{"id":"https://openalex.org/W7225456728","doi":"https://doi.org/10.58496/bjml/2026/017","title":"An Explainable Ai Framework for Multi-Class Attack Classification in Mqtt-Coap-Based Hybrid Energy Monitoring Networks","display_name":"An Explainable Ai Framework for Multi-Class Attack Classification in Mqtt-Coap-Based Hybrid Energy Monitoring Networks","publication_year":2026,"publication_date":"2026-11-07","ids":{"openalex":"https://openalex.org/W7225456728","doi":"https://doi.org/10.58496/bjml/2026/017"},"language":"en","primary_location":{"id":"doi:10.58496/bjml/2026/017","doi":"https://doi.org/10.58496/bjml/2026/017","is_oa":true,"landing_page_url":"https://doi.org/10.58496/bjml/2026/017","pdf_url":"https://journals.mesopotamian.press/index.php/BJML/article/download/1210/1246","source":{"id":"https://openalex.org/S5407043201","display_name":"Babylonian Journal of Machine Learning","issn_l":"3006-5429","issn":["3006-5429"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Babylonian Journal of Machine Learning","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://journals.mesopotamian.press/index.php/BJML/article/download/1210/1246","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5161169441","display_name":"Ahmed Fakhri Abdullah","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210128557","display_name":"Ministry of Higher Education and Scientific Research","ror":"https://ror.org/03m5ehy13","country_code":"IQ","type":"government","lineage":["https://openalex.org/I4210128557"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Ahmed Fakhri Abdullah","raw_affiliation_strings":["Ministry of Higher Education and Scientific Research, 10011, Baghdad, Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ministry of Higher Education and Scientific Research, 10011, Baghdad, Iraq","institution_ids":["https://openalex.org/I4210128557"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5161221374","display_name":"Omar Ahmed Razooqi","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I72539421","display_name":"University of Tikrit","ror":"https://ror.org/01zfzax10","country_code":"IQ","type":"education","lineage":["https://openalex.org/I72539421"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Omar Ahmed Razooqi","raw_affiliation_strings":["Hadith and its Sciences Department, Islamic Sciences College, Tikrit University, Tikrit, Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Hadith and its Sciences Department, Islamic Sciences College, Tikrit University, Tikrit, Iraq","institution_ids":["https://openalex.org/I72539421"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092440248","display_name":"Oras Fadhil Khalaf","orcid":"https://orcid.org/0000-0002-7303-643X","observed_orcids":["https://orcid.org/0000-0002-7303-643X"]},"institutions":[{"id":"https://openalex.org/I4210128808","display_name":"University of Samarra","ror":"https://ror.org/032b60f45","country_code":"IQ","type":"education","lineage":["https://openalex.org/I4210128808"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Oras Fadhil Khalaf","raw_affiliation_strings":["Computer Science Department, College of Applied Sciences, University of Samarra, Samarra 34010, Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, College of Applied Sciences, University of Samarra, Samarra 34010, Iraq","institution_ids":["https://openalex.org/I4210128808"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063881482","display_name":"Ayman AbuBaker","orcid":"https://orcid.org/0000-0002-4553-8037","observed_orcids":["https://orcid.org/0000-0002-4553-8037"]},"institutions":[{"id":"https://openalex.org/I146367977","display_name":"Applied Science Private University","ror":"https://ror.org/01ah6nb52","country_code":"JO","type":"education","lineage":["https://openalex.org/I146367977"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Ayman AbuBaker","raw_affiliation_strings":["Image Processing and Machine Learning, Faculty of Engineering and Technology, Applied Science Private University, Amman, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Image Processing and Machine Learning, Faculty of Engineering and Technology, Applied