In recent years, several industries have registered an impressive improvement in technological advances such as Internet of Things (IoT), e-commerce, vehicular networks, etc. These advances have sparked an increase in the volume of information that gets transmitted from different nodes of a computer network (CN). As a result, it is crucial to safeguard CNs against security threats and intrusions that can compromise the integrity of those systems. In this paper, we propose a machine mearning (ML) intrusion detection system (IDS) in conjunction with the Genetic Algorithm (GA) for feature selection. To assess the effectiveness of the proposed framework, we use the NSL-KDD dataset. Furthermore, we consider the following ML methods in the modelling process: decision tree (DT), support vector machine (SVM), random forest (RF), extra-trees (ET), extreme gradient boosting (XGB), and naïve Bayes (NB). The results demonstrated that using the GA algorithm has a positive impact on the performance of the selected classifiers. Moreover, the results obtained by the proposed ML methods were superior to existing methodologies.

A single Information security is of pivotal concern for consistently streaming information over the widespread internetwork. The bottleneck flow of incoming and outgoing data traffic introduces the issue of malicious activities taken place by intruders, hackers and attackers in the form of authenticity desecration, gridlocking data traffic, vandalizing data and crashing the established network. The issue of emerging suspicious activities is managed by the domain of Intrusion Detection Systems (IDS). The IDS consistently monitors the network for identifica-tion of suspicious activities and generates alarm and indication in presence of malicious threats and worms. The performance of IDS is improved by using different signature based machine learning algorithms. In this paper, the performance of IDS model is determined using hybridization of nestrov-accelerated adaptive moment estimation –stochastic gradient descent (HNADAM-SDG) algorithm. The performance of the algorithm is compared with other classi-fication algorithms as logistic regression, ridge classifier and ensemble algorithm by adapting feature selection and optimization techniques

Standard Ethernet (IEEE 802.3 and the TCP/IP protocol suite) is gradually applied in industrial control system (ICS) with the development of information technology. It breaks the natural isolation of ICS, but contains no security mechanism. A modified intrusion detection system (IDS), which is strongly correlated to specific industrial scenario, is necessary for modern ICS. On the one hand, this paper outlines attack models, including infiltration attacks and our creative forging attack. On the other hand, we proposes a hierarchical IDS, which contains a traffic prediction model and an anomaly detection model. The traffic prediction model, which is based on autoregressive integrated moving average (ARIMA), can forecast the traffic of ICS network in the short term and precisely detect the infiltration attacks according to abnormal changes in traffic pattern. The anomaly detection model using one-class support vector machine (OCSVM) is able to detect malicious control instructions by analyzing the key field in EtherNet/IP packets. The experimental results show that the hierarchical IDS has an outstanding performance in detecting infiltration attacks and forging attack compared with other two innovative IDSs.

Security has become a critical issue in today’s highly distributed and networked systems. Network intrusion detection systems (NIDSs), especially signature-based NIDSs, are being widely deployed in a distributed network environment with the purpose of defending against a variety of network attacks. Most of the commercially available NIDSs are software based and rely on pattern matching to extract the threat from network traffic. The increase in network speed and traffic may make existing algorithms to become a performance bottleneck. Therefore it is very necessary to develop faster and more efficient pattern matching algorithm in order to overcome the troubles on performance of NIDSs. Therefore, we propose a multi fusion pattern matching algorithm for Network Intrusion Detection Systems. The results obtained in percentages from the proposed fusion algorithm given better values in terms processing time in milliseconds than the existing algorithms when data English text are applied to evaluate the fusion performances.

With the continuous development of network technology, complex network systems generate massive unbalanced attack traffic. Due to the severe imbalance in the quantities of normal samples and attack samples, as well as among different types of attack samples, intrusion detection systems suffer from low detection rates for rare class attack data. In this paper, we propose a geometric synthetic minority oversampling technique based on optimized kernel density estimation algorithm. This method can generate diverse rare class attack data by learning the distribution of rare class attack data while maintaining similarity with the original sample features. Meanwhile, the balanced data is input to a feature extraction module built upon multiple denoising autoencoders, reducing information redundancy in high-dimensional data and improving the detection performance for unknown attacks. Subsequently, a soft voting ensemble learning technique is utilized for multi-class anomaly detection on the balanced and dimensionally reduced data. Finally, an intrusion detection system is constructed based on data preprocessing, imbalance handling, feature extraction, and anomaly detection modules, and validated on the NSL-KDD and N-BaIoT datasets. Comparative experiments with baseline models and other state-of-the-art methods demonstrate that the proposed system improves the detection rate of rare class attack data. Furthermore, it achieves a good overall detection rate on the Internet of Things dataset (N-BaIoT), indicating its strong applicability.

Intrusion Detection Systems (IDS) plays a part in modern cyber security, as a result of the increasing need for cyber security systems in the “real” world due to the increasing number of cyber attacks, more sophisticated systems are required in order to prevent these attacks - an IDS can provide this protection. Due to the sophistication of these systems, they must be properly understood, developed and analyzed - research papers can be used as a tool to improve IDS systems. This paper is composed of two main sections: a survey and a taxonomy, providing information, reviews and interpretations from relevant papers, a timeline of important papers, a discussion on the future of IDS and a classification on IDS and how to apply this.

With the latest advances in information and communication technologies, greater amounts of sensitive user and corporate information are constantly shared across the network making it susceptible to an attack that can compromise data confidentiality, integrity and availability. Intrusion Detection Systems (IDS) are important security mechanisms that can perform a timely detection of malicious events through the inspection of network traffic or host-based logs. Throughout the years, many machine learning techniques have proven to be successful at conducting anomaly detection but only a few considered the sequential nature of data. This work proposes a sequential approach and evaluates the performance of a Random Forest (RF), a Multi-Layer Perceptron (MLP) and a Long-Short Term Memory (LSTM) on the CIDDS-001 dataset. The resulting performance measures of this particular approach are compared with the ones obtained from a more traditional one, that only considers individual flow information, in order to determine which methodology best suits the concerned scenario. The experimental outcomes lead to believe that anomaly detection can be better addressed from a sequential perspective and that the LSTM is a very reliable model for acquiring sequential patterns in network traffic data, achieving an accuracy of 99.94% and a f1-score of 91.66%.

