{"id":"https://openalex.org/W4415421253","doi":"https://doi.org/10.15439/2025f1820","title":"Q-ID: A Reinforcement Learning Framework for Adaptive Intrusion Detection","display_name":"Q-ID: A Reinforcement Learning Framework for Adaptive Intrusion Detection","publication_year":2025,"publication_date":"2025-10-15","ids":{"openalex":"https://openalex.org/W4415421253","doi":"https://doi.org/10.15439/2025f1820"},"language":"en","primary_location":{"id":"doi:10.15439/2025f1820","is_oa":true,"landing_page_url":"https://doi.org/10.15439/2025f1820","pdf_url":"https://annals-csis.org/Volume_43/drp/pdf/1820.pdf","source":{"id":"https://openalex.org/S4220651875","display_name":"Annals of Computer Science and Information Systems","issn_l":"2300-5963","issn":["2300-5963"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":"https://openalex.org/P4310317484","host_organization_name":"Polskie Towarzystwo Informatyczne","host_organization_lineage":["https://openalex.org/P4310317484"],"host_organization_lineage_names":["Polskie Towarzystwo Informatyczne"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Computer Science and Information Systems","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://annals-csis.org/Volume_43/drp/pdf/1820.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5062800510","display_name":"Maisha Maliha","orcid":"https://orcid.org/0009-0008-3260-3240"},"institutions":[{"id":"https://openalex.org/I8692664","display_name":"University of Oklahoma","ror":"https://ror.org/02aqsxs83","country_code":"US","type":"education","lineage":["https://openalex.org/I8692664"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Maisha Maliha","raw_affiliation_strings":["School of Computer Science, University of Oklahoma"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Oklahoma","institution_ids":["https://openalex.org/I8692664"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5084074039","display_name":"Mohammed Atiquzzaman","orcid":"https://orcid.org/0000-0001-9440-7669"},"institutions":[{"id":"https://openalex.org/I8692664","display_name":"University of Oklahoma","ror":"https://ror.org/02aqsxs83","country_code":"US","type":"education","lineage":["https://openalex.org/I8692664"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mohammed Atiquzzaman","raw_affiliation_strings":["School of Computer Science, University of Oklahoma"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Oklahoma","institution_ids":["https://openalex.org/I8692664"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I8692664"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.364386,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"43","issue":null,"first_page":"35","last_page":"42"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9843000173568726,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11975","display_name":"Evolutionary Algorithms and Applications","score":0.9702000021934509,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.5278000235557556},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.39640000462532043},{"id":"https://openalex.org/keywords/control","display_name":"Control (management)","score":0.299699991941452},{"id":"https://openalex.org/keywords/adaptive-control","display_name":"Adaptive control","score":0.2980000078678131},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.2971999943256378},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.289900004863739}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6100000143051147},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5285999774932861},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.5278000235557556},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.39640000462532043},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.36329999566078186},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.299699991941452},{"id":"https://openalex.org/C107464732","wikidata":"https://www.wikidata.org/wiki/Q235781","display_name":"Adaptive control","level":3,"score":0.2980000078678131},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.289900004863739},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.2728999853134155},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.26809999346733093},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2655999958515167},{"id":"https://openalex.org/C125014702","wikidata":"https://www.wikidata.org/wiki/Q4680749","display_name":"Adaptive learning","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.25290000438690186}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.15439/2025f1820","is_oa":true,"landing_page_url":"https://doi.org/10.15439/2025f1820","pdf_url":"https://annals-csis.org/Volume_43/drp/pdf/1820.pdf","source":{"id":"https://openalex.org/S4220651875","display_name":"Annals of Computer Science and Information Systems","issn_l":"2300-5963","issn":["2300-5963"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":"https://openalex.org/P4310317484","host_organization_name":"Polskie