{"id":"https://openalex.org/W7134191489","doi":"https://doi.org/10.3390/computers15030174","title":"A Lightweight Cascade-Based Farmework for Real-Time Zero-Day Attack Detection","display_name":"A Lightweight Cascade-Based Farmework for Real-Time Zero-Day Attack Detection","publication_year":2026,"publication_date":"2026-03-08","ids":{"openalex":"https://openalex.org/W7134191489","doi":"https://doi.org/10.3390/computers15030174"},"language":"en","primary_location":{"id":"doi:10.3390/computers15030174","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15030174","pdf_url":"https://www.mdpi.com/2073-431X/15/3/174/pdf?version=1773048736","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2073-431X/15/3/174/pdf?version=1773048736","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5076361725","display_name":"Alpamis Kutlimuratov","orcid":null},"institutions":[{"id":"https://openalex.org/I61600748","display_name":"Westminster International University in Tashkent","ror":"https://ror.org/032vgar48","country_code":"UZ","type":"education","lineage":["https://openalex.org/I61600748"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Alpamis Kutlimuratov","raw_affiliation_strings":["Department of Applied Informatics, Kimyo International University in Tashkent, Tashkent 100121, Uzbekistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Applied Informatics, Kimyo International University in Tashkent, Tashkent 100121, Uzbekistan","institution_ids":["https://openalex.org/I61600748"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117723498","display_name":"Furkat Rakhmatov","orcid":null},"institutions":[{"id":"https://openalex.org/I21256249","display_name":"Tashkent University of Information Technology","ror":"https://ror.org/05987a729","country_code":"UZ","type":"education","lineage":["https://openalex.org/I21256249"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Furkat Rakhmatov","raw_affiliation_strings":["Department of Programming Technologies, Tashkent University of Information Technologies Named After Muhammad al-Khwarizmi, Tashkent 100084, Uzbekistan"],"raw_orcid":"https://orcid.org/0000-0002-7008-9384","affiliations":[{"raw_affiliation_string":"Department of Programming Technologies, Tashkent University of Information Technologies Named After Muhammad al-Khwarizmi, Tashkent 100084, Uzbekistan","institution_ids":["https://openalex.org/I21256249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5080579210","display_name":"Jamshid Khamzaev","orcid":null},"institutions":[{"id":"https://openalex.org/I21256249","display_name":"Tashkent University of Information Technology","ror":"https://ror.org/05987a729","country_code":"UZ","type":"education","lineage":["https://openalex.org/I21256249"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Jamshid Khamzaev","raw_affiliation_strings":["Department of Computer Systems, Tashkent University of Information Technologies Named After Muhammad al-Khwarizmi, Tashkent 100084, Uzbekistan"],"raw_orcid":"https://orcid.org/0009-0009-6335-0394","affiliations":[{"raw_affiliation_string":"Department of Computer Systems, Tashkent University of Information Technologies Named After Muhammad al-Khwarizmi, Tashkent 100084, Uzbekistan","institution_ids":["https://openalex.org/I21256249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5087889749","display_name":"Islambek Saymanov","orcid":"https://orcid.org/0000-0003-3530-4488"},"institutions":[{"id":"https://openalex.org/I4387155254","display_name":"New Uzbekistan University","ror":"https://ror.org/035v3tr79","country_code":"UZ","type":"education","lineage":["https://openalex.org/I4387155254"]},{"id":"https://openalex.org/I47151758","display_name":"National University of Uzbekistan","ror":"https://ror.org/011647w73","country_code":"UZ","type":"education","lineage":["https://openalex.org/I47151758"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Islambek Saymanov","raw_affiliation_strings":["Applied Mathematics and Intelligent Technologies Faculty, National University of Uzbekistan, Tashkent 100174, Uzbekistan","School of Mathematics and Natural Sciences, New Uzbekistan University, Mustaqillik Ave. 54, Tashkent 100007, Uzbekistan"],"raw_orcid":"https://orcid.org/0000-0003-3530-4488","affiliations":[{"raw_affiliation_string":"Applied Mathematics and Intelligent Technologies Faculty, National University of Uzbekistan, Tashkent 100174, Uzbekistan","institution_ids":["https://openalex.org/I47151758"]},{"raw_affiliation_string":"School of Mathematics and Natural Sciences, New Uzbekistan University, Mustaqillik Ave. 54, Tashkent 100007, Uzbekistan","institution_ids":["https://openalex.org/I47151758","https://openalex.org/I4387155254"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128333225","display_name":"Piratdin Allayarov","orcid":null},"institutions":[{"id":"https://openalex.org/I55383850","display_name":"Tashkent State University of Economics","ror":"https://ror.org/029t9db68","country_code":"UZ","type":"education","lineage":["https://openalex.org/I55383850"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Piratdin