The advancement in network security threats led to the development of new Intrusion Detection Systems(IDS) that rely on deep learning algorithms known as deep IDS. Along with other systems based on deep learning, deep IDS suffer from adversarial examples: malicious inputs aiming to change the prediction of a machine learning/deep learning model. Protecting deep learning against adversarial examples remains an open challenge. In this paper, we propose “NIDS-Defend” a framework to enhance the robustness of Network IDS against adversarial attacks. Our framework is composed of two layers: a statistical test and a classifier that together detect adversarial examples in real-time. The detection process consists of two steps: (1) flagging flows that contain adversarial examples with a statistical test, and (2) extracting individual adversarial examples in the previously flagged flows with a classifier. Our approach is evaluated on binary IDS with the NSL-KDD dataset. To generate adversarial examples, the crafting methods used are (1) Boundary attack and (2) HopSkipJumpAttack. We investigate the vulnerabilities of a Network IDS against adversarial examples, then apply our defense. The statistical test can confidently distinguish adversarial flows with more than 95% accuracy, and the classifier detects individual adversarial examples with more than 80% accuracy. We also show that our framework detects adversarial examples crafted by an adversary aware of the defense and confirm the effectiveness of our solution against adversarial attacks.

Nowadays, the Internet of Things (IoT) devices and applications have rapidly expanded worldwide due to their benefits in improving the business environment, industrial environment, and people's daily lives. However, the IoT devices are not immune to malicious network traffic, which causes potential negative consequences and sabotages IoT operating devices. Therefore, developing a method for screening network traffic is necessary to detect and classify malicious activity to mitigate its negative impacts. Therefore, this research proposes a predictive machine learning model to detect and classify network activity in an IoT system. Specifically, our model distinguishes between normal and anomaly network activity. Furthermore, it classifies network traffic into five categories, normal, Mirai attack, denial of service (DoS) attack, Scan attack, and man-in-the-middle (MITM) attack. Five supervised learning models were implemented to characterize their performance in detecting and classifying network activities for IoT systems. This includes models shallow neural networks (SNN), decision trees (DT), bagging trees (BT), support vector machine (SVM), and k-nearest neighbor (kNN). The learning models were evaluated on a new and broad dataset for IoT attacks, the IoTID20 dataset. Besides, a deep feature engineering process was applied to the dataset to improve the accuracy of the learning models. Our experimental evaluation exhibited an accuracy of 100% recorded for the detection using all implemented models and an accuracy of 99.4%-99.9% recorded for the classification process.

The smart grid system, an improvised form of the traditional grid, is considered a critical cyber-physical system. Due to its complex combination of smart and legacy technologies, this technology is characterized by a wide range of features such as full duplex communication, advanced metering infrastructure, remote monitoring, and control. However, despite this system’s substantial environmental and socio-economic impact on modern life, it poses severe security vulnerabilities due to its integration and interconnected and interdependent cyber-physical components. Based on the rapid development of cyber-physical systems (CPS), academics and industries have investigated relevant techniques to enhance and strengthen the security measures of the SG system. The intrusion detection system is a countermeasure, a powerful safeguard against various cyber-attacks and threats. The contribution of the IDSs to the SG paradigm is examined in this study. A comprehensive review has been presented in this study, highlighting different techniques, basic ideas, and analyses. Besides discussing the contemporary pertinent research studies, the shortcomings of the existing IDS for the SG system are also identified with a recommendation for future research direction.

Machine learning has become widely adopted as a strategy for dealing with a variety of cybersecurity issues, ranging from insider threat detection to intrusion and malware detection. However, by their very nature, machine learning systems can introduce vulnerabilities to a security defence whereby a learnt model is unaware of so-called adversarial examples that may intentionally result in mis-classification and therefore bypass a system. Adversarial machine learning has been a research topic for over a decade and is now an accepted but open problem. Much of the early research on adversarial examples has addressed issues related to computer vision, yet as machine learning continues to be adopted in other domains, then likewise it is important to assess the potential vulnerabilities that may occur. A key part of transferring to new domains relates to functionality-preservation, such that any crafted attack can still execute the original intended functionality when inspected by a human and/or a machine. In this literature survey, our main objective is to address the domain of adversarial machine learning attacks and examine the robustness of machine learning models in the cybersecurity and intrusion detection domains. We identify the key trends in current work observed in the literature, and explore how these relate to the research challenges that remain open for future works. Inclusion criteria were: articles related to functionality-preservation in adversarial machine learning for cybersecurity or intrusion detection with insight into robust classification. Generally, we excluded works that are not yet peer-reviewed; however, the authors include some significant papers that make a clear contribution to the domain. There is a risk of subjective bias in the selection of non-peer reviewed articles; however, this is mitigated by co-author review. We selected the following databases with a sizeable computer science element to search and retrieve literature: IEEE Xplore, ACM Digital Library, ScienceDirect, Scopus, SpringerLink,Google Scholar. The literature search was conducted upto January 2022. We have striven to ensure a comprehensive coverage of the domain to the best of our knowledge. We have performed systematic searches of the literature, noting our search terms and results, and following up on all materials that appear relevant and fit within the topic domains of this review. This research was funded by the Partnership PhD scheme at the University of the West of England in collaboration with Techmodal Ltd.

