{"id":"https://openalex.org/W7225014087","doi":"https://doi.org/10.5281/zenodo.23834172","title":"A DRIFT-AWARE CYBERATTACK DETECTION FRAMEWORK FOR RESOURCE-CONSTRAINED NETWORKS USING ADAPTIVE LEARNING AND UNCERTAINTY-BASED ALERTS","display_name":"A DRIFT-AWARE CYBERATTACK DETECTION FRAMEWORK FOR RESOURCE-CONSTRAINED NETWORKS USING ADAPTIVE LEARNING AND UNCERTAINTY-BASED ALERTS","publication_year":2026,"publication_date":"2026-10-31","ids":{"openalex":"https://openalex.org/W7225014087","doi":"https://doi.org/10.5281/zenodo.23834172"},"language":"en","primary_location":{"id":"doi:10.5281/zenodo.23834172","doi":"https://doi.org/10.5281/zenodo.23834172","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23834172","pdf_url":null,"source":{"id":"https://openalex.org/S7407063400","display_name":"International Journal of Engineering Technology Research & Management","issn_l":"2456-9348","issn":["2456-9348"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"volume":null,"type":"article","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.5281/zenodo.23834172","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160277465","display_name":"Sathyaraj S","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Sathyaraj S","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":["https://openalex.org/A5160277465"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.84147043,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cyberattack-detection","display_name":"cyberattack detection","score":0.9459999799728394},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.7089999914169312},{"id":"https://openalex.org/keywords/resource-constrained-networks","display_name":"resource-constrained networks","score":0.7580000162124634},{"id":"https://openalex.org/keywords/concept-drift","display_name":"concept drift","score":0.8209999799728394},{"id":"https://openalex.org/keywords/automated-alerts","display_name":"automated alerts","score":0.6629999876022339},{"id":"https://openalex.org/keywords/cicids2017","display_name":"CICIDS2017","score":0.7239999771118164},{"id":"https://openalex.org/keywords/network-flow-analysis","display_name":"network flow analysis","score":0.45899999141693115}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7813000082969666},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.616599977016449},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.51419997215271},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.49939998984336853},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4781000018119812},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.4587000012397766},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4325999915599823},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.41760000586509705},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.39169999957084656},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.3635999858379364},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.3537999987602234},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.32820001244544983},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3133000135421753},{"id":"https://openalex.org/C114809511","wikidata":"https://www.wikidata.org/wiki/Q1412924","display_name":"Flow network","level":2,"score":0.31049999594688416},{"id":"https://openalex.org/C52970973","wikidata":"https://www.wikidata.org/wiki/Q2497134","display_name":"Adaptive system","level":2,"score":0.2962000072002411},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.2953999936580658},{"id":"https://openalex.org/C20556612","wikidata":"https://www.wikidata.org/wiki/Q4469374","display_name":"Volume (thermodynamics)","level":2,"score":0.29429998993873596},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2799000144004822},{"id":"https://openalex.org/C119898033","wikidata":"https://www.wikidata.org/wiki/Q3433888","display_name":"Ensemble forecasting","level":2,"score":0.27709999680519104},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.2757999897003174},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.2671999931335449},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2549000084400177},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.5281/zenodo.23834172","doi":"https://doi.org/10.5281/zenodo.23834172","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23834172","pdf_url":null,"source":{"id":"https://openalex.org/S7407063400","display_name":"International