{"id":"https://openalex.org/W7225460902","doi":"https://doi.org/10.55670/fpll.futech.5.4.21","title":"Probabilistic-temporal modeling of network security monitoring subprocesses for multi-stage attacks in IoT networks","display_name":"Probabilistic-temporal modeling of network security monitoring subprocesses for multi-stage attacks in IoT networks","publication_year":2026,"publication_date":"2026-11-08","ids":{"openalex":"https://openalex.org/W7225460902","doi":"https://doi.org/10.55670/fpll.futech.5.4.21"},"language":"en","primary_location":{"id":"doi:10.55670/fpll.futech.5.4.21","doi":"https://doi.org/10.55670/fpll.futech.5.4.21","is_oa":true,"landing_page_url":"https://doi.org/10.55670/fpll.futech.5.4.21","pdf_url":"https://fupubco.com/futech/article/download/1149/395/2928","source":{"id":"https://openalex.org/S4387279145","display_name":"Future Technology","issn_l":"2832-0379","issn":["2832-0379"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Technology","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://fupubco.com/futech/article/download/1149/395/2928","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5108694753","display_name":"Ammar Dawood Jasim","orcid":"https://orcid.org/0000-0001-5457-8973","observed_orcids":["https://orcid.org/0000-0001-5457-8973","https://orcid.org/0009-0005-5881-7173"]},"institutions":[{"id":"https://openalex.org/I56409017","display_name":"Nahrain University","ror":"https://ror.org/05v2p9075","country_code":"IQ","type":"education","lineage":["https://openalex.org/I56409017"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Ammar Dawood Jasim","raw_affiliation_strings":["College of Information Engineering , Al-Nahrain University , Jadriya , Baghdad , Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Engineering , Al-Nahrain University , Jadriya , Baghdad , Iraq","institution_ids":["https://openalex.org/I56409017"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5161247827","display_name":"Mokhalad Al-Tameemi","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I39498419","display_name":"University of Wasit","ror":"https://ror.org/02ee2t316","country_code":"IQ","type":"education","lineage":["https://openalex.org/I39498419"]},{"id":"https://openalex.org/I56409017","display_name":"Nahrain University","ror":"https://ror.org/05v2p9075","country_code":"IQ","type":"education","lineage":["https://openalex.org/I56409017"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Mokhalad Al-Tameemi","raw_affiliation_strings":["College of Information Engineering , Al-Nahrain University , Jadriya , Baghdad , Iraq","\u00b2Department of Sociology , College of Arts , Wasit University , Al-Kut , Wasit , Iraq"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Engineering , Al-Nahrain University , Jadriya , Baghdad , Iraq","institution_ids":["https://openalex.org/I56409017"]},{"raw_affiliation_string":"\u00b2Department of Sociology , College of Arts , Wasit University , Al-Kut , Wasit , Iraq","institution_ids":["https://openalex.org/I39498419"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"5","issue":"4","first_page":"257","last_page":"269"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-security-monitoring","display_name":"network security monitoring","score":0.9729999899864197},{"id":"https://openalex.org/keywords/multi-step-attacks","display_name":"multi-stage attacks","score":0.8840000033378601},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.7680000066757202},{"id":"https://openalex.org/keywords/continuous-time-markov-chains","display_name":"continuous-time Markov chains","score":0.8970000147819519},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"anomaly detection","score":0.7450000047683716},{"id":"https://openalex.org/keywords/stream-processing","display_name":"stream processing","score":0.6959999799728394},{"id":"https://openalex.org/keywords/recurrent-neural-networks","display_name":"recurrent neural networks","score":0.7879999876022339},{"id":"https://openalex.org/keywords/stationary-distribution","display_name":"stationary distribution","score":0.7229999899864197},{"id":"https://openalex.org/keywords/processing-delay","display_name":"processing delay","score":0.656000018119812},{"id":"https://openalex.org/keywords/resource-allocation","display_name":"resource allocation","score":0.5350000262260437},{"id":"https://openalex.org/keywords/attack-prediction","display_name":"attack