Recent years have witnessed a rapid growth of code-reuse attacks in advance persistent threats and cyberspace crimes. Carefully crafted code-reuse exploits circumvent modern protection mechanisms and hijack the execution flow of a program to perform expected functionalities by chaining together existing codes. The sophistication and intrication of code-reuse exploits hinder the scrutinization and dissection on them. Although the previous literature has introduced some feasible approaches, effectiveness and reliability in practical applications remain severe challenges. To address this issue, we propose Horus, a data-driven framework for effective and reliable detection on code-reuse exploits. In order to raise the effectiveness against underlying noises, we comprehensively leverage the strengths of time-series and frequency-domain analysis, and propose a learning-based detector that synthesizes the contemporary twofold features. Then we employ a lightweight interpreter to speculatively and tentatively translate the suspicious bytes to open the black box and enhance the reliability and interpretability. Additionally, a functionality-preserving data augmentation is adopted to increase the diversity of limited training data and raise the generality for real-world deployment. Comparative experiments and ablation studies are conducted on a dataset composed of real-world instances to verify and prove the prevalence of Horus. The experimental results illustrate that Horus outperform existing methods on the identification of code-reuse exploits from data stream with an acceptable overhead. Horus does not rely on any dynamic executions and can be easily integrated into existing defense systems. Moreover, Horus is able to provide tentative interpretations about attack semantics irrespective of target program, which further improve system's effectiveness and reliability.

The IDS serves as a security system that maintains constant surveillance over network traffic and host systems in order to identify any security breaches or potentially concerning activities. Recently. the rise in cyber-attacks has driven the necessity for the development of automated and intelligent network intrusion detection systems. These systems are designed to learn the typical patterns of network traffic, allowing them to identify any deviations from normal behaviour, which can be classified as anomalous or malicious. Machine learning methods are widely used to exhibit a satisfactory effectiveness in detecting malicious payloads in the network traffic. While the volume of the data generated from IDS is increasing exponentially results in the emergence of substantial security risks, it highlighted the imperative to strengthen network security. The performance of traditional machine learning methods depends on the dataset and the data balance distribution in it. while most of IDS datasets suffer from unbalancing, this limits the performance of the machine learning method used in the system and results in missed detections and false alarms in the conventional IDSs. To address this issue, this paper presents a new model-based Generative Adversarial Network (GAN) called TDCGAN to enhance the detection rate of less of minor class in the dataset while maintaining efficiency. The proposed model consists of one generator and three discriminators with an election layer at the end of architecture. The UGR’16 data set is used for evaluation purposes. In order to demonstrate the efficacy of our proposed model, various machine learning algorithms have been utilized for comparison. The experimental findings have determined that TDCGAN presents an efficient resolution for addressing imbalanced intrusion detection and surpasses the performance of other oversampling machine learning methods.

Today’s intruders usually send attacking commands to a target system through several stepping-stone hosts, in order to reduce the chance of being detected. With stepping-stone intrusion (SSI), the intruder’s identity is hidden behind a long interactive chain of hosts and very hard to detect. An effective approach for SSI detection (SSID) is to estimate the length of the chain. This type of method is called network-based SSID. Most existing network-based SSID worked effectively only when intruders’ session manipulation was not present. These known SSID algorithms are either weak to resist intruders’ chaff-perturbation manipulation or having very limited capability in resisting attacker’s session manipulation. This paper develops a novel network-based SSID algorithm resistant to intruders’ chaff-perturbation by using packet crossover. Our proposed SSID algorithm is simple and easy to implement as the number of packet crossovers can be easily computed. We conduct rigorous technical proofs to verify the correctness of our proposed algorithm. The experimental results show that our proposed SSID algorithm works effectively and perfectly in resisting intruders’ chaff-perturbation up to 50% chaff rate.

Internet users have significantly increased as a result of the spread of Internet of Things (IoT) technologies and 5G networks. But these developments also make people more susceptible to cybercrime. Intrusion detection systems (IDSs), which protect against cyber threats and facilitate early response, have emerged as crucial security measures to handle this expanding risk. This study intends to present a comprehensive review of IDS, how it interacts with machine learning (ML), and develop a suitable approach for attack detection in 5G and IoT environments. To accomplish this, we leverage the AWID dataset, which is the first wireless traffic dataset specifically designed for security purposes, focusing on the IEEE 802.11 standard and developed to the AWID3 dataset. In this research, we suggest a powerful machine-learning framework for wireless system intrusion detection. We perform evaluations in three stages, covering scenarios for multiple nominal classes, multiple numeric classes, and binary classes. In order to improve the performance of the intrusion detection model, we also use feature selection approaches. Additionally, we offer a model that incorporates the outcomes of three feature selection techniques, highlighting how crucial it is to comprehend the features present in wireless datasets. Our experiments demonstrate how a machine learning-based approach can detect attacks with a high level of accuracy. In particular, the boosted decision tree performs best when overlapping feature selection procedures, whereas the Logistic Regression approach obtains the maximum accuracy of 99% in the first two phases. By providing a comprehensive framework for identifying attacks in 5G and IoT contexts using machine learning approaches, this research makes a contribution to the field of intrusion detection. The results underline how important it is to comprehend wireless dataset characteristics and highlight the possibility of ML-based methods for attaining highly accurate intrusion detection.

With the rapid development of Internet of Things (IoT)-based near-earth remote sensing technology, the problem of network intrusion for near-earth remote sensing systems has become more complex and large-scale. Therefore, it is essential to seek an intelligent, automated, and robust network intrusion detection method. In recent years, network intrusion detection methods based on graph neural networks (GNNs) have been proposed. However, there are still some practical issues with these methods. For example, they have not taken into consideration the characteristics of near-earth remote sensing systems, the state of the nodes, and the temporal features. Therefore, this article analyzes the characteristics of existing near-earth remote sensing systems and proposes a spatio-temporal graph attention network (N-STGAT) that considers the state of nodes. The proposed network applies spatiotemporal graph neural networks to the network intrusion detection of near-earth remote sensing systems and validates the effectiveness of the proposed method on the latest flow-based dataset.

