{"id":"https://openalex.org/W4409590589","doi":"https://doi.org/10.1007/s10207-025-01026-y","title":"Detecting malicious nodes using game theory and reinforcement learning in software-defined networks","display_name":"Detecting malicious nodes using game theory and reinforcement learning in software-defined networks","publication_year":2025,"publication_date":"2025-04-19","ids":{"openalex":"https://openalex.org/W4409590589","doi":"https://doi.org/10.1007/s10207-025-01026-y"},"language":"en","primary_location":{"id":"doi:10.1007/s10207-025-01026-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01026-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01026-y.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01026-y.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028120551","display_name":"Amir Javadpour","orcid":"https://orcid.org/0000-0002-4932-1660"},"institutions":[{"id":"https://openalex.org/I63586086","display_name":"Oulu University of Applied Sciences","ror":"https://ror.org/03dvp8k55","country_code":"FI","type":"education","lineage":["https://openalex.org/I63586086"]},{"id":"https://openalex.org/I98381234","display_name":"University of Oulu","ror":"https://ror.org/03yj89h83","country_code":"FI","type":"education","lineage":["https://openalex.org/I98381234"]}],"countries":["FI"],"is_corresponding":true,"raw_author_name":"Amir Javadpour","raw_affiliation_strings":["ICTFICIAL Oy, Espoo, Finland","The Faculty of Information Technology and Electrical Engineering, University of Oulu, Oulu, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"ICTFICIAL Oy, Espoo, Finland","institution_ids":[]},{"raw_affiliation_string":"The Faculty of Information Technology and Electrical Engineering, University of Oulu, Oulu, Finland","institution_ids":["https://openalex.org/I63586086","https://openalex.org/I98381234"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5035869784","display_name":"Forough Ja\u2019fari","orcid":"https://orcid.org/0000-0001-7176-9456"},"institutions":[{"id":"https://openalex.org/I133529467","display_name":"Sharif University of Technology","ror":"https://ror.org/024c2fq17","country_code":"IR","type":"education","lineage":["https://openalex.org/I133529467"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Forough Ja\u2019fari","raw_affiliation_strings":["Department of Computer Engineering, Sharif University of Technology, Tehran, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Sharif University of Technology, Tehran, Iran","institution_ids":["https://openalex.org/I133529467"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087043869","display_name":"Tarik Taleb","orcid":"https://orcid.org/0000-0003-1119-1239"},"institutions":[{"id":"https://openalex.org/I904495901","display_name":"Ruhr University Bochum","ror":"https://ror.org/04tsk2644","country_code":"DE","type":"education","lineage":["https://openalex.org/I904495901"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Tarik Taleb","raw_affiliation_strings":["The Faculty of Electrical Engineering and Information Technology, Ruhr University Bochum, Bochum, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Faculty of Electrical Engineering and Information Technology, Ruhr University Bochum, Bochum, Germany","institution_ids":["https://openalex.org/I904495901"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5076377250","display_name":"Chafika Benza\u00efd","orcid":"https://orcid.org/0000-0001-5841-2014"},"institutions":[{"id":"https://openalex.org/I63586086","display_name":"Oulu University of Applied Sciences","ror":"https://ror.org/03dvp8k55","country_code":"FI","type":"education","lineage":["https://openalex.org/I63586086"]},{"id":"https://openalex.org/I98381234","display_name":"University of Oulu","ror":"https://ror.org/03yj89h83","country_code":"FI","type":"education","lineage":["https://openalex.org/I98381234"]}],"countries":["FI"],"is_corresponding":false,"raw_author_name":"Chafika Benza\u00efd","raw_affiliation_strings":["The Faculty of Information Technology and Electrical Engineering, University of Oulu, Oulu, Finland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The Faculty of Information Technology and Electrical Engineering, University of