prediction","score":0.35100001096725464}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7702999711036682},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.6093000173568726},{"id":"https://openalex.org/C34736171","wikidata":"https://www.wikidata.org/wiki/Q918333","display_name":"Preprocessor","level":2,"score":0.5842999815940857},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.511900007724762},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4814000129699707},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.47859999537467957},{"id":"https://openalex.org/C48103436","wikidata":"https://www.wikidata.org/wiki/Q599031","display_name":"State (computer science)","level":2,"score":0.435699999332428},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42419999837875366},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.42250001430511475},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4205999970436096},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4106999933719635},{"id":"https://openalex.org/C33724603","wikidata":"https://www.wikidata.org/wiki/Q812540","display_name":"Bayesian network","level":2,"score":0.4099000096321106},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.3959999978542328},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3894999921321869},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.384799987077713},{"id":"https://openalex.org/C12426560","wikidata":"https://www.wikidata.org/wiki/Q189569","display_name":"Basis (linear algebra)","level":2,"score":0.3824000060558319},{"id":"https://openalex.org/C23224414","wikidata":"https://www.wikidata.org/wiki/Q176769","display_name":"Hidden Markov model","level":2,"score":0.3741999864578247},{"id":"https://openalex.org/C125411270","wikidata":"https://www.wikidata.org/wiki/Q18653","display_name":"Encoding (memory)","level":2,"score":0.3700000047683716},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.35830000042915344},{"id":"https://openalex.org/C19768560","wikidata":"https://www.wikidata.org/wiki/Q320727","display_name":"Dependency (UML)","level":2,"score":0.35409998893737793},{"id":"https://openalex.org/C114289077","wikidata":"https://www.wikidata.org/wiki/Q3284399","display_name":"Statistical model","level":2,"score":0.3224000036716461},{"id":"https://openalex.org/C163836022","wikidata":"https://www.wikidata.org/wiki/Q6771326","display_name":"Markov model","level":3,"score":0.3156999945640564},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3052999973297119},{"id":"https://openalex.org/C98763669","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov chain","level":2,"score":0.29679998755455017},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.2946999967098236},{"id":"https://openalex.org/C175154964","wikidata":"https://www.wikidata.org/wiki/Q380077","display_name":"Task analysis","level":3,"score":0.29100000858306885},{"id":"https://openalex.org/C49555168","wikidata":"https://www.wikidata.org/wiki/Q176583","display_name":"Stochastic matrix","level":3,"score":0.28839999437332153},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2840000092983246},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.2833000123500824},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.2815000116825104},{"id":"https://openalex.org/C13606891","wikidata":"https://www.wikidata.org/wiki/Q2623243","display_name":"Conceptual model","level":2,"score":0.2802000045776367},{"id":"https://openalex.org/C66746571","wikidata":"https://www.wikidata.org/wiki/Q1134833","display_name":"ENCODE","level":3,"score":0.27410000562667847},{"id":"https://openalex.org/C82142266","wikidata":"https://www.wikidata.org/wiki/Q3456604","display_name":"Dynamic Bayesian network","level":3,"score":0.2727999985218048},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.262800008058548},{"id":"https://openalex.org/C159877910","wikidata":"https://www.wikidata.org/wiki/Q2202883","display_name":"Autoregressive model","level":2,"score":0.25619998574256897},{"id":"https://openalex.org/C203595873","wikidata":"https://www.wikidata.org/wiki/Q25389927","display_name":"Change detection","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.55670/fpll.futech.5.4.21","doi":"https://doi.org/10.55670/fpll.futech.5.4.21","is_oa":true,"landing_page_url":"https://doi.org/10.55670/fpll.futech.5.4.21","pdf_url":"https://fupubco.com/futech/article/download/1149/395/2928","source":{"id":"https://openalex.org/S4387279145","display_name":"Future