{"id":"https://openalex.org/W7133199006","doi":"https://doi.org/10.3389/fcomp.2026.1751284","title":"Machine learning-based early incident detection system in a bakery plant\u2019s industrial network: a cognitive model for counteracting hybrid threats","display_name":"Machine learning-based early incident detection system in a bakery plant\u2019s industrial network: a cognitive model for counteracting hybrid threats","publication_year":2026,"publication_date":"2026-03-02","ids":{"openalex":"https://openalex.org/W7133199006","doi":"https://doi.org/10.3389/fcomp.2026.1751284"},"language":"en","primary_location":{"id":"doi:10.3389/fcomp.2026.1751284","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2026.1751284","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2026.1751284/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://public-pages-files-2025.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2026.1751284/pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5032953187","display_name":"G. Amirkhanova","orcid":null},"institutions":[{"id":"https://openalex.org/I185571130","display_name":"Al-Farabi Kazakh National University","ror":"https://ror.org/03q0vrn42","country_code":"KZ","type":"education","lineage":["https://openalex.org/I185571130"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Gulshat Amanzholovna Amirkhanova","raw_affiliation_strings":["Department of Artificial Intelligence and Big Data, Faculty of Information Technology, Al-Farabi Kazakh National University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Artificial Intelligence and Big Data, Faculty of Information Technology, Al-Farabi Kazakh National University","institution_ids":["https://openalex.org/I185571130"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127803610","display_name":"Dmytro Ihorovych Prokopovych-Tkachenko","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149604","display_name":"University of Customs and Finance","ror":"https://ror.org/04ft5hg27","country_code":"UA","type":"education","lineage":["https://openalex.org/I4210149604"]}],"countries":["UA"],"is_corresponding":false,"raw_author_name":"Dmytro Ihorovych Prokopovych-Tkachenko","raw_affiliation_strings":["Department of Cybersecurity and Information Technologies, University of Customs and Finance"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cybersecurity and Information Technologies, University of Customs and Finance","institution_ids":["https://openalex.org/I4210149604"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127837228","display_name":"Saltanat Almykhametovna Adilzhanova","orcid":null},"institutions":[{"id":"https://openalex.org/I185571130","display_name":"Al-Farabi Kazakh National University","ror":"https://ror.org/03q0vrn42","country_code":"KZ","type":"education","lineage":["https://openalex.org/I185571130"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Saltanat Almykhametovna Adilzhanova","raw_affiliation_strings":["Department of Cybersecurity and Cryptology, Faculty of Information Technology, Al-Farabi Kazakh National University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cybersecurity and Cryptology, Faculty of Information Technology, Al-Farabi Kazakh National University","institution_ids":["https://openalex.org/I185571130"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5121590032","display_name":"Nazar Zubchenko","orcid":null},"institutions":[{"id":"https://openalex.org/I4210149604","display_name":"University of Customs and Finance","ror":"https://ror.org/04ft5hg27","country_code":"UA","type":"education","lineage":["https://openalex.org/I4210149604"]}],"countries":["UA"],"is_corresponding":false,"raw_author_name":"Nazar Zubchenko","raw_affiliation_strings":["Department of Cybersecurity and Information Technologies, University of Customs and Finance"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cybersecurity and Information Technologies, University of Customs and Finance","institution_ids":["https://openalex.org/I4210149604"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5127820806","display_name":"Liya Erbolkyzy Bektemir","orcid":null},"institutions":[{"id":"https://openalex.org/I185571130","display_name":"Al-Farabi Kazakh National University","ror":"https://ror.org/03q0vrn42","country_code":"KZ","type":"education","lineage":["https://openalex.org/I185571130"]}],"countries":["KZ"],"is_corresponding":false,"raw_author_name":"Liya Erbolkyzy Bektemir","raw_affiliation_strings":["Department of Artificial Intelligence and Big Data, Faculty of Information Technology, Al-Farabi Kazakh National University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Artificial Intelligence and Big Data, Faculty of Information Technology, Al-Farabi Kazakh National