Oulu, Oulu, Finland","institution_ids":["https://openalex.org/I63586086","https://openalex.org/I98381234"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5028120551"],"corresponding_institution_ids":["https://openalex.org/I63586086","https://openalex.org/I98381234"],"apc_list":{"value":3190,"currency":"USD","value_usd":3190},"apc_paid":{"value":3190,"currency":"USD","value_usd":3190},"fwci":1.3697,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.80995376,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"24","issue":"3","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.9976000189781189,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8010308742523193},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.7010043859481812},{"id":"https://openalex.org/keywords/game-theory","display_name":"Game theory","score":0.5979759097099304},{"id":"https://openalex.org/keywords/software","display_name":"Software","score":0.48932498693466187},{"id":"https://openalex.org/keywords/cryptography","display_name":"Cryptography","score":0.46098101139068604},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.4531644880771637},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4016616940498352},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.38048040866851807},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.37935325503349304},{"id":"https://openalex.org/keywords/human\u2013computer-interaction","display_name":"Human\u2013computer interaction","score":0.3623330593109131},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.34344518184661865},{"id":"https://openalex.org/keywords/theoretical-computer-science","display_name":"Theoretical computer science","score":0.32864052057266235},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.14993932843208313}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8010308742523193},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.7010043859481812},{"id":"https://openalex.org/C177142836","wikidata":"https://www.wikidata.org/wiki/Q44455","display_name":"Game theory","level":2,"score":0.5979759097099304},{"id":"https://openalex.org/C2777904410","wikidata":"https://www.wikidata.org/wiki/Q7397","display_name":"Software","level":2,"score":0.48932498693466187},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.46098101139068604},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.4531644880771637},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4016616940498352},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.38048040866851807},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37935325503349304},{"id":"https://openalex.org/C107457646","wikidata":"https://www.wikidata.org/wiki/Q207434","display_name":"Human\u2013computer interaction","level":1,"score":0.3623330593109131},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.34344518184661865},{"id":"https://openalex.org/C80444323","wikidata":"https://www.wikidata.org/wiki/Q2878974","display_name":"Theoretical computer science","level":1,"score":0.32864052057266235},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.14993932843208313},{"id":"https://openalex.org/C175444787","wikidata":"https://www.wikidata.org/wiki/Q39072","display_name":"Microeconomics","level":1,"score":0.0},{"id":"https://openalex.org/C162324750","wikidata":"https://www.wikidata.org/wiki/Q8134","display_name":"Economics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10207-025-01026-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01026-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01026-y.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10207-025-01026-y","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10207-025-01026-y","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10207-025-01026-y.pdf","source":{"id":"https://openalex.org/S164062316","display_name":"International Journal of Information Security","issn_l":"1615-5262","issn":["1615-5262","1615-5270"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4607160898","display_name":"secuRe desIGn and deplOyment of trUsthwoRthy cOntinUum computing 6G Services","funder_award_id":"101095933","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"},{"id":"https://openalex.org/F4320323692","display_name":"Oulun