{"id":"https://openalex.org/W7220748415","doi":null,"title":"A Multi Method Importance and Performance Efficiency Analysis of Topological Metrics for Natural Visibility Graph Based Cyber Attack Detection","display_name":"A Multi Method Importance and Performance Efficiency Analysis of Topological Metrics for Natural Visibility Graph Based Cyber Attack Detection","publication_year":2026,"publication_date":"2026-10-01","ids":{"openalex":"https://openalex.org/W7220748415"},"language":"en","primary_location":{"id":"pmh:oai:arXiv.org:2610.02342","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.02342","pdf_url":"https://arxiv.org/pdf/2610.02342","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"volume":null,"type":"preprint","indexed_in":["arxiv"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2610.02342","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120179740","display_name":"Ali Melih Kanca","orcid":"https://orcid.org/0000-0003-3271-7463","observed_orcids":["https://orcid.org/0000-0003-3271-7463"]},"institutions":[{"id":"https://openalex.org/I173761726","display_name":"Karab\u00fck University","ror":"https://ror.org/04wy7gp54","country_code":"TR","type":"education","lineage":["https://openalex.org/I173761726"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Kanca, Ali Melih","raw_affiliation_strings":["Department of Computer Engineering , Faculty of Computing and Informatics Sciences , Karabuk University , Karabuk , T\u00fcrkiye"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering , Faculty of Computing and Informatics Sciences , Karabuk University , Karabuk , T\u00fcrkiye","institution_ids":["https://openalex.org/I173761726"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5042155028","display_name":"\u0130lker T\u00fcrker","orcid":"https://orcid.org/0000-0001-7577-4658","observed_orcids":["https://orcid.org/0000-0001-7577-4658"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Turker, Ilker","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9829000234603882,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.006200000178068876,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.652999997138977},{"id":"https://openalex.org/keywords/cyberattack-detection","display_name":"cyberattack detection","score":0.9570000171661377},{"id":"https://openalex.org/keywords/topological-measures","display_name":"topological metrics","score":0.9610000252723694},{"id":"https://openalex.org/keywords/feature-importance","display_name":"feature importance","score":0.5669999718666077},{"id":"https://openalex.org/keywords/feature-selection","display_name":"feature selection","score":0.7409999966621399},{"id":"https://openalex.org/keywords/consensus-ranking","display_name":"consensus ranking","score":0.7440000176429749},{"id":"https://openalex.org/keywords/shap","display_name":"SHAP","score":0.9169999957084656},{"id":"https://openalex.org/keywords/permutation-feature-importance","display_name":"permutation importance","score":0.8980000019073486},{"id":"https://openalex.org/keywords/boruta","display_name":"Boruta","score":0.9950000047683716},{"id":"https://openalex.org/keywords/recursive-feature-elimination","display_name":"recursive feature elimination","score":0.9990000128746033},{"id":"https://openalex.org/keywords/clustering-coefficient","display_name":"clustering coefficient","score":0.9340000152587891},{"id":"https://openalex.org/keywords/cse-cic-ids2018","display_name":"CSE-CIC-IDS2018","score":0.9190000295639038},{"id":"https://openalex.org/keywords/computational-efficiency","display_name":"computational efficiency","score":0.7160000205039978}],"concepts":[{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.5486000180244446},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.5331000089645386},{"id":"https://openalex.org/C189430467","wikidata":"https://www.wikidata.org/wiki/Q7293293","display_name":"Ranking (information retrieval)","level":2,"score":0.5049999952316284},{"id":"https://openalex.org/C123403432","wikidata":"https://www.wikidata.org/wiki/Q654068","display_name":"Visibility","level":2,"score":0.5034999847412109},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4779999852180481},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.4747999906539917},{"id":"https://openalex.org/C21308566","wikidata":"https://www.wikidata.org/wiki/Q7169365","display_name":"Permutation (music)","level":2,"score":0.4733999967575073},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.46650001406669617},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.4357999861240387},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.4108999967575073},{"id":"https://openalex.org/C173362246","wikidata":"https://www.wikidata.org/wiki/Q8216024","display_name":"Visibility graph","level":3,"score":0.4025000035762787},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3993000090122223},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.39430001378059387},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.38119998574256897},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.37700000405311584},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.3763999938964844},{"id":"https://openalex.org/C2780898871","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Performance