{"id":"https://openalex.org/W7165682072","doi":"https://doi.org/10.3390/network6030042","title":"A Simulation-Driven Cybersecurity Framework for Detecting Novel Multi-Stage Attacks in Cyber-Physical Smart Infrastructure","display_name":"A Simulation-Driven Cybersecurity Framework for Detecting Novel Multi-Stage Attacks in Cyber-Physical Smart Infrastructure","publication_year":2026,"publication_date":"2026-06-23","ids":{"openalex":"https://openalex.org/W7165682072","doi":"https://doi.org/10.3390/network6030042"},"language":"en","primary_location":{"id":"doi:10.3390/network6030042","is_oa":true,"landing_page_url":"https://doi.org/10.3390/network6030042","pdf_url":null,"source":{"id":"https://openalex.org/S4210214347","display_name":"Network","issn_l":"2673-8732","issn":["2673-8732"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/network6030042","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5126384154","display_name":"Nadera Aljawabrah","orcid":null},"institutions":[{"id":"https://openalex.org/I157392197","display_name":"Hashemite University","ror":"https://ror.org/04a1r5z94","country_code":"JO","type":"education","lineage":["https://openalex.org/I157392197"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Nadera Aljawabrah","raw_affiliation_strings":["Department of Information Technology, Faculty of Prince Al-Hussein bin Abdullah II of Information Technology, The Hashemite University, Zarqa 13110, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Technology, Faculty of Prince Al-Hussein bin Abdullah II of Information Technology, The Hashemite University, Zarqa 13110, Jordan","institution_ids":["https://openalex.org/I157392197"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5138766839","display_name":"Nedal Y. Al-Tamimi","orcid":null},"institutions":[{"id":"https://openalex.org/I97864281","display_name":"Irbid National University","ror":"https://ror.org/00xfxvy87","country_code":"JO","type":"education","lineage":["https://openalex.org/I97864281"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Nedal Y. Al-Tamimi","raw_affiliation_strings":["Department of Artificial Intelligence, Science and Information Technology, Irbid National University, Irbid 21110, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Artificial Intelligence, Science and Information Technology, Irbid National University, Irbid 21110, Jordan","institution_ids":["https://openalex.org/I97864281"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5139200148","display_name":"Ayoub Alsarhan","orcid":null},"institutions":[{"id":"https://openalex.org/I104941359","display_name":"Al-Ahliyya Amman University","ror":"https://ror.org/00xddhq60","country_code":"JO","type":"education","lineage":["https://openalex.org/I104941359"]},{"id":"https://openalex.org/I157392197","display_name":"Hashemite University","ror":"https://ror.org/04a1r5z94","country_code":"JO","type":"education","lineage":["https://openalex.org/I157392197"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Ayoub Alsarhan","raw_affiliation_strings":["Department of Data Science and Artificial Intelligence, Faculty of Information Technology, Al-Ahliyya Amman University, Amman 19111, Jordan","Department of Information Technology, Faculty of Prince Al-Hussien bin Abdullah, The Hashemite University, Zarqa 13133, Jordan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Data Science and Artificial Intelligence, Faculty of Information Technology, Al-Ahliyya Amman University, Amman 19111, Jordan","institution_ids":["https://openalex.org/I104941359"]},{"raw_affiliation_string":"Department of Information Technology, Faculty of Prince Al-Hussien bin Abdullah, The Hashemite University, Zarqa 13133, Jordan","institution_ids":["https://openalex.org/I157392197"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5105080647","display_name":"Mahmoud AlJamal","orcid":"https://orcid.org/0009-0007-5389-6778"},"institutions":[{"id":"https://openalex.org/I97864281","display_name":"Irbid National University","ror":"https://ror.org/00xfxvy87","country_code":"JO","type":"education","lineage":["https://openalex.org/I97864281"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Mahmoud Aljamal","raw_affiliation_strings":["Department of Cybersecurity, Science and Information Technology, Irbid National University, Irbid 21110, Jordan"],"raw_orcid":"https://orcid.org/0009-0007-5389-6778","affiliations":[{"raw_affiliation_string":"Department of Cybersecurity, Science and Information Technology, Irbid National University, Irbid 21110, Jordan","institution_ids":["https://openalex.org/I97864281"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5052110413","display_name":"Bashar Khassawneh","orcid":"https://orcid.org/0000-0002-3610-961X"},"institutions":[{"id":"https://openalex.org/I145380033","display_name":"Amman Arab University","ror":"https://ror.org/039xekb14","country_code":"JO","type":"education","lineage":["https://openalex.org/I145380033"]}],"countries":["JO"],"is_corresponding":false,"raw_author_name":"Bashar S. Khassawneh","raw_affiliation_strings":["Department of Computer Science and Information Systems, College of Computer Sciences and Informatics, Amman Arab University, Amman 11953, Jordan"],"raw_orcid":"https://orcid.org/0000-0002-3610-961X","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Systems, College of Computer