Science Private University, Amman, Jordan","institution_ids":["https://openalex.org/I146367977"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120090891","display_name":"Amer Alqutaish","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4626487","display_name":"King Faisal University","ror":"https://ror.org/00dn43547","country_code":"SA","type":"education","lineage":["https://openalex.org/I4626487"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Amer Alqutaish","raw_affiliation_strings":["Deanship of Development and Quality Assurance, King Faisal University, Al-Ahsa, 31982, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Deanship of Development and Quality Assurance, King Faisal University, Al-Ahsa, 31982, Saudi Arabia","institution_ids":["https://openalex.org/I4626487"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5161239777","display_name":"Saidah Khan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4405252811","display_name":"Griffith College","ror":"https://ror.org/0006cvt76","country_code":"IE","type":"education","lineage":["https://openalex.org/I4405252811"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Saidah Khan","raw_affiliation_strings":["Faculty of Computing, Griffith College, Dublin, Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computing, Griffith College, Dublin, Ireland","institution_ids":["https://openalex.org/I4405252811"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2026","issue":null,"first_page":"274","last_page":"312"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13429","display_name":"Electricity Theft Detection Techniques","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/explainable-ai","display_name":"explainable AI","score":0.8320000171661377},{"id":"https://openalex.org/keywords/attack-classification","display_name":"attack classification","score":0.7419999837875366},{"id":"https://openalex.org/keywords/mqtt","display_name":"MQTT","score":0.6230000257492065},{"id":"https://openalex.org/keywords/constrained-application-protocol","display_name":"CoAP","score":0.9850000143051147},{"id":"https://openalex.org/keywords/microgrids","display_name":"microgrids","score":0.8669999837875366},{"id":"https://openalex.org/keywords/cyberattack-detection","display_name":"cyberattack detection","score":0.7239999771118164},{"id":"https://openalex.org/keywords/false-data-injection-attacks","display_name":"false data injection attacks","score":0.7950000166893005},{"id":"https://openalex.org/keywords/energy-monitoring","display_name":"energy consumption monitoring","score":0.3059999942779541},{"id":"https://openalex.org/keywords/treeshap","display_name":"TreeSHAP","score":0.8029999732971191},{"id":"https://openalex.org/keywords/boosted-trees","display_name":"boosted trees","score":0.5540000200271606},{"id":"https://openalex.org/keywords/transfer-learning","display_name":"transfer learning","score":0.5149999856948853},{"id":"https://openalex.org/keywords/stealthy-attacks","display_name":"stealthy attacks","score":0.5419999957084656}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5587999820709229},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.5378999710083008},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.477400004863739},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.45899999141693115},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.4323999881744385},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4002000093460083},{"id":"https://openalex.org/C2776175482","wikidata":"https://www.wikidata.org/wiki/Q1195816","display_name":"Transfer (computing)","level":2,"score":0.3732999861240387},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.34130001068115234},{"id":"https://openalex.org/C44249647","wikidata":"https://www.wikidata.org/wiki/Q208498","display_name":"Confidence interval","level":2,"score":0.33820000290870667},{"id":"https://openalex.org/C186370098","wikidata":"https://www.wikidata.org/wiki/Q442787","display_name":"Energy (signal processing)","level":2,"score":0.33649998903274536},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3314000070095062},{"id":"https://openalex.org/C55078378","wikidata":"https://www.wikidata.org/wiki/Q1136628","display_name":"Pearson