. In today’s world, cyber attack is one of the major issues concerning the organizations that deal with technologies like cloud computing, big data, IoT etc. In the area of cyber security, intrusion detection system (IDS) plays a crucial role to identify suspicious activities in the network traffic. Over the past few years, a lot of research has been done in this area but in the current scenario, network attacks are diversifying in both volume and variety. In this regard, this research article proposes a novel IDS where a combination of information gain and decision tree algorithm has been used for the purpose of dimension reduction and classification. For experimental purpose the NSL-KDD dataset has been used. Initially out of 41 features present in the dataset only 5 high information gain valued features are selected for classification purpose. The applicability of the selected features are evaluated through various machine learning based algorithms. The experimental result shows that the decision tree based algorithm records highest recognition accuracy among all the classifiers. Based on the initial classification result a novel methodology based on decision tree has been further developed which is capable of identifying multiple attacks by analyzing the packets of various transactions in real time.

Cloud computing is an emerging area which provide on demand computing resources and services through internet. It is faster and efficient technique but prone to severe security attacks. In this paper author have proposed a Network Intrusion Detection System (NIDS) to detect attacks at front end and backend when bulky flow of data packets flowing in a cloud environment. In our framework we used Signature based detection system for identifying the intruder and the Anomaly based detection system for detecting network attacks. The NIDS sensors were placed in a collaborative manner to prevent the attacks and to update the knowledge bases. Author have used supervised learning model to detect abnormal behavior of packets from network traffic. The dataset were trained and tested in terms of precision, recall, accuracy and model build time to select the best machine-learning model for detection of intruder and to improve the computational time and performance.

An existing power grid is going through a massive transformation. Smart grid technology is a radical approach for improvisation in prevailing power grid. Integration of electrical and communication infrastructure is inevitable for the deployment of Smart grid network. Smart grid technology is characterized by full duplex communication, automatic metering infrastructure, renewable energy integration, distribution automation and complete monitoring and control of entire power grid. Wireless sensor networks (WSNs) are small micro electrical mechanical systems which are accomplished to collect and communicate the data from surroundings. WSNs can be used for monitoring and control of smart grid assets. Security of wireless sensor based communication network is a major concern for researchers and developers. The limited processing capabilities of wireless sensor networks make them more vulnerable to cyber-attacks. The countermeasures against cyber-attacks must be less complex with an ability to offer confidentiality, data readiness and integrity. The address oriented design and development approach for usual communication network requires a paradigm shift to design data oriented WSN architecture. WSN security is an inevitable part of smart grid cyber security. This paper is expected to serve as a comprehensive assessment and analysis of communication standards, cyber security issues and solutions for WSN based smart grid infrastructure.

Computers have evolved over the years and as the evolution continues, we have been ushered into an era where high-speed internet has made it possible for devices in our homes, hospital, energy and industry to communicate with each other. This era is what is known as the Internet of Things (IoT). IoT has several benefits in the health, energy, transportation and agriculture sectors of a country’s economy. These enormous benefits coupled with the computational constraint of IoT devices which makes it difficult to deploy enhanced security protocols on them make IoT devices a target of cyber-attacks. One approach that has been used in traditional computing over the years to fight cyber-attacks is Intrusion Detection System (IDS). However, it is practically impossible to deploy IDS meant for traditional computers in IoT environments because of the computational constraint of these devices. In this regard, this study proposes a lightweight IDS for IoT devices using an incremental ensemble learning technique. We used Gaussian Naive Bayes and Hoeffding tree to build our incremental ensemble model. The model was then evaluated on the TON IoT dataset. Our proposed model was compared with other state-of-the-art methods proposed and evaluated using the same dataset. The experimental results show that the proposed model achieved an average accuracy of 99.98\%. We also evaluated the memory consumption of our model which showed that our model achieved a lightweight model status of 650.11KB as the highest memory consumption and 122.38KB as the lowest memory consumption.

The constant increase in volume and wide variety of available Internet of Things (IoT) devices leads to highly diverse software and hardware stacks, which opens new avenues for exploiting previously unknown vulnerabilities. The ensuing risks are amplified by the inherent IoT resource constraints both in terms of performance and energy expenditure. At the same time, IoT devices often times generate or collect sensitive, real-time data used in critical application scenarios (e.g. health monitoring, transportation, smart energy, etc.). All these factors combined make IoT networks a primary target and potential victims for malicious actors. In this paper, we present a brief overview of existing attacks and defense strategies against urban IoT networks. The goal of this work is twofold: First, it presents a summary of some of the common attack vectors and the corresponding solutions available in the research literature. Then, the paper lays out a theoretical plan and a corresponding pipeline of steps (i.e. development and implementation process) for the design and application of the solutions encountered throughout the course of the research efforts. The end goal of following this plan is the deployment of the proposed IoT security measures in a real-world urban IoT infrastructure.

The CAN protocol is widely adopted for in-vehicle networks due to its cost efficiency and reliable transmission. However, despite its popularity, the protocol lacks built-in security mechanisms, making it vulnerable to various attacks such as flooding, fuzzing, and DoS. These attacks can exploit vulnerabilities and disrupt the normal behavior of the in-vehicle network. One of the main reasons for these security concerns is that the protocol relies on broadcast frames for communication between ECUs within the network. To tackle this issue, this paper presents an intrusion detection system that leverages multiple LSTM-Autoencoders. The proposed system utilizes diverse features, including transmission interval and payload value changes, to capture various characteristics of normal network behavior. By analyzing different types of features separately using the LSTM-Autoencoder model, the system effectively detects anomalies. In our evaluation, we conducted experiments using real vehicle network traffic, and the results demonstrated the system's high precision with a 99% detection rate in identifying anomalies.