metric","level":2,"score":0.3614000082015991},{"id":"https://openalex.org/C179799912","wikidata":"https://www.wikidata.org/wiki/Q205084","display_name":"Computational complexity theory","level":2,"score":0.35839998722076416},{"id":"https://openalex.org/C184720557","wikidata":"https://www.wikidata.org/wiki/Q7825049","display_name":"Topology (electrical circuits)","level":2,"score":0.35839998722076416},{"id":"https://openalex.org/C88230418","wikidata":"https://www.wikidata.org/wiki/Q131476","display_name":"Graph theory","level":2,"score":0.3402000069618225},{"id":"https://openalex.org/C36464697","wikidata":"https://www.wikidata.org/wiki/Q451553","display_name":"Visualization","level":2,"score":0.3212999999523163},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.319599986076355},{"id":"https://openalex.org/C75564084","wikidata":"https://www.wikidata.org/wiki/Q5597085","display_name":"Graph embedding","level":3,"score":0.31130000948905945},{"id":"https://openalex.org/C150921843","wikidata":"https://www.wikidata.org/wiki/Q1170431","display_name":"Resampling","level":2,"score":0.30570000410079956},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C191226916","wikidata":"https://www.wikidata.org/wiki/Q5384710","display_name":"Equivalence of metrics","level":4,"score":0.2718000113964081},{"id":"https://openalex.org/C106937863","wikidata":"https://www.wikidata.org/wiki/Q7236518","display_name":"Power graph analysis","level":3,"score":0.2662999927997589},{"id":"https://openalex.org/C32946077","wikidata":"https://www.wikidata.org/wiki/Q618079","display_name":"Network analysis","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C142323842","wikidata":"https://www.wikidata.org/wiki/Q7979900","display_name":"Weighted network","level":3,"score":0.26249998807907104},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2581000030040741}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:arXiv.org:2610.02342","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.02342","pdf_url":"https://arxiv.org/pdf/2610.02342","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2610.02342","doi":null,"is_oa":true,"landing_page_url":"https://arxiv.org/abs/2610.02342","pdf_url":"https://arxiv.org/pdf/2610.02342","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7220748415.pdf","grobid_xml":"https://content.openalex.org/works/W7220748415.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7214209865","https://openalex.org/W2089396968","https://openalex.org/W148815022","https://openalex.org/W4403133109","https://openalex.org/W1969292866","https://openalex.org/W7169772967","https://openalex.org/W7043749992","https://openalex.org/W6959824816","https://openalex.org/W1810489654","https://openalex.org/W7015975157"],"abstract_inverted_index":{"Natural":[0],"Visibility":[1],"Graph":[2],"(NVG)":[3],"based":[4],"analysis":[5,59],"characterizes":[6],"network":[7],"traffic":[8],"through":[9,73],"topological":[10,41],"descriptors":[11,19],"reflecting":[12],"different":[13],"structural":[14],"properties.":[15],"However,":[16],"not":[17],"all":[18],"contribute":[20],"equally":[21],"to":[22,151],"cyber-attack":[23],"classification,":[24],"and":[25,43,66,87,99,113,129,138,175],"extracting":[26],"a":[27,46,74,96,165],"large":[28],"metric":[29,161],"set":[30],"can":[31,49,163],"increase":[32],"computational":[33,55,178],"cost.":[34],"This":[35],"study":[36],"evaluates":[37],"21":[38],"NVG":[39,167],"derived":[40],"metrics":[42,109],"investigates":[44],"whether":[45],"compact":[47,166],"subset":[48],"preserve":[50],"classification":[51],"capability":[52],"while":[53],"improving":[54],"efficiency.":[56],"Four":[57],"importance":[58,159],"methods":[60],"SHAP,":[61],"grouped":[62],"Permutation":[63],"Importance,":[64],"Boruta,":[65],"Recursive":[67],"Feature":[68],"Elimination":[69],"(RFE)":[70],"are":[71,90,110],"integrated":[72],"Consensus":[75],"Ranking":[76],"strategy.":[77],"Based":[78],"on":[79],"this":[80],"ranking,":[81],"Full21,":[82,141],"Top15,":[83],"Top10,":[84],"Top7,":[85],"Top5,":[86],"Top3":[88,115],"configurations":[89],"evaluated":[91,182],"using":[92],"the":[93,117,181],"CICIDS2018":[94],"dataset,":[95],"CNN":[97],"classifier,":[98],"stratified":[100],"5":[101],"fold":[102],"cross":[103],"validation.":[104],"The":[105],"three":[106],"highest":[107,118],"ranked":[108],"avg_clustering_coeff_median,":[111],"avg_clustering_coeff_std,":[112],"avg_clustering_coeff_mean.":[114],"achieved":[116],"observed":[119,171],"mean":[120,172],"performance,":[121],"with":[122,135,169],"97.148%":[123],"accuracy,":[124],"97.055%":[125],"weighted":[126],"F1":[127],"score,":[128],"an":[130],"MCC":[131],"of":[132],"0.9675,":[133],"compared":[134],"95.999%,":[136],"95.521%,":[137],"0.9549":[139],"for":[140],"respectively.":[142],"It":[143],"also":[144],"reduced":[145],"total":[146],"runtime":[147],"from":[148],"14,961.39":[149],"s":[150,153],"589.22":[152],"(96.06%).":[154],"These":[155],"results":[156],"indicate":[157],"that":[158],"guided":[160],"reduction":[162],"provide":[164],"representation":[168],"higher":[170],"predictive":[173],"performance":[174],"substantially":[176],"lower":[177],"cost":[179],"under":[180],"setting.":[183]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2026-10-07T00:00:00"}