University","institution_ids":["https://openalex.org/I185571130"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1150,"currency":"USD","value_usd":1150},"apc_paid":{"value":1150,"currency":"USD","value_usd":1150},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20465837,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"8","issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.6820999979972839,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.6820999979972839,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.06700000166893005,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10763","display_name":"Digital Transformation in Industry","score":0.021299999207258224,"subfield":{"id":"https://openalex.org/subfields/2209","display_name":"Industrial and Manufacturing Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.623199999332428},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5472000241279602},{"id":"https://openalex.org/keywords/analytics","display_name":"Analytics","score":0.5282999873161316},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.4521999955177307},{"id":"https://openalex.org/keywords/cognitive-model","display_name":"Cognitive model","score":0.4296000003814697},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.4198000133037567},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4196999967098236},{"id":"https://openalex.org/keywords/incident-management","display_name":"Incident management","score":0.39629998803138733},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.38960000872612},{"id":"https://openalex.org/keywords/event","display_name":"Event (particle physics)","score":0.37599998712539673}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7315999865531921},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.623199999332428},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5472000241279602},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5450999736785889},{"id":"https://openalex.org/C79158427","wikidata":"https://www.wikidata.org/wiki/Q485396","display_name":"Analytics","level":2,"score":0.5282999873161316},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.4521999955177307},{"id":"https://openalex.org/C161407221","wikidata":"https://www.wikidata.org/wiki/Q4382939","display_name":"Cognitive model","level":3,"score":0.4296000003814697},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4198000133037567},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4196999967098236},{"id":"https://openalex.org/C2780952636","wikidata":"https://www.wikidata.org/wiki/Q13479512","display_name":"Incident management","level":2,"score":0.39629998803138733},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.38999998569488525},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.38960000872612},{"id":"https://openalex.org/C2779662365","wikidata":"https://www.wikidata.org/wiki/Q5416694","display_name":"Event (particle physics)","level":2,"score":0.37599998712539673},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3598000109195709},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35580000281333923},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.3546000123023987},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.32760000228881836},{"id":"https://openalex.org/C183322885","wikidata":"https://www.wikidata.org/wiki/Q17007702","display_name":"Context model","level":3,"score":0.3249000012874603},{"id":"https://openalex.org/C59594135","wikidata":"https://www.wikidata.org/wiki/Q5249242","display_name":"Decision model","level":2,"score":0.31769999861717224},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.30880001187324524},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3061999976634979},{"id":"https://openalex.org/C107327155","wikidata":"https://www.wikidata.org/wiki/Q330268","display_name":"Decision support system","level":2,"score":0.30079999566078186},{"id":"https://openalex.org/C169900460","wikidata":"https://www.wikidata.org/wiki/Q2200417","display_name":"Cognition","level":2,"score":0.2935999929904938},{"id":"https://openalex.org/C20854674","wikidata":"https://www.wikidata.org/wiki/Q4386060","display_name":"Cognitive architecture","level":3,"score":0.2890999913215637},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.28450000286102295},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.2793999910354614},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.275299996137619},{"id":"https://openalex.org/C193415008","wikidata":"https://www.wikidata.org/wiki/Q639681","display_name":"Network architecture","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C17020691","wikidata":"https://www.wikidata.org/wiki/Q139677","display_name":"Operator (biology)","level":5,"score":0.2619999945163727},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.2558000087738037},{"id":"https://openalex.org/C83163435","wikidata":"https://www.wikidata.org/wiki/Q3954104","display_name":"Security management","level":2,"score":0.2556000053882599},{"id":"https://openalex.org/C32896092","wikidata":"https://www.wikidata.org/wiki/Q189447","display_name":"Risk