAutoCon)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Russian Automation Conference (RusAutoCon)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/rusautocon69876.2026.11707505","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5022031674","display_name":"Tojiyev Ma'ruf Ruzikulovich","orcid":"https://orcid.org/0000-0002-9352-8650","observed_orcids":["https://orcid.org/0000-0002-9352-8650"]},"institutions":[{"id":"https://openalex.org/I1299170990","display_name":"Samarkand State University named after Sharof Rashidov","ror":"https://ror.org/02b6gy972","country_code":"UZ","type":"education","lineage":["https://openalex.org/I1299170990"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Maruf Tojiyev","raw_affiliation_strings":["Samarkand State University named after Sharof Rashidov"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Samarkand State University named after Sharof Rashidov","institution_ids":["https://openalex.org/I1299170990"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5148771685","display_name":"Bahtiyor Holmuhamedov","orcid":"https://orcid.org/0000-0002-8546-8192","observed_orcids":["https://orcid.org/0000-0002-8546-8192"]},"institutions":[{"id":"https://openalex.org/I1299170990","display_name":"Samarkand State University named after Sharof Rashidov","ror":"https://ror.org/02b6gy972","country_code":"UZ","type":"education","lineage":["https://openalex.org/I1299170990"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Bahtiyor Holmuhamedov","raw_affiliation_strings":["Samarkand State University named after Sharof Rashidov"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Samarkand State University named after Sharof Rashidov","institution_ids":["https://openalex.org/I1299170990"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5119638651","display_name":"Sofiyaxon Usmonova","orcid":"https://orcid.org/0009-0006-0804-4886","observed_orcids":["https://orcid.org/0009-0006-0804-4886"]},"institutions":[{"id":"https://openalex.org/I4405263231","display_name":"Kokand State University","ror":"https://ror.org/0468e4316","country_code":"UZ","type":"education","lineage":["https://openalex.org/I4405263231"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Sofiyaxon Usmonova","raw_affiliation_strings":["Kokand State University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Kokand State University","institution_ids":["https://openalex.org/I4405263231"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"372","last_page":"377"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/port-scanning-detection","display_name":"port scanning detection","score":0.9800000190734863},{"id":"https://openalex.org/keywords/network-intrusion-detection","display_name":"network intrusion detection","score":0.7549999952316284},{"id":"https://openalex.org/keywords/jensen-shannon-divergence","display_name":"Jensen-Shannon divergence","score":0.8740000128746033},{"id":"https://openalex.org/keywords/rolling-window-analysis","display_name":"sliding window analysis","score":0.5519999861717224},{"id":"https://openalex.org/keywords/multi-armed-bandits","display_name":"multi-armed bandits","score":0.8619999885559082},{"id":"https://openalex.org/keywords/thompson-sampling","display_name":"Thompson sampling","score":0.9990000128746033},{"id":"https://openalex.org/keywords/adaptive-thresholding","display_name":"adaptive thresholding","score":0.7419999837875366},{"id":"https://openalex.org/keywords/traffic-anomaly-detection","display_name":"traffic anomaly detection","score":0.5239999890327454},{"id":"https://openalex.org/keywords/random-forest-classification","display_name":"random forest classification","score":0.7239999771118164},{"id":"https://openalex.org/keywords/real-time-intrusion-detection","display_name":"real-time intrusion detection","score":0.7089999914169312}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5824000239372253},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3549000024795532},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.295199990272522},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.28049999475479126},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27730000019073486},{"id":"https://openalex.org/C32802771","wikidata":"https://www.wikidata.org/wiki/Q2443617","display_name":"Port (circuit theory)","level":2,"score":0.27639999985694885},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2694999873638153},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2522999942302704},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.249099999666214},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.2337000072002411}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/rusautocon69876.2026.11707505","doi":"https://doi.org/10.1109/rusautocon69876.2026.11707505","is_oa":true,"landing_page_url":"https://doi.org/10.1109/rusautocon69876.2026.11707505","pdf_url":null,"source":{"id":"https://openalex.org/S4306498558","display_name":"International