{"id":"https://openalex.org/W7225816998","doi":"https://doi.org/10.23939/csn2026.02.071","title":"EFFECTIVENESS AND LIMITS OF ARTIFICIAL INTELLIGENCE IN CYBER DEFENSE: ANALYSIS OF MODEL CLASSES AND PRACTICAL EXPERIENCE IN DEVELOPING A HYBRID ANTIVIRUS SOLUTION","display_name":"EFFECTIVENESS AND LIMITS OF ARTIFICIAL INTELLIGENCE IN CYBER DEFENSE: ANALYSIS OF MODEL CLASSES AND PRACTICAL EXPERIENCE IN DEVELOPING A HYBRID ANTIVIRUS SOLUTION","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225816998","doi":"https://doi.org/10.23939/csn2026.02.071"},"language":"en","primary_location":{"id":"doi:10.23939/csn2026.02.071","doi":"https://doi.org/10.23939/csn2026.02.071","is_oa":true,"landing_page_url":"https://doi.org/10.23939/csn2026.02.071","pdf_url":null,"source":{"id":"https://openalex.org/S4210238343","display_name":"Komp'\u00fbtern\u00ec sistemi ta mere\u017e\u00ec","issn_l":"2707-2371","issn":["2707-2371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer systems and network","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.23939/csn2026.02.071","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5004170524","display_name":"Nazarii R. Dzianyi","orcid":"https://orcid.org/0000-0001-9101-3701","observed_orcids":["https://orcid.org/0000-0001-9101-3701"]},"institutions":[{"id":"https://openalex.org/I98435010","display_name":"Lviv Polytechnic National University","ror":"https://ror.org/0542q3127","country_code":"UA","type":"education","lineage":["https://openalex.org/I98435010"]}],"countries":["UA"],"is_corresponding":false,"raw_author_name":"N. R. Dzianyi","raw_affiliation_strings":["Lviv Polytechnic National University"],"raw_orcid":"https://orcid.org/0000-0001-9101-3701","affiliations":[{"raw_affiliation_string":"Lviv Polytechnic National University","institution_ids":["https://openalex.org/I98435010"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5161494774","display_name":"O. O. Mokryy","orcid":"https://orcid.org/0009-0004-3088-3630","observed_orcids":["https://orcid.org/0009-0004-3088-3630"]},"institutions":[{"id":"https://openalex.org/I98435010","display_name":"Lviv Polytechnic National University","ror":"https://ror.org/0542q3127","country_code":"UA","type":"education","lineage":["https://openalex.org/I98435010"]}],"countries":["UA"],"is_corresponding":false,"raw_author_name":"O. O. Mokryy","raw_affiliation_strings":["Lviv Polytechnic National University"],"raw_orcid":"https://orcid.org/0009-0004-3088-3630","affiliations":[{"raw_affiliation_string":"Lviv Polytechnic National University","institution_ids":["https://openalex.org/I98435010"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I98435010"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"8","issue":"2","first_page":"71","last_page":"79"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C111219384","wikidata":"https://www.wikidata.org/wiki/Q6954384","display_name":"NIST","level":2,"score":0.7321000099182129},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7314000129699707},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.664900004863739},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5583000183105469},{"id":"https://openalex.org/C173801870","wikidata":"https://www.wikidata.org/wiki/Q201413","display_name":"Heuristic","level":2,"score":0.5501999855041504},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5371000170707703},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5042999982833862},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.48170000314712524},{"id":"https://openalex.org/C527412718","wikidata":"https://www.wikidata.org/wiki/Q855395","display_name":"Interpretation (philosophy)","level":2,"score":0.47029998898506165},{"id":"https://openalex.org/C2779227376","wikidata":"https://www.wikidata.org/wiki/Q6505497","display_name":"Layer (electronics)","level":2,"score":0.3614000082015991},{"id":"https://openalex.org/C100660578","wikidata":"https://www.wikidata.org/wiki/Q18733","display_name":"Recall","level":2,"score":0.35370001196861267},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.3490999937057495},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.34209999442100525},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2888999879360199},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28870001435279846},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.26330000162124634},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.2524999976158142}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.23939/csn2026.02.071","doi":"https://doi.org/10.23939/csn2026.02.071","is_oa":true,"landing_page_url":"https://doi.org/10.23939/csn2026.02.071","pdf_url":null,"source":{"id":"https://openalex.org/S4210238343","display_name":"Komp'\u00fbtern\u00ec sistemi ta mere\u017e\u00ec","issn_l":"2707-2371","issn":["2707-2371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer systems and network","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.23939/csn2026.02.071","doi":"https://doi.org/10.23939/csn2026.02.071","is_oa":true,"landing_page_url":"https://doi.org/10.23939/csn2026.02.071","pdf_url":null,"source":{"id":"https://openalex.org/S4210238343","display_name":"Komp'\u00fbtern\u00ec sistemi ta mere\u017e\u00ec","issn_l":"2707-2371","issn":["2707-2371"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer systems and network","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W2766343248","https://openalex.org/W2773446523","https://openalex.org/W2798159728","https://openalex.org/W4317748910","https://openalex.org/W4390317718","https://openalex.org/W4392667162","https://openalex.org/W4401004521","https://openalex.org/W4402926377","https://openalex.org/W4408343551","https://openalex.org/W4414594130"],"related_works":[],"abstract_inverted_index":{"Purpose:":[0],"to":[1,21,25,42],"analyze":[2],"the":[3,27,44,53,74,84,99,102,108],"feasibility":[4],"of":[5,9,46,62,73,83,94,127],"applying":[6],"different":[7],"classes":[8,183],"artificial":[10],"intelligence":[11],"models":[12,133],"(classical":[13],"machine":[14,113],"learning,":[15,17],"deep":[16],"large":[18,131],"language":[19,132],"models)":[20],"cyber":[22,177],"defense":[23,178],"tasks,":[24],"determine":[26],"functional":[28],"areas":[29],"each":[30],"class":[31],"is":[32],"responsible":[33],"for":[34,124,175],"within":[35],"a":[36,70,91,119],"hybrid":[37,56,196],"threat":[38],"detection":[39],"system,":[40],"and":[41,64,88,140,186,192],"assess":[43],"limits":[45],"their":[47],"effectiveness":[48],"based":[49],"on":[50,90,115],"experience":[51],"developing":[52],"AI":[54,181,190],"FileGuard":[55],"solution.":[57],"Method:":[58],"an":[59,138,145],"analytical":[60],"review":[61],"publications":[63],"industry":[65],"reports":[66],"(2017-2026)":[67],"combined":[68],"with":[69,188],"reflective":[71],"analysis":[72,126],"authors\u2019":[75],"own":[76],"prototype,":[77],"complemented":[78],"by":[79],"reproducible":[80],"quantitative":[81],"testing":[82],"static":[85,125],"layers":[86],"(signature-based":[87],"heuristic)":[89],"labelled":[92],"dataset":[93],"1195":[95],"files":[96],"(903":[97],"in":[98],"PE":[100,128,155],"subset);":[101],"LLM":[103],"layer":[104],"was":[105],"left":[106],"outside":[107],"current":[109],"measurement.":[110],"Findings:":[111],"classical":[112,163],"learning":[114],"structured":[116],"features":[117],"remains":[118],"competitive":[120],"or":[121],"superior":[122],"baseline":[123],"files,":[129],"while":[130],"are":[134,184],"effective":[135],"only":[136],"as":[137,144],"interpretation":[139],"analyst-support":[141],"layer,":[142],"not":[143],"independent":[146],"detector.":[147],"The":[148],"as-shipped":[149],"configuration":[150],"yields":[151,157],"FPR":[152,170],"=":[153,172],"100%;":[154],"heuristic":[156],"61%":[158],"recall":[159,167],"at":[160,168],"5%":[161],"FPR;":[162],"ML":[164],"reaches":[165],"94.5%":[166],"3.3%":[169],"(AUC":[171],"0.992).":[173],"Criteria":[174],"distributing":[176],"functions":[179],"among":[180],"model":[182],"systematized":[185],"aligned":[187],"NIST":[189],"RMF":[191],"MITRE":[193],"ATLAS,":[194],"supporting":[195],"threat-detection":[197],"system":[198],"design.":[199]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}