Cyber security plays an important role to protect our computer, network, program and data from unauthorized access. Intrusion detection system (IDS) and intrusion prevention system (IPS) are two main categories of cyber security, designed to identify any suspicious activities present in inbound and outbound network packets and restrict the suspicious incident. Deep neural network plays a significant role in the construction of IDS and IPS. This paper highlights a novel IDS using optimized convolution neural network (CNN-IDS). An optimized CNNIDS model is an improvement over CNN which selects the best weighted model by considering the loss in every epoch. All the experiments have been conducted on the well known NSL-KDD dataset. Information gain has been used for dimensionality reduction. The accuracy of the proposed model is evaluated through optimized CNN for both binary and multiclass categories. Finally, a critical comparison has been performed with other general classifiers like J48, Naive Bayes, NB tree, Random forest, Multilayer Perceptron (MLP), Support Vector Machine (SVM), Recurrent Neural Network (RNN) and Convolution Neural Network(CNN). All the experimental results demonstrate that the optimized CNN-IDS model records the best recognition rate with minimum model construction time.

Cyber security has recently received enormous attention in today’s security concerns, due to the popularity of the Internet-of-Things (IoT), the tremendous growth of computer networks, and the huge number of relevant applications. Thus, detecting various cyber-attacks or anomalies in a network and building an effective intrusion detection system that performs an essential role in today’s security is becoming more important. Artificial intelligence, particularly machine learning techniques, can be used for building such a data-driven intelligent intrusion detection system. In order to achieve this goal, in this paper, we present an Intrusion Detection Tree (“IntruDTree”) machine-learning-based security model that first takes into account the ranking of security features according to their importance and then build a tree-based generalized intrusion detection model based on the selected important features. This model is not only effective in terms of prediction accuracy for unseen test cases but also minimizes the computational complexity of the model by reducing the feature dimensions. Finally, the effectiveness of our IntruDTree model was examined by conducting experiments on cybersecurity datasets and computing the precision, recall, fscore, accuracy, and ROC values to evaluate. We also compare the outcome results of IntruDTree model with several traditional popular machine learning methods such as the naive Bayes classifier, logistic regression, support vector machines, and k-nearest neighbor, to analyze the effectiveness of the resulting security model.

This study presents the developments regarding the time-domain-induced polarisation method, as a supporting tool for resistivity soundings during investigations of coastal detrital aquifers that are salinised by marine intrusion. The interpretation of resistivity measurements in such aquifers, which have variable hydrochemistry and lithology, involves uncertainties owing to the presence of low-resistivity lithologies, such as clays. To reduce these uncertainties, the use of other geophysical parameters is necessary; hence, this study focuses on induced polarisation, since it can be measured simultaneously with resistivity. In detail, we propose the determination of induced polarisation using 1D techniques, while developing a different algorithm for processing the induced polarisation data. The aim is to extend the results of this phenomenon, using instead of chargeability, the concepts of polarisability and decay time, which are extracted from the decay curve, given that they represent more intrinsic properties of the various analysed subsurface media. We present results obtained by applying this methodology to a Quaternary aquifer of the Costa del Sol in the SE Iberian Peninsula (in the province of Almería) during two different campaigns, one before and one after winter (i.e., in October and February, respectively). The results reveal the position of the saline front during each campaign, while reflecting the seasonal movement of the marine intrusion.

Dry intrusion is an important mid-latitude atmosphere phenomenon within the upper troposphere and lower stratosphere. It is always found to be related to the cyclogenesis, rainstorm, as well as convection generation and precipitation enhancement. Since the atmosphere environment for any of these above-mentioned weather is terribly complicated, those preexisting popular schemes which takes no account of water vapor may not suitable for detecting the dry intrusion related to these weathers. With regard to the merits and demerits of the current preexisting schemes, a new scheme based on Fengyun-2E geo-stationary satellite data is presented in this study to detect the atmospheric dry intrusion. The scheme is set up based on the statistical relationship between water vapor at high level troposphere, the general moist potential vorticity, ozone concentration and upper-level jet. After using the total amount of ozone and ozone profile operational products retrieved by Fengyun-3 Polar Orbiting Meteorological Satellites and the potential vorticity calculated by ECMWF Interim data for validation, this scheme is applied to analyze two typical middle-latitude weather processes. One is the famous Beijing extreme rainfall of 21 July 2012 and the other is a hailstorm occurred on the eastern China during March 19, 2014. A good application effect in both cases suggests that our new method of detecting dry intrusion is feasible and can be helpful in middle-latitude disastrous weather monitoring and forecasting.

This work presents updated reconstructions of watershed runoff to San Francisco Estuary from tree-ring data to AD 903, coupled with models relating runoff to freshwater flow to the estuary and salinity intrusion. We characterize pre-development freshwater flow and salinity conditions in the estuary over the past millennium and compare this characterization with contemporary conditions to better understand the magnitude and seasonality of changes over this time. This work shows that the instrumented flow record spans the range of runoff patterns over the past millennium (averaged over five, ten, twenty and one hundred years), and thus serves as a reasonable basis for planning-level evaluations of historical hydrologic conditions in the estuary. Over annual timescales we show that, although median freshwater flow to the estuary has not changed significantly, it has been more variable over the past century compared to pre-development flow conditions. We further show that the contemporary period is generally associated with greater spring salinity intrusion and lesser summer-fall salinity intrusion relative to the pre-development period. Thus, salinity intrusion in summer and fall months was a common occurrence under pre-development conditions and has been moderated in the contemporary period due to the operations of upstream reservoirs, which were designed to hold winter and spring runoff for release in summer and fall. This work also confirms a dramatic decadal-scale hydrologic shift in the watershed from very wet to very dry conditions during the late 19th and early 20th centuries; while not unprecedented, these shifts have been seen only a few times in the past millennium. This shift resulted in an increase in salinity intrusion in the first three decades of the 20th century, as documented through early records. Population growth and extensive watershed modification during this period exacerbated this underlying hydrologic shift. Putting this shift in the context of other anthropogenic drivers is important in understanding the historical response of the estuary and in setting salinity targets for estuarine restoration. By characterizing the long-term behavior of San Francisco Estuary, this work supports decision-making in the State of California related to flow and salinity management for restoration of the estuarine ecosystem.

