Bahtiyor Holmuhamedov Farkhodovich

Work place: Department of Uzbek Linguistics, Samarkand State University named after Sharof Rashidov, Samarkand, Uzbekistan

E-mail: bxolmuxamedov@mail.ru

Website: https://orcid.org/0000-0002-8546-8192

Research Interests:

Biography

Bahtiyor Holmuhamedov Farkhodovich obtained his DSc degree from Samarkand State University, Uzbekistan. He is currently working as an Associate Professor in the Department of Uzbek Linguistics at Samarkand State University named after Sharof Rashidov. His research interests include linguistics and interdisciplinary studies related to information systems.

Author Articles
Real-Time Port Scanning Attack Detection Using Adaptive Entropy Analysis and Random Forest-based Hybrid Model

By Maruf Tojiyev Ruzikulovich Bahtiyor Holmuhamedov Farkhodovich Sofiyaxon Usmonova Alimovna Jura Kuvandikov Tursunbayevich

DOI: https://doi.org/10.5815/ijwmt.2026.05.25, Pub. Date: 8 Oct. 2026

Network port scanning represents a critical reconnaissance phase preceding advanced cyber attacks and poses a significant threat to modern network infrastructures. Conventional signature-based detection systems and static threshold mechanisms are often ineffective in detecting stealthy and low-rate scanning activities in dynamic network environments. This paper proposes a hybrid intrusion detection approach that combines adaptive entropy-based filtering with a Random Forest classifier. The proposed method employs a sliding window mechanism to dynamically adjust detection thresholds based on statistical properties of network traffic, thereby improving adaptability under varying load conditions. Experimental evaluation conducted on the CIC-IDS2017 dataset demonstrates that the proposed model achieves a classification accuracy of 98.7% with a False Positive Rate (FPR) of 1.8%, outperforming both standalone entropy-based and machine learning-based approaches. In addition, the model maintains an average processing latency of 2.3 ms per packet, confirming its suitability for real-time deployment in high-speed network environments. The results indicate that the proposed hybrid approach effectively improves detection performance while maintaining low computational overhead, making it a practical solution for modern intrusion detection systems. However, the proposed approach has certain limitations, including reliance on traffic metadata and reduced effectiveness in encrypted environments.

[...] Read more.
Other Articles