{"id":"https://openalex.org/W7166819986","doi":"https://doi.org/10.3837/tiis.2026.06.019","title":"A Machine Learning-Based Data Model for Cybersecurity Resiliency Assessment and Predictive Analysis","display_name":"A Machine Learning-Based Data Model for Cybersecurity Resiliency Assessment and Predictive Analysis","publication_year":2026,"publication_date":"2026-06-30","ids":{"openalex":"https://openalex.org/W7166819986","doi":"https://doi.org/10.3837/tiis.2026.06.019"},"language":null,"primary_location":{"id":"doi:10.3837/tiis.2026.06.019","is_oa":true,"landing_page_url":"https://doi.org/10.3837/tiis.2026.06.019","pdf_url":"https://itiis.org/digital-library/manuscript/file/107592/TIIS Vol 20, No 6-19.pdf","source":{"id":"https://openalex.org/S204131793","display_name":"KSII Transactions on Internet and Information Systems","issn_l":"1976-7277","issn":["1976-7277","2288-1468"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4323966148","host_organization_name":"Korea Society of Internet Information","host_organization_lineage":["https://openalex.org/P4323966148"],"host_organization_lineage_names":["Korea Society of Internet Information"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"KSII Transactions on Internet and Information Systems","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://itiis.org/digital-library/manuscript/file/107592/TIIS Vol 20, No 6-19.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138960506","display_name":"Riyadh Jasim Mohammad","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Riyadh Jasim Mohammad","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5003754677","display_name":"Ali Broumandnia","orcid":"https://orcid.org/0000-0001-5145-2013"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Ali Broumandnia","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001675176","display_name":"Razieh Farazkish","orcid":"https://orcid.org/0000-0003-3770-4194"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Razieh Farazkish","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5070320336","display_name":"Mona Moradi","orcid":"https://orcid.org/0000-0001-8146-4541"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mona Moradi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.87867195,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"20","issue":"6","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.18729999661445618,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.18729999661445618,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.10379999876022339,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11807","display_name":"Infrastructure Resilience and Vulnerability Analysis","score":0.0729999989271164,"subfield":{"id":"https://openalex.org/subfields/2205","display_name":"Civil and Structural Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.40299999713897705},{"id":"https://openalex.org/keywords/data-analysis","display_name":"Data analysis","score":0.31200000643730164},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.2987000048160553},{"id":"https://openalex.org/keywords/data-validation","display_name":"Data validation","score":0.2870999872684479},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.2824000120162964},{"id":"https://openalex.org/keywords/data-model","display_name":"Data model (GIS)","score":0.2777000069618225}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9054999947547913},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.40299999713897705},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.38989999890327454},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3765999972820282},{"id":"https://openalex.org/C175801342","wikidata":"https://www.wikidata.org/wiki/Q1988917","display_name":"Data analysis","level":2,"score":0.31200000643730164},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.2987000048160553},{"id":"https://openalex.org/C92446256","wikidata":"https://www.wikidata.org/wiki/Q3306762","display_name":"Data validation","level":2,"score":0.2870999872684479},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.2824000120162964},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2791000008583069},{"id":"https://openalex.org/C100463513","wikidata":"https://www.wikidata.org/wiki/Q5227322","display_name":"Data model (GIS)","level":2,"score":0.2777000069618225},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.2630999982357025},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.25949999690055847},{"id":"https://openalex.org/C193519340","wikidata":"https://www.wikidata.org/wiki/Q891179","display_name":"Data loss","level":2,"score":0.25839999318122864},{"id":"https://openalex.org/C45804977","wikidata":"https://www.wikidata.org/wiki/Q7239673","display_name":"Predictive modelling","level":2,"score":0.2572000026702881}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3837/tiis.2026.06.019","is_oa":true,"landing_page_url":"https://doi.org/10.3837/tiis.2026.06.019","pdf_url":"https://itiis.org/digital-library/manuscript/file/107592/TIIS