The present study evaluates the psychometric properties of the Conflicts in Romantic Relationships Over Facebook Use Scale with a sample of Puerto Rican adults. A total of 577 Puerto Ricans participated on this confirmatory and psychometric study. The results confirmed that the scale has a multidimensional structure. These dimensions are: Partner Facebook intrusion, Conflict over Facebook use, and Jealousy over Facebook use. A total of 18 items complied with the criteria of discrimination and presented appropriate factorial loads (6 items per dimension). The Cronbach’s Alpha indexes of the dimensions ranged between .87 and .95 and the omega coefficients ranged between .88 and .95. In summary, the instrument has the appropriate psychometric properties to continue with validation studies, as well as to be implemented in various work areas, both theoretical and applied.

Computer network attacks are evolving in parallel with the evolution of hardware and neural network architecture. Despite major advancements in Network Intrusion Detection System (NIDS) technology, most implementations still depend on signature-based intrusion detection systems, which can’t identify unknown attacks. Deep learning can help NIDS to detect novel threats since it has a strong generalization ability. The deep neural network’s architecture has a significant impact on the model’s results. We propose a genetic algorithm based model to find the optimal number of hidden layers and the number of neurons in each layer of the deep neural network (DNN) architecture for the network intrusion detection binary classification problem. Experimental results demonstrate that the proposed DNN architecture shows better performance than classical machine learning algorithms at a lower computational cost.

Soil above a platinum-group element (PGE)-bearing horizon within the Freetown Layered Intrusion, Sierra Leone contains anomalous concentrations of n-alkanes (CnH2n+2) in the range C14 to C22 not readily attributable to an algal or lacustrine origin. Longer chain n-alkanes (C23 to C31) in the soil were derived from the breakdown of leaf litter beneath the closed canopy humid tropical forest. Spontaneous breakdown of the longer chain n-alkanes to form C14-22 n-alkanes without biogenic or abiogenic catalysts is unlikely as the n-alkanes are stable. In the Freetown soil, the catalytic properties of the PGE (Pt in particular) may lower the temperature at which oxidation of the longer chain n-alkanes can occur. Reaction between these n-alkanes and Pt species such as Pt2+(H2O)2(OH)2 and Pt4+(H2O)2(OH)4 can bend and twist the alkanes, and significantly lower the Heat of Formation. Acknowledging the possibility of microbial catalysis and the difficulty of identifying a direct organic geochemical source of the lighter n-alkanes, this paper explores the theoretical potential for abiogenic Pt species catalysis as a mechanism of breakdown of the longer n-alkanes to form C14-22 alkanes. This novel mechanism could substantiate the presence of the PGE in solution predicted by soil geochemistry and illustrate processes involving the PGE. Graphical Abstract

The Internet of Things technology opens the horizon for a broader scope of intelligent applications in smart cities. However, the massive amount of traffic exchanged among devices may cause security risks, significantly when devices are compromised or vulnerable to cyber-attack. An intrusion detection system is the most powerful tool to detect unauthorized attempts to access smart systems. It identifies malicious and benign traffic by analyzing network traffic. In most cases, only a fraction of network traffic can be considered malicious. As a result, it is difficult for an intrusion detection system to detect attacks at high detection rates while maintaining a low false alarm rate. This work proposes an integrated framework to detect suspicious traffic to address secure data communication in smart cities. This paper presents an approach to developing an intrusion detection system to detect various attack types. It can be done by implementing a Principal Component Analysis method that eliminates redundancy and reduces system dimensionality. Furthermore, the proposed model shows how to improve intrusion detection system performance by implementing an ensemble model.

In this work, we adapt the fine-tuning algorithm of the Naïve Bayesian (FTNB) classifier to make it more suitable for imbalanced datasets. In particular, we boost misclassified instance probability terms by an amount that is disproportional to the harmonic mean of actual and predicted classes. The intuition is that discriminative attributes when the instance is misclassified would have small probability term pair values in both the actual class due to data scarcity and the predicted class due to weak correlation. Conversely, if both values are relatively high, then the attribute has good data coverage (support) and it should not be a cause for misclassification. Since the harmonic average is dominated by the smaller value and we have an imbalanced dataset, we should enact a large update if both or either term probabilities of actual and predicted classes are small. We used several benchmark datasets (60 different balanced and imbalanced datasets) to determine if the poor performance of the NB classifier is due to the scarcity of data and compared the performance of the proposed algorithm with NB, original FTNB, and other relatively new SOTA Ensemble Imbalanced Classifiers. Our empirical results reveal that the new proposed algorithm significantly outperforms all other classifiers.

Coastal areas are increasingly being damaged with the expansion of seawater intrusion areas. We suggest a three-step method for reducing seawater intrusion areas by predicting future damage to groundwater being used continuously. First, the area most vulnerable to seawater intrusion damage is selected from among 25 areas on the west coast of the Republic of Korea. Having identified the Taean area as the region in question in the second step, we use RCP 4.5 and 8.5 as future sea level rise scenarios and predict the future usage of groundwater using linear-regression analysis of data for the past 10 years. Consequently, for RCP 8.5 (groundwater-usage scenario 1.0), 68.5% of the total Taean area is projected to be influenced by seawater intrusion. In the third step, the effectiveness of seawater intrusion reduction measures is analyzed considering the projected future situation and the local characteristics of the Taean area. After considering the effects of alternative locations, as well as seawater intrusion related data, alternatives were prioritized using a multi-criteria decision-making method. Consequently, 3, 5, and 4 were prioritized in the listed order, and we judged that by applying seawater intrusion area reduction measures according to this result, we will achieve the biggest effect.