Towarzystwo Informatyczne","host_organization_lineage":["https://openalex.org/P4310317484"],"host_organization_lineage_names":["Polskie Towarzystwo Informatyczne"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Computer Science and Information Systems","raw_type":"proceedings-article"},{"id":"pmh:oai:doaj.org/article:272baf31e49a4c7a948617e8af9499e1","is_oa":true,"landing_page_url":"https://doaj.org/article/272baf31e49a4c7a948617e8af9499e1","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Annals of computer science and information systems, Vol 43, Pp 35-42 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.15439/2025f1820","is_oa":true,"landing_page_url":"https://doi.org/10.15439/2025f1820","pdf_url":"https://annals-csis.org/Volume_43/drp/pdf/1820.pdf","source":{"id":"https://openalex.org/S4220651875","display_name":"Annals of Computer Science and Information Systems","issn_l":"2300-5963","issn":["2300-5963"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":"https://openalex.org/P4310317484","host_organization_name":"Polskie Towarzystwo Informatyczne","host_organization_lineage":["https://openalex.org/P4310317484"],"host_organization_lineage_names":["Polskie Towarzystwo Informatyczne"],"type":"conference"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Annals of Computer Science and Information Systems","raw_type":"proceedings-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415421253.pdf","grobid_xml":"https://content.openalex.org/works/W4415421253.grobid-xml"},"referenced_works_count":13,"referenced_works":["https://openalex.org/W1908122868","https://openalex.org/W2101786389","https://openalex.org/W2131970275","https://openalex.org/W2573137292","https://openalex.org/W2739529772","https://openalex.org/W2962459360","https://openalex.org/W3016470706","https://openalex.org/W3155744522","https://openalex.org/W3166305658","https://openalex.org/W3171420864","https://openalex.org/W4226061308","https://openalex.org/W4396641939","https://openalex.org/W4400351814"],"related_works":[],"abstract_inverted_index":{"The":[0],"growing":[1],"sophistication":[2],"and":[3,67,90,98,146,154,173,185],"frequency":[4],"of":[5],"cyber":[6],"threats":[7],"in":[8,111,204],"communication":[9,206],"networks":[10,172],"demand":[11],"Intrusion":[12,63],"Detection":[13,64],"Systems":[14],"(IDS)":[15],"that":[16,128,159],"adapt":[17],"to":[18,33,50,143,187],"evolving":[19],"attack":[20,190],"patterns.Traditional":[21],"approaches,":[22],"based":[23],"on":[24,70,131],"static":[25],"rules":[26],"or":[27],"purely":[28],"supervised":[29,121,133,141],"models,":[30],"often":[31],"fail":[32],"recognize":[34],"novel":[35],"attacks,":[36],"leaving":[37],"critical":[38,205],"infrastructures":[39],"exposed.Reinforcement":[40],"Learning":[41],"(RL)":[42],"provides":[43],"a":[44,61,112,197],"dynamic":[45],"alternative":[46],"by":[47],"enabling":[48],"agents":[49],"refine":[51],"detection":[52],"policies":[53],"through":[54],"continuous":[55],"feedback.In":[56],"this":[57],"work,":[58],"we":[59],"propose":[60],"Qlearning-based":[62],"(Q-ID)":[65],"system":[66,162],"train":[68],"it":[69],"the":[71,77,80,84,87,91,104,120,160,176],"CICIDS2017":[72],"dataset.The":[73],"RL":[74,177],"formulation":[75],"defines":[76],"state":[78],"as":[79,86,93,196],"flow's":[81],"feature":[82],"vector,":[83],"action":[85],"classification":[88],"decision,":[89],"reward":[92,105],"+1":[94],"for":[95,200],"correct":[96],"predictions":[97],"-1":[99],"otherwise.To":[100],"ensure":[101],"stable":[102],"convergence,":[103],"is":[106],"integrated":[107],"with":[108,140],"cross-entropy":[109],"loss":[110],"hybrid":[113],"objective,":[114],"allowing":[115],"continued":[116],"improvement":[117],"even":[118],"after":[119],"component":[122],"has":[123],"plateaued.Unlike":[124],"prior":[125],"IDS":[126,203],"methods":[127],"rely":[129],"solely":[130],"offline":[132],"training,":[134],"our":[135],"approach":[136],"fuses":[137],"reinforcement":[138,194],"feedback":[139],"optimization":[142],"support":[144],"adaptive":[145],"robust":[147],"detection.Experimental":[148],"results,":[149],"conducted":[150],"under":[151,181],"class":[152],"imbalance":[153],"realistic":[155],"evaluation":[156],"splits,":[157],"show":[158],"proposed":[161],"achieves":[163],"99.3%":[164],"accuracy,":[165],"outperforming":[166],"strong":[167],"baselines":[168],"including":[169],"deep":[170],"neural":[171],"traditional":[174],"classifiers.Moreover,":[175],"agent":[178],"demonstrates":[179],"robustness":[180],"skewed":[182],"traffic":[183],"distributions":[184],"adaptability":[186],"previously":[188],"unseen":[189],"types.These":[191],"results":[192],"highlight":[193],"learning":[195],"promising":[198],"paradigm":[199],"building":[201],"resilient":[202],"environments.":[207]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-24T00:00:00"}