Work place: Department of Uzbek Linguistics, Samarkand State University named after Sharof Rashidov, Samarkand, Uzbekistan
E-mail: bxolmuxamedov@mail.ru
Website: https://orcid.org/0000-0002-8546-8192
Research Interests:
Biography
Sofiyaxon Usmonova Alimovna obtained her PhD from Kokand State University, Uzbekistan. She is currently working as an Associate Professor at the Interfaculty Department of Languages, Kokand State University. Her research interests include language studies and academic communication.
By Maruf Tojiyev Ruzikulovich Bahtiyor Holmuhamedov Farkhodovich Sofiyaxon Usmonova Alimovna Jura Kuvandikov Tursunbayevich
DOI: https://doi.org/10.5815/ijwmt.2026.05.25, Pub. Date: 8 Oct. 2026
Network port scanning represents a critical reconnaissance phase preceding advanced cyber attacks and poses a significant threat to modern network infrastructures. Conventional signature-based detection systems and static threshold mechanisms are often ineffective in detecting stealthy and low-rate scanning activities in dynamic network environments. This paper proposes a hybrid intrusion detection approach that combines adaptive entropy-based filtering with a Random Forest classifier. The proposed method employs a sliding window mechanism to dynamically adjust detection thresholds based on statistical properties of network traffic, thereby improving adaptability under varying load conditions. Experimental evaluation conducted on the CIC-IDS2017 dataset demonstrates that the proposed model achieves a classification accuracy of 98.7% with a False Positive Rate (FPR) of 1.8%, outperforming both standalone entropy-based and machine learning-based approaches. In addition, the model maintains an average processing latency of 2.3 ms per packet, confirming its suitability for real-time deployment in high-speed network environments. The results indicate that the proposed hybrid approach effectively improves detection performance while maintaining low computational overhead, making it a practical solution for modern intrusion detection systems. However, the proposed approach has certain limitations, including reliance on traffic metadata and reduced effectiveness in encrypted environments.
[...] Read more.Subscribe to receive issue release notifications and newsletters from MECS Press journals