Russian Automation Conference (RusAutoCon)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Russian Automation Conference (RusAutoCon)","raw_type":"proceedings-article"}],"best_oa_location":{"id":"doi:10.1109/rusautocon69876.2026.11707505","doi":"https://doi.org/10.1109/rusautocon69876.2026.11707505","is_oa":true,"landing_page_url":"https://doi.org/10.1109/rusautocon69876.2026.11707505","pdf_url":null,"source":{"id":"https://openalex.org/S4306498558","display_name":"International Russian Automation Conference (RusAutoCon)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 International Russian Automation Conference (RusAutoCon)","raw_type":"proceedings-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W1649901946","https://openalex.org/W1744212210","https://openalex.org/W1985987493","https://openalex.org/W1995875735","https://openalex.org/W2012608311","https://openalex.org/W2085305295","https://openalex.org/W2099940443","https://openalex.org/W2100537916","https://openalex.org/W2122646361","https://openalex.org/W2141910941","https://openalex.org/W2142889610","https://openalex.org/W2143991132","https://openalex.org/W2146950091","https://openalex.org/W2164532265","https://openalex.org/W2170196582","https://openalex.org/W2342408547","https://openalex.org/W2789828921","https://openalex.org/W2893143447","https://openalex.org/W2911964244","https://openalex.org/W2936630130","https://openalex.org/W3138598418","https://openalex.org/W4206547457","https://openalex.org/W4313591247","https://openalex.org/W4321497442","https://openalex.org/W4361010174","https://openalex.org/W7131903582"],"related_works":["https://openalex.org/W3147860331","https://openalex.org/W2393091084","https://openalex.org/W104746610","https://openalex.org/W7171704717","https://openalex.org/W3174882597","https://openalex.org/W4255432205","https://openalex.org/W2737440532","https://openalex.org/W2025795933","https://openalex.org/W7100287322","https://openalex.org/W2076707705"],"abstract_inverted_index":{"Port":[0],"scanning":[1,51,63,202],"is":[2,139,197],"one":[3],"of":[4,90,120],"the":[5,117,144,157],"most":[6],"common":[7],"reconnaissance":[8],"techniques":[9],"used":[10],"by":[11,156],"attackers":[12],"to":[13,36,141,183],"identify":[14],"active":[15],"hosts,":[16],"open":[17],"ports,":[18,92],"and":[19,29,49,78,96,101,148,179,190,206],"vulnerable":[20],"services":[21],"before":[22],"launching":[23],"more":[24],"complex":[25],"cyberattacks.":[26],"Traditional":[27],"rule-based":[28],"static":[30],"threshold-based":[31],"detection":[32,185],"methods":[33],"often":[34],"fail":[35],"maintain":[37],"reliable":[38],"performance":[39],"in":[40,65,204],"dynamic":[41,205],"network":[42,66,72,208],"environments,":[43],"especially":[44],"under":[45],"variable":[46],"traffic":[47,73,107,122,153],"loads":[48],"low-rate":[50],"behavior.":[52,125],"This":[53],"paper":[54],"proposes":[55],"an":[56],"adaptive":[57,158,176],"divergence-based":[58],"approach":[59,196],"for":[60,199],"detecting":[61,200],"port":[62,201],"attacks":[64],"traffic.":[67],"The":[68,112,169,195],"proposed":[69,170],"method":[70],"models":[71],"as":[74],"a":[75,104,131,165],"time-dependent":[76],"stream":[77],"analyzes":[79],"it":[80],"using":[81,109,164],"sliding":[82,145],"observation":[83],"windows.":[84],"Within":[85],"each":[86],"window,":[87],"probability":[88],"distributions":[89],"destination":[91],"source":[93],"IP":[94],"addresses,":[95],"protocol":[97],"types":[98],"are":[99,161],"constructed":[100],"compared":[102],"with":[103],"baseline":[105],"normal":[106,124],"profile":[108],"Jensen-Shannon":[110],"Divergence.":[111],"resulting":[113],"divergence":[114,159,174],"score":[115],"represents":[116],"statistical":[118,173],"deviation":[119],"current":[121],"from":[123],"To":[126],"avoid":[127],"manual":[128],"parameter":[129,177],"selection,":[130],"Multi-Armed":[132],"Bandit":[133],"mechanism":[134],"based":[135],"on":[136],"Thompson":[137],"Sampling":[138],"introduced":[140],"dynamically":[142],"optimize":[143],"window":[146],"size":[147],"threshold":[149],"sensitivity":[150],"coefficient.":[151],"Suspicious":[152],"segments":[154],"identified":[155],"layer":[160],"further":[162],"classified":[163],"Random":[166],"Forest":[167],"classifier.":[168],"framework":[171],"combines":[172],"analysis,":[175],"optimization,":[178],"machine":[180],"learning-based":[181],"classification":[182],"improve":[184],"robustness,":[186],"reduce":[187],"false":[188],"alarms,":[189],"support":[191],"real-time":[192],"intrusion":[193],"detection.":[194],"suitable":[198],"activities":[203],"high-throughput":[207],"environments.":[209]},"counts_by_year":[],"updated_date":"2026-11-08T12:12:28.789561","created_date":"2026-10-07T00:00:00"}