Sciences and Informatics, Amman Arab University, Amman 11953, Jordan","institution_ids":["https://openalex.org/I145380033"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5018735954","display_name":"Sami Aziz Alshammari","orcid":"https://orcid.org/0000-0002-0884-7885"},"institutions":[{"id":"https://openalex.org/I118590987","display_name":"Northern Border University","ror":"https://ror.org/03j9tzj20","country_code":"SA","type":"education","lineage":["https://openalex.org/I118590987"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Sami Aziz Alshammari","raw_affiliation_strings":["Department of Information Technology, Faculty of Computing and Information Technology, Northern Border University, Rafha 73213, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-0884-7885","affiliations":[{"raw_affiliation_string":"Department of Information Technology, Faculty of Computing and Information Technology, Northern Border University, Rafha 73213, Saudi Arabia","institution_ids":["https://openalex.org/I118590987"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117278357","display_name":"Nayef H. Alshammari","orcid":"https://orcid.org/0000-0001-5739-0589"},"institutions":[{"id":"https://openalex.org/I72264486","display_name":"University of Tabuk","ror":"https://ror.org/04yej8x59","country_code":"SA","type":"education","lineage":["https://openalex.org/I72264486"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Nayef H. Alshammari","raw_affiliation_strings":["Department of Computer Science, Faculty of Computers and Information Technology, University of Tabuk, Tabuk 47512, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0001-5739-0589","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Computers and Information Technology, University of Tabuk, Tabuk 47512, Saudi Arabia","institution_ids":["https://openalex.org/I72264486"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051359076","display_name":"Khalid Hamad Alnafisah","orcid":"https://orcid.org/0000-0003-1570-8274"},"institutions":[{"id":"https://openalex.org/I118590987","display_name":"Northern Border University","ror":"https://ror.org/03j9tzj20","country_code":"SA","type":"education","lineage":["https://openalex.org/I118590987"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Khalid Hamad Alnafisah","raw_affiliation_strings":["Department of Computer Sciences, Faculty of Computing and Information Technology, Northern Border University, Rafha 73213, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0003-1570-8274","affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, Faculty of Computing and Information Technology, Northern Border University, Rafha 73213, Saudi Arabia","institution_ids":["https://openalex.org/I118590987"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1000,"currency":"CHF","value_usd":1114},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1114},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.79541296,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"6","issue":"3","first_page":"42","last_page":"42"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.4537000060081482,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.4537000060081482,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.41909998655319214,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.02590000070631504,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/critical-infrastructure","display_name":"Critical infrastructure","score":0.5026000142097473},{"id":"https://openalex.org/keywords/cyber-attack","display_name":"Cyber-attack","score":0.46059998869895935},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.41290000081062317},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.40529999136924744},{"id":"https://openalex.org/keywords/binary-number","display_name":"Binary number","score":0.4009000062942505},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.3921999931335449},{"id":"https://openalex.org/keywords/cyber-physical-system","display_name":"Cyber-physical system","score":0.3310000002384186},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.32510000467300415}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7010999917984009},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6234999895095825},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.5026000142097473},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.46059998869895935},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.41290000081062317},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.40529999136924744},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.4009000062942505},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.3921999931335449},{"id":"https://openalex.org/C179768478","wikidata":"https://www.wikidata.org/wiki/Q1120057","display_name":"Cyber-physical system","level":2,"score":0.3310000002384186},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32899999618530273},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.32510000467300415},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.3133000135421753},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.3034999966621399},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.29339998960494995},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.29330000281333923},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.28200000524520874},{"id":"https://openalex.org/C3018725008","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber threats","level":2,"score":0.27160000801086426},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.2639000117778778},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.25949999690055847},{"id":"https://openalex.org/C506615639","wikidata":"https://www.wikidata.org/wiki/Q21662260","display_name":"Command and control","level":2,"score":0.25619998574256897},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/network6030042","is_oa":true,"landing_page_url":"https://doi.org/10.3390/network6030042","pdf_url":null,"source":{"id":"https://openalex.org/S4210214347","display_name":"Network","issn_l":"2673-8732","issn":["2673-8732"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/network6030042","is_oa":true,"landing_page_url":"https://doi.org/10.3390/network6030042","pdf_url":null,"source":{"id":"https://openalex.org/S4210214347","display_name":"Network","issn_l":"2673-8732","issn":["2673-8732"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Network","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","id":"https://metadata.un.org/sdg/9","score":0.6335011124610901}],"awards":[{"id":"https://openalex.org/G4868571704","display_name":null,"funder_award_id":"NBU-FFR-2025-2119-06","funder_id":"https://openalex.org/F4320328654","funder_display_name":"Northern Border University"}],"funders":[{"id":"https://openalex.org/F4320328654","display_name":"Northern Border University","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":16,"referenced_works":["https://openalex.org/W3048313003","https://openalex.org/W3180738098","https://openalex.org/W4404599570","https://openalex.org/W4406754702","https://openalex.org/W4412707797","https://openalex.org/W4416208996","https://openalex.org/W4416945408","https://openalex.org/W7118172556","https://openalex.org/W7118833732","https://openalex.org/W7121358029","https://openalex.org/W7123343212","https://openalex.org/W7125203466","https://openalex.org/W7127055247","https://openalex.org/W7128618773","https://openalex.org/W7130707446","https://openalex.org/W7133126365"],"related_works":[],"abstract_inverted_index":{"Cyber-physical":[0],"smart":[1,59,69],"infrastructures":[2],"integrate":[3],"sensing":[4],"devices,":[5],"communication":[6],"networks,":[7],"control":[8],"components,":[9],"and":[10,36,51,79,90,106,119,125,149,180,204,238,247],"service":[11],"platforms,":[12],"which":[13],"makes":[14],"them":[15],"vulnerable":[16],"to":[17,34,73,134],"malicious":[18,81],"activities":[19],"that":[20,227],"may":[21],"evolve":[22],"gradually":[23],"through":[24],"several":[25],"attack":[26,50,117,127,245],"stages.":[27,128],"The":[28,83,153],"objective":[29],"of":[30,43,114,122,243],"this":[31,64],"study":[32],"is":[33],"develop":[35],"evaluate":[37],"a":[38,45,57,66,93,166],"simulation-based":[39,230],"cybersecurity":[40,95],"framework":[41,231],"capable":[42],"detecting":[44],"proposed":[46,229],"novel":[47],"multi-stage":[48],"cyber":[49],"identifying":[52],"its":[53],"internal":[54],"progression":[55],"within":[56],"realistic":[58,234],"infrastructure":[60,70,141,169],"environment.":[61],"To":[62],"achieve":[63],"objective,":[65],"NetSim-based":[67],"cyber-physical":[68],"was":[71,86,103,158],"modeled":[72],"generate":[74,233],"both":[75,244],"normal":[76,115],"operational":[77,151],"traffic":[78,85,118,236],"staged":[80],"traffic.":[82],"generated":[84],"captured,":[87],"processed,":[88],"labeled,":[89],"transformed":[91],"into":[92],"stage-aware":[94,186],"dataset.":[96],"An":[97],"artificial":[98],"neural":[99],"network":[100],"(ANN)":[101],"model":[102,137,191],"then":[104],"trained":[105],"evaluated":[107],"for":[108,221],"two":[109],"detection":[110,242],"tasks:":[111],"binary":[112,155],"classification":[113,121],"versus":[116],"multi-class":[120,187],"compromise,":[123],"coordination,":[124],"execution":[126],"Twenty":[129],"experimental":[130,163],"configurations":[131],"were":[132],"designed":[133],"examine":[135],"the":[136,161,189,211,228],"under":[138],"progressively":[139],"broader":[140],"contexts,":[142],"including":[143],"sensing,":[144],"service,":[145],"gateway,":[146],"control,":[147],"backbone,":[148],"full-span":[150,168],"scenarios.":[152],"best":[154],"testing":[156],"performance":[157,214],"achieved":[159,192],"in":[160],"eighteenth":[162],"configuration,":[164],"representing":[165],"broad":[167],"scenario,":[170],"with":[171],"97.96%":[172],"accuracy,":[173,194],"97.80%":[174],"precision,":[175,197],"97.65%":[176],"recall,":[177,200],"97.72%":[178],"F1-score,":[179,203],"1.06%":[181],"false":[182],"positive":[183],"rate.":[184],"For":[185],"detection,":[188],"ANN":[190],"96.97%":[193],"96.36%":[195],"macro-averaged":[196,199,202],"96.20%":[198],"96.28%":[201],"96.55%":[205],"weighted":[206,218],"F1-score.":[207],"Macro-averaged":[208],"metrics":[209],"report":[210],"unweighted":[212],"average":[213],"across":[215],"classes,":[216],"while":[217],"F1-score":[219],"accounts":[220],"class":[222],"support.":[223],"These":[224],"results":[225],"show":[226],"can":[232],"attack-aware":[235],"data":[237],"support":[239],"reliable":[240],"ANN-based":[241],"presence":[246],"attack-stage":[248],"progression.":[249]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-06-24T00:00:00"}