Saltwater intrusion in the rapidly developing city of Da Nang in central Vietnam is currently causing various water-related challenges, including inadequate water supply and water pollution. An integrated SWAT-MODFLOW numerical model was used to investigate the origin and mechanism of saltwater in Holocene and Pleistocene aquifers. Geophysical and isotopic approaches were used to validate the SEAWAT model applied for simulating saltwater intrusion. The results suggest that the ebb and flow of tides, as well as water levels in rivers primarily impact coastal aquifers. However, effective water resource planning and management, along with maintaining the natural recharge of fresh water from local rain during the rainy season, could enable the rational and efficient utilization of groundwater, reducing saltwater intrusion in many areas. During the dry season, groundwater is recharged from higher altitude areas. The current saltwater intrusion mainly occurs along the rivers up to the hydraulic dam. Simulated models, using scenarios of stop abstracting groundwater, but changing to the use of surface water for drinking water, show that the area of saline water shrinks quickly after 30 years, reducing from 59.6 km2 to 39.5 km2 and from 40.2 km2 to 28.6 km2 in Holocene and Pleistocene, respectively.

Artificial Intelligence (AI) is one of the key technologies of the Fourth Industrial Revolution (Industry 4.0), which can be used for the protection of Internet-connected systems from cyber-threats, attacks, damage, or unauthorized access. To intelligently solve today's various cybersecurity issues, popular AI techniques involving Machine Learning (ML) and Deep Learning (DL) methods, the concept of Natural Language Processing (NLP), Knowledge Representation and Reasoning (KRR), as well as the concept of knowledge or rule-based Expert Systems (ES) modeling can be used. Based on these AI methods, in this paper, we present a comprehensive view on "AI-driven Cybersecurity" that can play an important role for intelligent cybersecurity services and management. The security intelligence modeling based on such AI methods can make the cybersecurity computing process automated and intelligent than the conventional security systems. We also highlight several research directions within the scope of our study, which can help researchers do future research in the area. Overall, this paper's ultimate objective is to serve as a reference point and guidelines for cybersecurity researchers as well as industry professionals in the area, especially from an AI-based technical point of view.

In a computing context, cybersecurity is undergoing massive shifts in technology and its operations in recent days, and data science is driving the change. Extracting security incident patterns or insights from cybersecurity data and building corresponding data-driven model, is the key to make a security system automated and intelligent. To understand and analyze the actual phenomena with data, various scientific methods, machine learning techniques, processes, and systems are used, which is commonly known as data science. In this paper, we focus and briefly discuss cybersecurity data science, where the data is being gathered from relevant cybersecurity sources, and the analytics complement the latest data-driven patterns for providing more effective security solutions. The concept of cybersecurity data science allows making the computing process more actionable and intelligent as compared to traditional ones in the domain of cybersecurity. We then discuss and summarize a number of associated research issues and future directions. Furthermore, we provide a machine learning-based multi-layered framework for the purpose of cybersecurity modeling. Overall, our goal is not only to discuss cybersecurity data science and relevant methods but also to focus the applicability towards data-driven intelligent decision making for protecting the systems from cyber-attacks.

The Selective Paste Intrusion (SPI) method is a layer-by-layer additive manufacturing technique that allows for the production of complex geometries in concrete elements by selectively bonding aggregates with cement paste in a particle bed. To create reinforced concrete, the Wire and Arc Additive Manufacturing (WAAM) process shall be integrated into SPI. This technique allows the production of almost free-formed reinforcement and thus complements the advantage of SPI to produce free-formed structures of almost any geometry. However, integration of WAAM into SPI poses a considerable challenge, as high temperatures are generated during the welding process. These temperatures can negatively affect the rheological properties of the cement paste, in turn the penetration behavior of the paste in the particle bed and, subsequently, the mechanical properties of the hardened concrete. A possible passive cooling strategy is to increase the protruding length of the reinforcement bars out of the particle-bed. This requires that the distance of the print nozzle to the particle bed is as well increased, since it must be possible to move it across the reinforcement. The objective was thus to investigate the effect of that distance on print quality and to quantify a maximum allowable distance for an adequate print quality (for the printer setting used) in terms of shape accuracy and concrete strength. Compressive and flexural strength tests as well as geometrical measurements using a 3D scanning method were performed on specimen, printed with varying print nozzle to particle bed distances. It can be stated that for the used SPI print-heads, nozzle-types and parameter settings, the distance between the nozzle and the particle bed should not exceed 50 mm to ensure sufficient print quality in both shape accuracy and mechanical strength.

A practical method is presented to estimate rare earth elements (REE) concentrations in magmatic vapour phase (MVP) in equilibrium with water-saturated granitic melts based on empirical fluid-melt partition coefficients of REE (k_P^REE). The values of k_P^REEcan be calculated from a set of new polynomial equations linking to the chlorine molality (m_Cl^v) of the MVP associated with granitic melts, which are established via a statistical analysis on the existing experimental dataset. These equations may be applied to the entire pressure range (0.1 to 10.0 kb) within the continental crust, suggesting that light REEs behave differently in magmatic fluids, i.e. either being fluid compatible with higher m_Cl^v or fluid incompatible with lower m_Cl^v values. In contrast, heavy REEs are exclusively fluid incompatible and partition favourably into granitic melts. Consequently, magmatic fluids tend to be rich in LREE relative to HREE, leading to REE fractionation during the evolution of magmatic hydrothermal systems. Maximum k_P^REEvalue for each element is predicted and presented in a REE distribution diagram constrained by the threshold of m_Cl^v. REE contents of the granitic melt is approximated by whole-rock analysis, so that REE concentrations in the associated MVP would be estimated from the value of k_P^REE given chemical equilibrium retains. Two examples are provided respectively, to show the use of this method as a REE tracer to fingerprint the source of ore-fluids responsible for the Lake George intrusion-related Au-Sb deposit in New Brunswick (Canada), and for the Bakircay Cu-Au (-Mo) porphyry systems in northern Turkey.