Allayarov","raw_affiliation_strings":["Department of Econometrics, Tashkent State University of Economics, Tashkent 100066, Uzbekistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Econometrics, Tashkent State University of Economics, Tashkent 100066, Uzbekistan","institution_ids":["https://openalex.org/I55383850"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028400181","display_name":"Gamzatdin Bekbaev","orcid":"https://orcid.org/0009-0002-3523-3819"},"institutions":[{"id":"https://openalex.org/I55383850","display_name":"Tashkent State University of Economics","ror":"https://ror.org/029t9db68","country_code":"UZ","type":"education","lineage":["https://openalex.org/I55383850"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Gamzatdin Bekbaev","raw_affiliation_strings":["Department of Finance and Digital Economy, Tashkent State University of Economics, Tashkent 100066, Uzbekistan"],"raw_orcid":"https://orcid.org/0009-0002-3523-3819","affiliations":[{"raw_affiliation_string":"Department of Finance and Digital Economy, Tashkent State University of Economics, Tashkent 100066, Uzbekistan","institution_ids":["https://openalex.org/I55383850"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128376696","display_name":"Shavkat Otamurodov","orcid":null},"institutions":[{"id":"https://openalex.org/I4210159709","display_name":"Termez State University","ror":"https://ror.org/05416zy49","country_code":"UZ","type":"education","lineage":["https://openalex.org/I4210159709"]}],"countries":["UZ"],"is_corresponding":false,"raw_author_name":"Shavkat Otamurodov","raw_affiliation_strings":["Department of Economics, Termez University of Economics and Service, Termez 190111, Uzbekistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Economics, Termez University of Economics and Service, Termez 190111, Uzbekistan","institution_ids":["https://openalex.org/I4210159709"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5099076906","display_name":"Fazliddin Makhmudov","orcid":null},"institutions":[{"id":"https://openalex.org/I12832649","display_name":"Gachon University","ror":"https://ror.org/03ryywt80","country_code":"KR","type":"education","lineage":["https://openalex.org/I12832649"]}],"countries":["KR"],"is_corresponding":true,"raw_author_name":"Fazliddin Makhmudov","raw_affiliation_strings":["Department of Computer Engineering, Gachon University, Seongnam 13120, Republic of Korea"],"raw_orcid":"https://orcid.org/0000-0002-3594-0137","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Gachon University, Seongnam 13120, Republic of Korea","institution_ids":["https://openalex.org/I12832649"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":7,"corresponding_author_ids":["https://openalex.org/A5099076906"],"corresponding_institution_ids":["https://openalex.org/I12832649"],"apc_list":{"value":1600,"currency":"CHF","value_usd":1732},"apc_paid":{"value":1600,"currency":"CHF","value_usd":1732},"fwci":12.1051,"has_fulltext":true,"cited_by_count":1,"citation_normalized_percentile":{"value":0.97368724,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"15","issue":"3","first_page":"174","last_page":"174"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.6822999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.6822999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.29339998960494995,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.004000000189989805,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6381999850273132},{"id":"https://openalex.org/keywords/payload","display_name":"Payload (computing)","score":0.45579999685287476},{"id":"https://openalex.org/keywords/architecture","display_name":"Architecture","score":0.3930000066757202},{"id":"https://openalex.org/keywords/fault-detection-and-isolation","display_name":"Fault detection and isolation","score":0.39010000228881836},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.3878999948501587},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.382099986076355},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.35510000586509705}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7132999897003174},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6381999850273132},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.46880000829696655},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.45579999685287476},{"id":"https://openalex.org/C123657996","wikidata":"https://www.wikidata.org/wiki/Q12271","display_name":"Architecture","level":2,"score":0.3930000066757202},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.39010000228881836},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.3878999948501587},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.382099986076355},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.35929998755455017},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.35510000586509705},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.34529998898506165},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.32429999113082886},{"id":"https://openalex.org/C2780451532","wikidata":"https://www.wikidata.org/wiki/Q759676","display_name":"Task (project management)","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C34146451","wikidata":"https://www.wikidata.org/wiki/Q5048094","display_name":"Cascade","level":2,"score":0.3197000026702881},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.31439998745918274},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.31209999322891235},{"id":"https://openalex.org/C148730421","wikidata":"https://www.wikidata.org/wiki/Q141090","display_name":"Encryption","level":2,"score":0.29829999804496765},{"id":"https://openalex.org/C98025372","wikidata":"https://www.wikidata.org/wiki/Q477538","display_name":"Systems architecture","level":3,"score":0.29760000109672546},{"id":"https://openalex.org/C200601418","wikidata":"https://www.wikidata.org/wiki/Q2193887","display_name":"Reliability engineering","level":1,"score":0.27149999141693115},{"id":"https://openalex.org/C93518851","wikidata":"https://www.wikidata.org/wiki/Q180160","display_name":"Metadata","level":2,"score":0.2615000009536743}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/computers15030174","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15030174","pdf_url":"https://www.mdpi.com/2073-431X/15/3/174/pdf?version=1773048736","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:8a3f648ec24b46c592db6ee546e17937","is_oa":true,"landing_page_url":"https://doaj.org/article/8a3f648ec24b46c592db6ee546e17937","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Computers, Vol 15, Iss 3, p 174 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/computers15030174","is_oa":true,"landing_page_url":"https://doi.org/10.3390/computers15030174","pdf_url":"https://www.mdpi.com/2073-431X/15/3/174/pdf?version=1773048736","source":{"id":"https://openalex.org/S4210228075","display_name":"Computers","issn_l":"2073-431X","issn":["2073-431X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computers","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7134191489.pdf","grobid_xml":"https://content.openalex.org/works/W7134191489.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Zero-day":[0],"intrusion":[1],"detection":[2,144,214],"is":[3,32,71,88,107,121],"still":[4],"a":[5,26,80,102,181],"difficult":[6],"task":[7],"because":[8],"of":[9,55,67,183,204],"the":[10,68,85,140,157,202],"difference":[11],"between":[12],"high":[13],"laboratory":[14],"precision":[15,72,89],"and":[16,38,48,84,94,133,165,190,207],"real-time":[17],"deployability":[18],"under":[19],"strict":[20,39,103],"operational":[21],"constraints.":[22],"This":[23],"paper":[24],"proposes":[25],"lightweight":[27],"two-stage":[28],"cascade":[29],"architecture":[30,44,70],"that":[31],"specifically":[33],"designed":[34],"for":[35],"CPU-only":[36],"environments":[37],"zero-day":[40,143,213],"evaluation.":[41],"The":[42,64,118,136,173],"proposed":[43,69,119],"only":[45],"uses":[46],"statistical":[47],"flow-level":[49],"metadata":[50],"attributes,":[51],"which":[52],"are":[53,113],"independent":[54],"payload":[56],"analysis,":[57],"to":[58,74,91,147,185],"ensure":[59],"compatibility":[60],"with":[61,79,150,162],"encrypted":[62],"traffic.":[63],"first":[65],"stage":[66,87],"oriented":[73,90],"detect":[75],"potentially":[76],"malicious":[77],"traffic":[78],"low":[81,167],"decision":[82],"threshold,":[83],"second":[86],"enhance":[92],"classification":[93],"remove":[95],"false":[96],"positives.":[97],"To":[98],"avoid":[99],"optimistic":[100],"bias,":[101],"attack-type":[104],"separation":[105],"protocol":[106],"employed,":[108],"where":[109],"testing":[110],"attack":[111],"types":[112],"strictly":[114],"prohibited":[115],"from":[116],"training.":[117],"method":[120],"tested":[122],"on":[123,170],"three":[124],"benchmark":[125],"datasets:":[126],"CSIC":[127],"2012":[128],"(HTTP":[129],"level),":[130],"UNSW-NB15":[131],"(intra-domain),":[132],"CSE-CIC-IDS2018":[134],"(cross-domain).":[135],"experimental":[137],"results":[138,200],"show":[139],"excellent":[141],"intra-domain":[142],"capability":[145],"(up":[146],"94.81%":[148],"accuracy":[149,161],"0.50%":[151],"FPR),":[152,164],"controllable":[153],"performance":[154],"degradation":[155],"in":[156,210],"cross-domain":[158],"setting":[159],"(80.53%":[160],"near-zero":[163],"extremely":[166],"FP":[168],"rates":[169],"all":[171],"datasets.":[172],"system":[174],"provides":[175],"microsecond-level":[176],"inference":[177],"latency":[178],"(0.002\u20130.006":[179],"ms),":[180],"throughput":[182],"up":[184],"470,000":[186],"requests":[187],"per":[188],"second,":[189],"memory":[191],"usage":[192],"below":[193],"6.2":[194],"MB":[195],"without":[196],"GPU":[197],"support.":[198],"These":[199],"confirm":[201],"significance":[203],"architectural":[205],"optimization":[206],"thorough":[208],"evaluation":[209],"building":[211],"efficient":[212],"systems.":[215]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-03-09T00:00:00"}