product-moment correlation coefficient","level":2,"score":0.3278000056743622},{"id":"https://openalex.org/C2780092901","wikidata":"https://www.wikidata.org/wiki/Q3433612","display_name":"Correlation coefficient","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.3253999948501587},{"id":"https://openalex.org/C105795698","wikidata":"https://www.wikidata.org/wiki/Q12483","display_name":"Statistics","level":1,"score":0.32350000739097595},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.31839999556541443},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.3109000027179718},{"id":"https://openalex.org/C163258240","wikidata":"https://www.wikidata.org/wiki/Q25342","display_name":"Power (physics)","level":2,"score":0.3052000105381012},{"id":"https://openalex.org/C117220453","wikidata":"https://www.wikidata.org/wiki/Q5172842","display_name":"Correlation","level":2,"score":0.29170000553131104},{"id":"https://openalex.org/C34602496","wikidata":"https://www.wikidata.org/wiki/Q2271882","display_name":"Sequential probability ratio test","level":2,"score":0.29159998893737793},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2822999954223633},{"id":"https://openalex.org/C87007009","wikidata":"https://www.wikidata.org/wiki/Q210832","display_name":"Statistical hypothesis testing","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2741999924182892},{"id":"https://openalex.org/C75778745","wikidata":"https://www.wikidata.org/wiki/Q342626","display_name":"Lag","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C2778067643","wikidata":"https://www.wikidata.org/wiki/Q166507","display_name":"Interval (graph theory)","level":2,"score":0.26510000228881836},{"id":"https://openalex.org/C2989486834","wikidata":"https://www.wikidata.org/wiki/Q3808900","display_name":"True positive rate","level":2,"score":0.2619999945163727},{"id":"https://openalex.org/C58471807","wikidata":"https://www.wikidata.org/wiki/Q327120","display_name":"Receiver operating characteristic","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.26010000705718994},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.25999999046325684},{"id":"https://openalex.org/C40969351","wikidata":"https://www.wikidata.org/wiki/Q3516228","display_name":"Word error rate","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.250900000333786}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.58496/bjml/2026/017","doi":"https://doi.org/10.58496/bjml/2026/017","is_oa":true,"landing_page_url":"https://doi.org/10.58496/bjml/2026/017","pdf_url":"https://journals.mesopotamian.press/index.php/BJML/article/download/1210/1246","source":{"id":"https://openalex.org/S5407043201","display_name":"Babylonian Journal of Machine Learning","issn_l":"3006-5429","issn":["3006-5429"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Babylonian Journal of Machine Learning","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.58496/bjml/2026/017","doi":"https://doi.org/10.58496/bjml/2026/017","is_oa":true,"landing_page_url":"https://doi.org/10.58496/bjml/2026/017","pdf_url":"https://journals.mesopotamian.press/index.php/BJML/article/download/1210/1246","source":{"id":"https://openalex.org/S5407043201","display_name":"Babylonian Journal of Machine Learning","issn_l":"3006-5429","issn":["3006-5429"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Babylonian Journal of Machine Learning","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320331156","display_name":"King Faisal