Yliopisto","ror":"https://ror.org/03yj89h83"},{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4409590589.pdf","grobid_xml":"https://content.openalex.org/works/W4409590589.grobid-xml"},"referenced_works_count":48,"referenced_works":["https://openalex.org/W2060805592","https://openalex.org/W2108420164","https://openalex.org/W2116625462","https://openalex.org/W2148055514","https://openalex.org/W2151290962","https://openalex.org/W2180151090","https://openalex.org/W2240802212","https://openalex.org/W2466560508","https://openalex.org/W2513406939","https://openalex.org/W2559780724","https://openalex.org/W2560085463","https://openalex.org/W2563236595","https://openalex.org/W2588001287","https://openalex.org/W2610152459","https://openalex.org/W2747463416","https://openalex.org/W2764010900","https://openalex.org/W2766607585","https://openalex.org/W2775725111","https://openalex.org/W2786668512","https://openalex.org/W2791526751","https://openalex.org/W2810428028","https://openalex.org/W2907141551","https://openalex.org/W2955593825","https://openalex.org/W2967189403","https://openalex.org/W2982438303","https://openalex.org/W2994934441","https://openalex.org/W2996039298","https://openalex.org/W2996416831","https://openalex.org/W3007504164","https://openalex.org/W3009723369","https://openalex.org/W3049465110","https://openalex.org/W3085355272","https://openalex.org/W3163598082","https://openalex.org/W3164510030","https://openalex.org/W4206281848","https://openalex.org/W4220745871","https://openalex.org/W4281295043","https://openalex.org/W4284899315","https://openalex.org/W4312191386","https://openalex.org/W4386274974","https://openalex.org/W4389776445","https://openalex.org/W4392175480","https://openalex.org/W4392364798","https://openalex.org/W4392719416","https://openalex.org/W4406137763","https://openalex.org/W6600182862","https://openalex.org/W6628867201","https://openalex.org/W6743493502"],"related_works":["https://openalex.org/W2097492617","https://openalex.org/W2753240997","https://openalex.org/W1764168690","https://openalex.org/W2537959205","https://openalex.org/W2740895074","https://openalex.org/W2772446090","https://openalex.org/W4284893819","https://openalex.org/W4307248189","https://openalex.org/W3093954335","https://openalex.org/W4205482204"],"abstract_inverted_index":{"Abstract":[0],"Mafia,":[1],"or":[2],"Werewolf,":[3],"is":[4],"a":[5,39,54,78,100,198,214],"strategic":[6,63],"game":[7,23,69,105,119,204],"where":[8],"two":[9],"teams":[10],"compete":[11],"to":[12,58,70,127,155],"eliminate":[13],"each":[14],"other\u2019s":[15],"players":[16],"through":[17],"deception":[18,64],"and":[19,25,93,107,147,192,208],"hidden":[20],"roles.":[21],"The":[22,185],"dynamics":[24,65],"role":[26],"interactions":[27],"share":[28],"notable":[29],"similarities":[30],"with":[31,117,151],"adversarial":[32,72],"behaviors":[33],"in":[34,74,135],"network":[35,108,129,177,199,226],"security,":[36],"making":[37],"it":[38],"valuable":[40],"framework":[41,205],"for":[42,81,87,197,216],"modeling":[43,219],"cyber":[44,230],"threats,":[45],"particularly":[46],"botnet":[47,59,113,137,183],"detection.":[48],"In":[49],"this":[50],"paper,":[51],"we":[52,98,175],"introduce":[53],"novel":[55],"game-theoretic":[56],"approach":[57],"detection,":[60],"leveraging":[61],"the":[62,67,141,149,157,163,189,202],"of":[66],"Mafia":[68,82,104,203],"model":[71,80,142],"behavior":[73],"cybersecurity.":[75],"We":[76,139],"present":[77],"mathematical":[79],"games,":[83],"formulating":[84],"winning":[85],"strategies":[86,124,165],"different":[88],"roles":[89,106],"using":[90,143,179],"linear":[91],"relations":[92],"reinforcement":[94],"learning":[95],"techniques.":[96],"Furthermore,":[97],"establish":[99],"direct":[101],"mapping":[102],"between":[103],"security":[109,145],"components,":[110],"illustrating":[111],"how":[112],"attack":[114,130],"patterns":[115],"align":[116],"hidden-role":[118],"mechanics.":[120],"Our":[121,159],"proposed":[122],"detection":[123,153,167,195,223],"are":[125],"applied":[126],"real-world":[128],"scenarios,":[131],"demonstrating":[132],"their":[133],"effectiveness":[134],"mitigating":[136],"threats.":[138,231],"evaluate":[140],"applicable":[144],"metrics":[146],"compare":[148],"results":[150,186],"existing":[152],"methodologies":[154],"validate":[156],"approach.":[158],"findings":[160],"indicate":[161],"that":[162,188],"suggested":[164],"improve":[166],"accuracy":[168],"by":[169,201],"12%":[170],"over":[171],"conventional":[172],"methods.":[173],"Additionally,":[174],"conduct":[176],"emulations":[178],"Mininet,":[180],"simulating":[181],"Mirai":[182],"infections.":[184],"show":[187],"true":[190,193],"positive":[191],"negative":[194],"rates":[196],"modeled":[200],"reach":[206],"71%":[207],"91%,":[209],"respectively.":[210],"These":[211],"insights":[212],"provide":[213],"foundation":[215],"integrating":[217],"deception-based":[218],"into":[220],"modern":[221],"intrusion":[222],"systems,":[224],"enhancing":[225],"resilience":[227],"against":[228],"adaptive":[229]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}