Technology","issn_l":"2832-0379","issn":["2832-0379"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Technology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.55670/fpll.futech.5.4.21","doi":"https://doi.org/10.55670/fpll.futech.5.4.21","is_oa":true,"landing_page_url":"https://doi.org/10.55670/fpll.futech.5.4.21","pdf_url":"https://fupubco.com/futech/article/download/1149/395/2928","source":{"id":"https://openalex.org/S4387279145","display_name":"Future Technology","issn_l":"2832-0379","issn":["2832-0379"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Future Technology","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225460902.pdf","grobid_xml":"https://content.openalex.org/works/W7225460902.grobid-xml"},"referenced_works_count":18,"referenced_works":["https://openalex.org/W3027747421","https://openalex.org/W3133138345","https://openalex.org/W3133618741","https://openalex.org/W3153985138","https://openalex.org/W3160455160","https://openalex.org/W3171364527","https://openalex.org/W3193598498","https://openalex.org/W4226319939","https://openalex.org/W4238209390","https://openalex.org/W4293567036","https://openalex.org/W4320491006","https://openalex.org/W4321497442","https://openalex.org/W4389064813","https://openalex.org/W4396949749","https://openalex.org/W4406521939","https://openalex.org/W4406755139","https://openalex.org/W7118170048","https://openalex.org/W7163888975"],"related_works":["https://openalex.org/W7160051497","https://openalex.org/W3195894106","https://openalex.org/W7222360724","https://openalex.org/W7213653955","https://openalex.org/W7115708855","https://openalex.org/W7221951750","https://openalex.org/W4415307817","https://openalex.org/W7217824154","https://openalex.org/W7197026606","https://openalex.org/W7125929267"],"abstract_inverted_index":{"Timely":[0],"detection":[1,163],"of":[2,22,75,160,204,210],"a":[3,30,48,94,103,124],"multistage":[4],"cyberattack":[5],"in":[6,69,142,179],"an":[7,36],"IoT":[8],"network":[9],"depends":[10],"on":[11],"the":[12,19,70,73,76,90,113,130,157,172,189,194,218],"chosen":[13],"monitoring":[14,50,104,151],"architecture,":[15],"execution":[16],"time,":[17],"and":[18,41,62,79,106,122,133,148,167,185,208,215],"transition":[20,108],"behavior":[21],"subprocesses":[23,92,190],"within":[24],"that":[25,52,156,191],"architecture.":[26,220],"This":[27],"paper":[28],"introduces":[29],"probabilistic":[31],"temporal":[32,56],"model":[33],"to":[34,102,128,174],"evaluate":[35],"NSMS":[37,91,205],"for":[38,176],"both":[39],"known":[40],"unknown":[42],"multi-stage":[43],"attacks.":[44],"First,":[45],"we":[46],"introduce":[47],"conceptual":[49],"architecture":[51,71],"organizes":[53],"streaming-data":[54],"processing,":[55],"analysis,":[57],"attack":[58,60],"classification,":[59,147],"prediction,":[61],"response":[63],"selection.":[64],"The":[65,86,153,183,198],"recurrent":[66],"neural":[67],"networks":[68],"form":[72],"basis":[74],"implementation":[77],"framework":[78,200],"are":[80],"neither":[81],"trained":[82],"nor":[83],"empirically":[84],"analyzed.":[85],"evaluated":[87],"contribution":[88],"represents":[89],"as":[93,165],"continuous-time":[95],"Markov":[96],"chain,":[97],"where":[98],"each":[99,107],"state":[100],"corresponds":[101],"task":[105],"rate":[109],"is":[110],"estimated":[111,158],"from":[112],"respective":[114],"mean":[115],"processing":[116],"time.":[117],"We":[118],"develop":[119],"state-probability":[120],"equations":[121],"use":[123],"specialized":[125],"software":[126],"tool":[127],"estimate":[129],"stationary":[131],"probabilities":[132],"successful":[134,161],"anomaly-detection":[135],"probabilities.":[136],"Numerical":[137],"evaluations":[138],"examine":[139],"how":[140],"delays":[141],"preprocessing,":[143],"syntactic":[144],"construction,":[145],"encoding,":[146],"prediction":[149],"affect":[150,193],"effectiveness.":[152],"analysis":[154],"shows":[155],"probability":[159],"anomaly":[162],"decreases":[164],"preprocessing":[166],"encoding":[168],"time":[169],"increases,":[170],"underscoring":[171],"need":[173],"account":[175],"computational":[177,211],"delay":[178],"time-critical":[180],"security":[181],"monitoring.":[182],"sensitivity":[184],"steady-state":[186],"analyses":[187],"identify":[188],"most":[192],"modeled":[195],"system's":[196],"behavior.":[197],"developed":[199],"enables":[201],"quantitative":[202],"evaluation":[203],"timing":[206],"constraints":[207],"allocation":[209],"resources":[212],"before":[213],"designing":[214],"experimentally":[216],"evaluating":[217],"learning-based":[219]},"counts_by_year":[],"updated_date":"2026-11-09T13:22:03.289127","created_date":"2026-11-08T00:00:00"}