University","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225456728.pdf","grobid_xml":"https://content.openalex.org/works/W7225456728.grobid-xml"},"referenced_works_count":19,"referenced_works":["https://openalex.org/W1970463904","https://openalex.org/W2216946510","https://openalex.org/W2594475271","https://openalex.org/W2809283485","https://openalex.org/W2999615587","https://openalex.org/W3027336681","https://openalex.org/W3035716901","https://openalex.org/W3080847572","https://openalex.org/W3096448935","https://openalex.org/W3098620325","https://openalex.org/W3179950556","https://openalex.org/W4210659135","https://openalex.org/W4307571902","https://openalex.org/W4313116287","https://openalex.org/W4392659674","https://openalex.org/W4410355236","https://openalex.org/W7126151034","https://openalex.org/W7161282771","https://openalex.org/W7201963467"],"related_works":["https://openalex.org/W7223697682","https://openalex.org/W4405233435","https://openalex.org/W4416104393","https://openalex.org/W7119476558","https://openalex.org/W3202093977","https://openalex.org/W7163740374","https://openalex.org/W7161537945","https://openalex.org/W7165656203","https://openalex.org/W7118326775","https://openalex.org/W7164439536"],"abstract_inverted_index":{"Hybrid":[0],"renewable-energy":[1],"microgrids":[2],"communicate":[3],"through":[4],"lightweight":[5],"MQTT":[6],"and":[7,13,47,88,118,153,178,211,227,240,245,249],"CoAP":[8],"links,":[9],"exposing":[10],"network":[11],"traffic":[12,70],"sensor":[14],"measurements":[15],"to":[16,134,169,196],"cyberattacks.":[17],"This":[18],"study":[19],"presents":[20],"an":[21],"explainable":[22],"framework":[23],"for":[24,165,171,175,182,220,253],"multi-class":[25],"attack":[26,45,65,143,186],"classification":[27,238],"using":[28],"reproducible":[29],"message-level":[30],"co-simulation":[31],"of":[32,50,104,113,116,121,151,216,225],"a":[33,77,85,98,102,154,197,201],"photovoltaic\u2013wind\u2013diesel\u2013battery":[34],"microgrid.":[35],"The":[36,54],"simulation":[37],"incorporates":[38],"exact":[39],"power":[40],"balance,":[41],"eleven":[42],"sensors,":[43],"six":[44],"families,":[46],"five":[48,141,191],"categories":[49],"challenging":[51],"benign":[52],"events.":[53],"dataset":[55],"contains":[56],"86,400":[57],"thirty-second":[58],"windows":[59],"spanning":[60],"30":[61],"days,":[62],"including":[63],"878":[64],"bursts.":[66],"Sixty-eight":[67],"features":[68],"combine":[69],"statistics":[71],"with":[72,97,147,213],"energy-consistency":[73],"residuals":[74],"calibrated":[75],"during":[76],"clean":[78],"commissioning":[79],"interval.":[80],"Evaluation":[81],"uses":[82],"chronological":[83],"partitioning,":[84],"purge":[86],"gap,":[87],"block-bootstrap":[89],"confidence":[90,107],"intervals.":[91],"Among":[92],"seven":[93,124],"classifiers,":[94],"boosted":[95],"trees":[96],"five-window":[99],"lag":[100],"achieve":[101],"macro-F1":[103,189],"0.913":[105],"(95%":[106],"interval:":[108],"0.893\u20130.927),":[109],"Matthews":[110],"correlation":[111],"coefficient":[112],"0.907,":[114],"accuracy":[115],"0.978,":[117],"macro-averaged":[119],"ROC-AUC":[120],"0.974":[122],"on":[123,158],"unseen":[125],"days.":[126],"Random":[127],"partitioning":[128],"inflates":[129],"false-data-injection":[130],"F1":[131,149],"by":[132,190],"up":[133],"13":[135],"percentage":[136,192],"points.":[137],"All":[138],"bursts":[139],"across":[140],"network-visible":[142],"classes":[144],"are":[145,251],"detected,":[146],"class":[148],"scores":[150],"0.93\u20130.98":[152],"1.2%":[155],"false-alarm":[156],"rate":[157],"normal":[159],"windows.":[160],"However,":[161],"window-level":[162],"detection":[163],"rates":[164],"false-data":[166],"injection":[167],"fall":[168],"81%":[170],"bias":[172],"attacks,":[173,177],"65%":[174],"ramp":[176],"at":[179],"most":[180],"10%":[181],"energy-balance-preserving":[183],"attacks.":[184],"Halving":[185],"intensity":[187],"reduces":[188],"points,":[193],"while":[194],"transfer":[195],"second":[198],"site":[199,246],"produces":[200],"twelve-point":[202],"reduction":[203],"before":[204],"local":[205],"adaptation.":[206],"TreeSHAP":[207],"explanations":[208],"demonstrate":[209],"faithfulness":[210],"stability,":[212],"deletion":[214],"AUC":[215],"0.22":[217],"versus":[218],"0.51":[219],"random":[221],"rankings,":[222],"top-five":[223],"overlap":[224],"0.89,":[226],"approximately":[228],"one-millisecond":[229],"computation":[230],"per":[231],"window.":[232],"These":[233],"simulation-based":[234],"findings":[235],"highlight":[236],"both":[237],"effectiveness":[239],"limitations":[241],"under":[242],"stealthy":[243],"attacks":[244],"changes;":[247],"code":[248],"data":[250],"released":[252],"replication.":[254]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-11-08T00:00:00"}