Vol 20, No 6-19.pdf","source":{"id":"https://openalex.org/S204131793","display_name":"KSII Transactions on Internet and Information Systems","issn_l":"1976-7277","issn":["1976-7277","2288-1468"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4323966148","host_organization_name":"Korea Society of Internet Information","host_organization_lineage":["https://openalex.org/P4323966148"],"host_organization_lineage_names":["Korea Society of Internet Information"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"KSII Transactions on Internet and Information Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3837/tiis.2026.06.019","is_oa":true,"landing_page_url":"https://doi.org/10.3837/tiis.2026.06.019","pdf_url":"https://itiis.org/digital-library/manuscript/file/107592/TIIS Vol 20, No 6-19.pdf","source":{"id":"https://openalex.org/S204131793","display_name":"KSII Transactions on Internet and Information Systems","issn_l":"1976-7277","issn":["1976-7277","2288-1468"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4323966148","host_organization_name":"Korea Society of Internet Information","host_organization_lineage":["https://openalex.org/P4323966148"],"host_organization_lineage_names":["Korea Society of Internet Information"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"KSII Transactions on Internet and Information Systems","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Climate action","score":0.5151116847991943,"id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7166819986.pdf","grobid_xml":"https://content.openalex.org/works/W7166819986.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Rapidly":[0],"evolving":[1],"cyber":[2,229],"threats":[3],"expose":[4],"organizational":[5],"IT":[6,212],"infrastructures":[7],"to":[8,17,74,95,106,189,218],"sophisticated":[9],"risks":[10],"that":[11,142],"traditional,":[12],"reactive":[13],"security":[14],"measures":[15],"fail":[16],"mitigate":[18],"effectively.Consequently,":[19],"there":[20],"is":[21],"an":[22,136],"urgent":[23],"imperative":[24],"for":[25,50,174,210,227],"dynamic":[26],"frameworks":[27],"capable":[28],"of":[29,149,154],"not":[30],"only":[31],"assessing":[32],"current":[33],"resiliency":[34,52,85,180,202],"but":[35],"also":[36],"predicting":[37],"potential":[38],"vulnerabilities.This":[39],"paper":[40],"proposes":[41],"a":[42,76,147,152,207,224],"novel":[43],"Machine":[44],"Learningbased":[45],"Data":[46],"Model":[47],"designed":[48],"specifically":[49,72,129],"cybersecurity":[51],"assessment":[53,58],"and":[54,98,133,151,200,214],"predictive":[55,104],"analysis.Unlike":[56],"static":[57],"methods,":[59],"this":[60,204],"approach":[61],"integrates":[62],"comprehensive":[63],"network":[64,198],"log":[65],"data":[66,199],"with":[67],"unsupervised":[68],"deep":[69],"learning":[70],"techniques,":[71],"Autoencoders,":[73],"establish":[75],"proactive":[77],"defense":[78],"mechanism.The":[79],"proposed":[80,144],"model":[81,116],"focuses":[82],"on":[83,156],"quantifying":[84],"through":[86],"measurable":[87],"metrics-such":[88],"as":[89,223],"Dynamic":[90],"Availability":[91],"(A_dyn),":[92],"Mean":[93,216],"Time":[94,217],"Resilience":[96],"(MTTR),":[97],"Composite":[99],"Resiliency":[100],"Score":[101],"(R_score)-while":[102],"utilizing":[103],"analytics":[105],"forecast":[107],"attack":[108],"vectors":[109],"before":[110],"they":[111],"materialize.To":[112],"rigorously":[113],"validate":[114],"the":[115,126,130,143,162,182,194],"against":[117,135],"modern":[118,228],"threat":[119],"landscapes,":[120],"extensive":[121],"experiments":[122],"were":[123],"conducted":[124],"using":[125],"CICIDS2017":[127],"dataset,":[128],"\"Friday-WorkingHours-Afternoon-DDoS\"":[131],"subset,":[132],"benchmarked":[134],"Isolation":[137],"Forest":[138],"baseline.Quantitative":[139],"results":[140],"demonstrate":[141],"Autoencoder":[145],"achieves":[146],"Precision":[148],"0.98":[150],"Recall":[153],"0.73":[155],"volumetric":[157],"DDoS":[158],"attacks,":[159],"significantly":[160],"outperforming":[161],"baseline":[163],"method":[164],"(Recall":[165],"0.25).The":[166],"model's":[167],"high":[168],"precision":[169],"ensures":[170],"minimal":[171],"false":[172],"alarms-critical":[173],"maintaining":[175],"operator":[176],"trust":[177],"in":[178],"production":[179],"systems-while":[181],"recall":[183],"provides":[184,206],"operationally":[185],"sufficient":[186],"early":[187],"warning":[188],"activate":[190],"mitigation":[191],"protocols.By":[192],"bridging":[193],"gap":[195],"between":[196],"raw":[197],"actionable":[201],"intelligence,":[203],"framework":[205],"structured":[208],"pathway":[209],"hardening":[211],"networks":[213],"reducing":[215],"Resilience,":[219],"demonstrating":[220],"its":[221],"utility":[222],"critical":[225],"tool":[226],"defense.":[230]},"counts_by_year":[],"updated_date":"2026-07-03T06:15:21.484131","created_date":"2026-07-02T00:00:00"}