Journal of Engineering Technology Research & Management","issn_l":"2456-9348","issn":["2456-9348"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},{"id":"doi:10.5281/zenodo.23834173","doi":"https://doi.org/10.5281/zenodo.23834173","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23834173","pdf_url":null,"source":{"id":"https://openalex.org/S7407063400","display_name":"International Journal of Engineering Technology Research & Management","issn_l":"2456-9348","issn":["2456-9348"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"}],"best_oa_location":{"id":"doi:10.5281/zenodo.23834172","doi":"https://doi.org/10.5281/zenodo.23834172","is_oa":true,"landing_page_url":"https://doi.org/10.5281/zenodo.23834172","pdf_url":null,"source":{"id":"https://openalex.org/S7407063400","display_name":"International Journal of Engineering Technology Research & Management","issn_l":"2456-9348","issn":["2456-9348"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"JournalArticle"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7221147821","https://openalex.org/W7221199299","https://openalex.org/W7126103563","https://openalex.org/W7214733765","https://openalex.org/W4414851666","https://openalex.org/W7165544325","https://openalex.org/W7139919862","https://openalex.org/W7224820391","https://openalex.org/W4310172539","https://openalex.org/W4223529215"],"abstract_inverted_index":{"Intrusion":[0],"detection":[1,55],"models":[2],"deployed":[3],"on":[4,105],"resource-constrained":[5],"networks":[6],"face":[7],"two":[8],"practical":[9],"difficulties":[10],"that":[11,57,77,114],"are":[12,229],"oftenstudied":[13],"in":[14],"isolation.":[15],"Attack":[16],"behaviour":[17,222],"changes":[18],"over":[19],"time,":[20],"so":[21],"a":[22,54,62,83,134,153,166,178,183,208],"model":[23,80,123,163],"trained":[24],"once":[25],"tends":[26],"to":[27,98,124,174],"lose":[28],"accuracy":[29],"as":[30,93,232],"thetraffic":[31],"distribution":[32],"shifts,":[33],"and":[34,82,120,150,212,228],"the":[35,42,45,79,106,116,122,130,140,161,170,188,224],"volume":[36],"of":[37,44,118,137,186,190,198,234],"generated":[38],"alerts":[39,192],"can":[40],"exceed":[41],"capacity":[43],"analysts":[46],"who":[47],"must":[48],"acton":[49],"them.":[50],"This":[51],"study":[52],"presents":[53],"framework":[56,102,132,172],"addresses":[58],"both":[59],"concerns":[60],"within":[61,177,207],"single":[63],"streamingpipeline.":[64],"An":[65],"incremental":[66],"ensemble":[67],"classifier":[68],"is":[69,91],"paired":[70],"with":[71,143],"an":[72,146],"adaptive":[73,147],"windowing":[74],"drift":[75],"monitor":[76],"governswhen":[78],"updates,":[81],"predictive-uncertainty":[84],"gate":[85],"decides":[86],"whether":[87],"each":[88,158],"flagged":[89],"flow":[90,108],"raised":[92],"anautomated":[94],"alert":[95],"or":[96],"routed":[97],"analyst":[99],"review.":[100,203],"The":[101,204],"was":[103],"evaluated":[104,225],"CICIDS2017":[107],"dataset":[109],"usinga":[110],"chronological":[111],"prequential":[112,135],"protocol":[113,129],"preserves":[115],"order":[117],"traffic":[119],"exposes":[121],"shifting":[125],"attackmixes.":[126],"Under":[127],"this":[128],"proposed":[131,171],"reached":[133],"F1-score":[136],"0.951":[138],"for":[139,145,152,202,223],"attack":[141],"class,compared":[142],"0.936":[144],"random":[148],"forest":[149],"0.862":[151],"static":[154,162],"offline":[155],"model.":[156],"After":[157],"induceddistribution":[159],"change":[160],"settled":[164],"at":[165],"lower":[167],"accuracy,":[168],"whereas":[169],"returned":[173],"itsprior":[175],"range":[176],"few":[179],"evaluation":[180],"windows.":[181],"At":[182],"gating":[184],"threshold":[185],"0.40":[187],"precision":[189],"automated":[191],"roseto":[193],"0.976":[194],"while":[195],"15":[196],"percent":[197],"flows":[199,216],"were":[200],"referred":[201],"detector":[205],"operated":[206],"256":[209],"MB":[210],"memoryprofile":[211],"sustained":[213],"roughly":[214],"1,390":[215],"per":[217],"second.":[218],"These":[219],"results":[220],"describe":[221],"datasetand":[226],"configuration":[227],"not":[230],"presented":[231],"evidence":[233],"universal":[235],"improvement.":[236]},"counts_by_year":[],"updated_date":"2026-11-02T09:45:03.842371","created_date":"2026-11-01T00:00:00"}