Salinity intrusion is one of the most serious consequences of climate change coupled with rising sea level that significantly affects agricultural activities in many parts of the world. This phenomenon has increasingly become more serious and frequently occurred in the Mekong Delta of Vietnam. As a result, Vietnam has been ranked among top five countries where have been devastatingly impacted by climate change, in particular, its Tra Vinh Province characterized by coastal plain and alluvial deposit. In addition, this area is of the tropical monsoon zone of long rainy season with source of salt brought from the sea by the tides and sea level rise. Regions that are contaminated by salt are located in lowland and often suffer from floods linking to tidal effects with salty water from river systems and channels. Soil salinity evaluation is critical for coastal protection, restoration, and agricultural planning since it can be considered as an agricultural indicator to evaluate quality of soil. Here, we attempt to estimate the soil salinity in Tra Vinh Province, in the Mekong Delta of Vietnam. Landsat 8 OLI images are utilized to derive indices for soil salinity evaluation including single bands, Vegetation Soil Salinity Index (VSSI), Soil Adjusted Vegetation Index (SAVI), Normalized Difference Vegetation Index (NDVI), and Normalized Difference Salinity Index (NDSI). Subsequently, satistical analysis between soil salinity, electrical conductivity (EC, dS/m), and environmental indices derived from Landsat 8 OLI image is performed. Results indicate that spectral value of Near Infrared (NIR) band and VSSI are highly correlated with EC (R2 = 0.7779 and R2 = 0.6957, respectively) in comparison with the other indices. Comparative results show that soil salinity derived from Landsat 8 is consistent with in situ data. Findings of this study demonstrate that Landsat 8 OLI images reveal a high potential for spatiotemporally monitoring the magnitude of soil salinity at the top soil layer. Outcomes of this study are useful for agricultural activities, planners, and farmers by providing the base map of soil salinity contamination for better selection of accomodating crop types to reduce economical lost in the context of climate change. Our proposed method that estimates soil salinity using satellite-derived variables can be applied in the other regions.

The development of wireless sensor networks (WSNs) technology comes with inherent limitations and vulnerabilities that make it exploitable by intruders. The fundamental goal of this article is to solve security problems related to black hole attacks, which interfere with the proper performance of the network and can lead to data leakage and loss. The proposed solution in this article is to apply IDS to a WSN for the first time. We also used the NS2.35 simulator to compare the three routing protocols, AODV, AODV under Hacker Node (HNAODV), and the proposed solution (IDSHNAODV) in the WSN model to reduce the effects of black hole attacks.

This study examines the relationship of fear of missing out (FOMO) with heavy social networking among Turkish university students (aged 17 - 55). The perception of the possible role of parental supervision on online activities is also investigated. Factor analysis of FOMO scale led us to evaluate the construct under two dimensions as (1) fear of missing experience and (2) fear of missing activity. The results revealed that fear of missing activity increases social media intrusion while fear of missing experience is found to have no significant effect. The reverse relationship is also valid: an urge to use social media predicts fear of missing out (activity and experience). Fear of missing experience is associated with problematic social media use (PSMU) and a high desire to use social media. The results additionally demonstrate that students aged 30 and older believe more in the requirement of parental control than those aged 17-22.

Traffic shaping is a critical task in software-defined -IoT networks (SDN-IoTs) to efficiently manage network resources and ensure Quality of Service (QoS) for end-users. However, traditional traffic shaping approaches based on queuing theory or static policies may not be effective due to the dynamic and unpredictable nature of network traffic. In this paper, we propose a novel approach that leverages Graph Neural Networks (GNNs) and Multi-arm Bandit algorithms to dynamically optimize traffic shaping policies based on real-time network traffic patterns. Specifically, our approach uses a GNN model to learn and predict network traffic patterns and a Multi-arm Bandit algorithm to optimize traffic shaping policies based on these predictions. We evaluate the proposed approach on three different datasets, including a simulated corporate network (KDD Cup 1999), a collection of network traffic traces (CAIDA), and a simulated network environment with both normal and malicious traffic (NSL-KDD). The results demonstrate that our approach outperforms other state-of-the-art traffic shaping methods, achieving higher throughput, lower packet loss, and lower delay, while effectively detecting anomalous traffic patterns. The proposed approach offers a promising solution to traffic shaping in SDNs, enabling efficient resource management and QoS assurance

Vehicle-to-Vehicle (V2V) communication plays a pivotal role in modern intelligent transportation systems, enabling seamless information exchange among vehicles to enhance road safety, traffic efficiency, and overall driving experience. However, the secure transmission of sensitive data between vehicles remains a critical concern due to potential security threats and vulnerabilities. This research paper focuses on investigating the security protocols employed in Vehicle-to-Vehicle communication systems. A comprehensive review and analysis of relevant literature and research papers is conducted to gather information on existing V2V communication security protocols and techniques. The analysis encompasses key areas, including authentication mechanisms, encryption algorithms, key management protocols, and intrusion detection systems specifically applicable to V2V communication networks. Within the context of real-world V2V environments, this study delves into the challenges and limitations associated with implementing these protocols. Moreover, to foster a deeper understanding, the paper investigates present communication protocols in the field of Internet of Things (IoT) that are tailored for V2V. Various parameters, such as band-width consumption, energy consumption, latency, and message size, are considered during the evaluation of these protocols to gauge their effectiveness. The research outcomes aim to provide a comprehensive understanding of the strengths and weaknesses of the current V2V communication security protocols. Furthermore, based on the findings, this paper will propose improvements and recommendations to enhance the security measures of the V2V communication protocol. Ultimately, this research will contribute to the development of more secure and reliable V2V communication systems, propelling the advancement of intelligent transportation technology.