Mohamed Ahmed A, Al-Saleh Abdullah, Sharma Sunil Kumar, Tejani Ghanshyam G
Department of Computer Science, College of Computer and Information Sciences, Majmaah University, 11952, Majmaah, Saudi Arabia.
Department of Computer Engineering, College of Computer and Information Sciences, Majmaah University, 11952, Majmaah, Saudi Arabia.
Sci Rep. 2025 Feb 3;15(1):4036. doi: 10.1038/s41598-025-87615-2.
This paper introduces a new probabilistic composite model for the detection of zero-day exploits targeting the capabilities of existing anomaly detection systems in terms of accuracy, computational time, and adaptability. To address the issues mentioned above, the proposed framework consisted of three novel elements. The first key innovations are the introduction of "Adaptive WavePCA-Autoencoder (AWPA)" for pre-processing stage which address the denoising and dimensionality reduction, and contributes to the general dependability and accuracy of zero-day exploit detection. Additionally, a novel "Meta-Attention Transformer Autoencoder (MATA)" for enhancing feature extraction which address the subtlety issue, and improves the model's ability and flexibility to detect new security threats, and a novel "Genetic Mongoose-Chameleon Optimization (GMCO)" was introduced for effective feature selection in the case of addressing the efficiency challenges. Furthermore, a novel "Adaptive Hybrid Exploit Detection Network (AHEDNet)" was introduced which address the dynamic ensemble adaptation issue where the accuracy of anomaly detection is very high with low false positives. The experimental results show the proposed model outperforms the other models of dataset 1 in accuracy of 0.988086 and 0.990469, precision of 0.987976 and 0.990628, recall of 0.988298 and 0.990435, with the lowest Hamming Loss of 0.011914 and 0.009531, also, the proposed model outperforms the other models of dataset 2 in accuracy of 0.9819 and 0.9919, precision of 0.9868 and 0.9968, recall of 0.9813 and 0.9923, with the lowest Hamming Loss of 0.0209 and 0.0109, thus the proposed model outperformed the other models in detecting zero-day exploits.
本文针对现有异常检测系统在检测零日漏洞利用方面的能力,从准确性、计算时间和适应性角度,引入了一种新的概率复合模型。为解决上述问题,所提出的框架包含三个新颖的元素。第一个关键创新是在预处理阶段引入了“自适应小波主成分分析自动编码器(AWPA)”,用于去噪和降维,有助于提高零日漏洞利用检测的总体可靠性和准确性。此外,还引入了一种新颖的“元注意力Transformer自动编码器(MATA)”用于增强特征提取,以解决细微差别问题,并提高模型检测新安全威胁的能力和灵活性,同时在解决效率挑战的情况下引入了一种新颖的“遗传猫鼬 - 变色龙优化算法(GMCO)”用于有效特征选择。此外,还引入了一种新颖的“自适应混合漏洞利用检测网络(AHEDNet)”,用于解决动态集成适应问题,该问题中异常检测的准确性很高且误报率很低。实验结果表明,所提出的模型在数据集1上的准确率分别为0.988086和0.990469,精确率分别为0.987976和0.990628,召回率分别为0.988298和0.990435,汉明损失最低,分别为0.011914和0.009531,优于其他模型;在数据集2上的准确率分别为0.9819和0.9919,精确率分别为0.9868和0.9968,召回率分别为0.9813和0.9923,汉明损失最低,分别为0.0209和0.0109,因此所提出的模型在检测零日漏洞利用方面优于其他模型。