management","level":2,"score":0.2549000084400177},{"id":"https://openalex.org/C2776928060","wikidata":"https://www.wikidata.org/wiki/Q1753563","display_name":"SystemC","level":2,"score":0.25450000166893005}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3389/fcomp.2026.1751284","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2026.1751284","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2026.1751284/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:a73d7b3477614de4a1b4df72d064144e","is_oa":false,"landing_page_url":"https://doaj.org/article/a73d7b3477614de4a1b4df72d064144e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Frontiers in Computer Science, Vol 8 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3389/fcomp.2026.1751284","is_oa":true,"landing_page_url":"https://doi.org/10.3389/fcomp.2026.1751284","pdf_url":"https://public-pages-files-2025.frontiersin.org/journals/computer-science/articles/10.3389/fcomp.2026.1751284/pdf","source":{"id":"https://openalex.org/S4210211086","display_name":"Frontiers in Computer Science","issn_l":"2624-9898","issn":["2624-9898"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320527","host_organization_name":"Frontiers Media","host_organization_lineage":["https://openalex.org/P4310320527"],"host_organization_lineage_names":["Frontiers Media"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Frontiers in Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.5233960151672363,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[{"id":"https://openalex.org/F4320322312","display_name":"Kansai University","ror":"https://ror.org/03xg1f311"},{"id":"https://openalex.org/F4320322726","display_name":"Ministry of Education and Science of the Republic of Kazakhstan","ror":"https://ror.org/03pj6ge82"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7133199006.pdf","grobid_xml":"https://content.openalex.org/works/W7133199006.grobid-xml"},"referenced_works_count":16,"referenced_works":["https://openalex.org/W1990067238","https://openalex.org/W2131060714","https://openalex.org/W2972568755","https://openalex.org/W2990623250","https://openalex.org/W2993330478","https://openalex.org/W3002981277","https://openalex.org/W3107610991","https://openalex.org/W3114378810","https://openalex.org/W3134875698","https://openalex.org/W3191984229","https://openalex.org/W4296105181","https://openalex.org/W4297154560","https://openalex.org/W4322154771","https://openalex.org/W4391783445","https://openalex.org/W4400507813","https://openalex.org/W4404326055"],"related_works":[],"abstract_inverted_index":{"Introduction":[0],"In":[1],"the":[2,25,73,132,148,166],"context":[3],"of":[4],"growing":[5],"cyber":[6],"risks":[7],"to":[8,68],"critical":[9],"industries,":[10],"including":[11],"bakery":[12,167],"complexes,":[13],"this":[14],"paper":[15],"proposes":[16],"a":[17,40,83],"cognitive":[18],"architecture":[19,32,145],"for":[20,97,114,131],"early":[21],"incident":[22],"detection":[23],"in":[24,121,165],"operational":[26],"technology":[27],"(OT)":[28],"network.":[29],"Methods":[30],"The":[31,144],"integrates":[33],"User":[34],"and":[35,43,48,103,118,138,151,156],"Entity":[36],"Behavior":[37],"Analytics":[38],"(UEBA),":[39],"Security":[41],"Information":[42],"Event":[44],"Management":[45],"(SIEM)":[46],"system,":[47],"Zero":[49],"Trust":[50],"principles,":[51],"focusing":[52],"on":[53,59,141],"hybrid":[54],"threats:":[55],"from":[56],"external":[57],"attacks":[58],"industrial":[60],"controllers,":[61],"such":[62],"as":[63],"programmable":[64],"logic":[65],"controllers":[66],"(PLCs)":[67],"internal":[69],"operator":[70],"errors.":[71],"At":[72],"analytics":[74],"layer,":[75],"two":[76],"complementary":[77],"deep":[78],"learning":[79],"pipelines":[80],"are":[81],"used:":[82],"convolutional":[84],"neural":[85],"network":[86,100],"(CNN)":[87],"+":[88,94,111],"long":[89],"short-term":[90],"memory":[91],"(LSTM)":[92],"(CNN":[93],"LSTM)":[95],"model":[96],"detecting":[98],"low-level":[99],"patterns":[101],"(Byte2Image)":[102],"an":[104],"autoencoder":[105],"(AE)":[106],"combined":[107],"with":[108,147],"LSTM":[109,112],"(AE":[110],"model)":[113],"predicting":[115],"time-series":[116],"data":[117],"identifying":[119],"anomalies":[120],"equipment":[122],"telemetry.":[123],"An":[124],"adaptive":[125],"threshold":[126],"decision":[127],"procedure":[128],"is":[129],"introduced":[130],"first":[133],"time,":[134],"optimizing":[135],"both":[136],"accuracy":[137],"computational":[139],"resources":[140],"edge":[142],"nodes.":[143],"complies":[146],"IEC":[149],"62443":[150],"ISO/IEC":[152],"27019":[153],"standards.":[154],"Results":[155],"discussion":[157],"High":[158],"performance":[159],"metrics,":[160],"specifically":[161],"Precision,":[162],"were":[163],"demonstrated":[164],"plant\u2019s":[168],"digital":[169],"twin":[170],"scenarios.":[171]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-03-03T00:00:00"}