Work place: Department of Uzbek Linguistics, Samarkand State University named after Sharof Rashidov, Samarkand, Uzbekistan
E-mail: bxolmuxamedov@mail.ru
Website: https://orcid.org/0000-0002-8546-8192
Research Interests:
Biography
Bahtiyor Holmuhamedov Farkhodovich obtained his DSc degree from Samarkand State University, Uzbekistan. He is currently working as an Associate Professor in the Department of Uzbek Linguistics at Samarkand State University named after Sharof Rashidov. His research interests include linguistics and interdisciplinary studies related to information systems.
By Maruf Tojiyev Ruzikulovich Bahtiyor Holmuhamedov Farkhodovich Sofiyaxon Usmonova Alimovna Jura Kuvandikov Tursunbayevich
DOI: https://doi.org/10.5815/ijwmt.2026.05.25, Pub. Date: 8 Oct. 2026
Network port scanning represents a critical reconnaissance phase preceding advanced cyber attacks and poses a significant threat to modern network infrastructures. Conventional signature-based detection systems and static threshold mechanisms are often ineffective in detecting stealthy and low-rate scanning activities in dynamic network environments. This paper proposes a hybrid intrusion detection approach that combines adaptive entropy-based filtering with a Random Forest classifier. The proposed method employs a sliding window mechanism to dynamically adjust detection thresholds based on statistical properties of network traffic, thereby improving adaptability under varying load conditions. Experimental evaluation conducted on the CIC-IDS2017 dataset demonstrates that the proposed model achieves a classification accuracy of 98.7% with a False Positive Rate (FPR) of 1.8%, outperforming both standalone entropy-based and machine learning-based approaches. In addition, the model maintains an average processing latency of 2.3 ms per packet, confirming its suitability for real-time deployment in high-speed network environments. The results indicate that the proposed hybrid approach effectively improves detection performance while maintaining low computational overhead, making it a practical solution for modern intrusion detection systems. However, the proposed approach has certain limitations, including reliance on traffic metadata and reduced effectiveness in encrypted environments.
[...] Read more.Subscribe to receive issue release notifications and newsletters from MECS Press journals