[{"data":1,"prerenderedAt":-1},["ShallowReactive",2],{"doc-seo-290785-105":3,"doc-detail-290785-en":81,"detail-sidebar-cat-0-en-105":99},{"code":4,"msg":5,"data":6},0,"ok",{"site_id":7,"language":8,"slug":9,"title":10,"keywords":11,"description":12,"schema_data":13,"social_meta":74,"head_meta":76,"extra_data":78,"updated_unix":80},105,"en","machine-learning-based-portscan-attacks-detection-using-oner-classifier-detection-accuracy-study","Machine learning-based PortScan attacks detection using OneR classifier - Detection Accuracy Study","","PortScan attacks pose a frequent threat in computer networks by probing and identifying exposed ports that may reveal vulnerabilities. The study develops a machine learning classification approach using the CICIDS2017 network-traffic dataset with feature selection. The OneR-based decision rule is trained and evaluated with the JRip algorithm, reporting strong performance across accuracy, precision, recall, and F-score, alongside low detection overhead. Results are compared with existing models to show higher attack discovery speed and improved detection capability.",{"@graph":14,"@context":73},[15,34,56],{"@type":16,"itemListElement":17},"BreadcrumbList",[18,23,27,31],{"item":19,"name":20,"@type":21,"position":22},"https://docshare.wps.com","Home","ListItem",1,{"item":24,"name":25,"@type":21,"position":26},"https://docshare.wps.com/document/","Document",2,{"item":28,"name":29,"@type":21,"position":30},"https://docshare.wps.com/document/research-report/","Research & Report",3,{"item":32,"name":10,"@type":21,"position":33},"https://docshare.wps.com/document/machine-learning-based-portscan-attacks-detection-using-oner-classifier-detection-accuracy-study/290785/",4,{"url":32,"name":10,"@type":35,"image":36,"author":41,"headline":10,"publisher":44,"fileFormat":47,"inLanguage":8,"description":12,"dateModified":48,"datePublished":49,"encodingFormat":47,"isAccessibleForFree":50,"interactionStatistic":51},"DigitalDocument",{"url":37,"@type":38,"width":39,"height":40},"https://docshare.wps.com/thumbnails/machine-learning-based-portscan-attacks-detection-using-oner-classifier-detection-accuracy-study/290785.png","ImageObject",300,407,{"name":42,"@type":43},"River Wang","Person",{"url":19,"name":45,"@type":46},"DocShare","Organization","application/pdf","2026-10-22","2026-09-17",true,{"@type":52,"interactionType":53,"userInteractionCount":55},"InteractionCounter",{"@type":54},"ViewAction",10,{"@type":57,"mainEntity":58},"FAQPage",[59,65,69],{"name":60,"@type":61,"acceptedAnswer":62},"What is the main goal of the study on PortScan detection?","Question",{"text":63,"@type":64},"To detect PortScan attacks efficiently and accurately using a machine-learning classification approach, improving detection performance and speed.","Answer",{"name":66,"@type":61,"acceptedAnswer":67},"Which dataset and learning approach are used for training and evaluation?",{"text":68,"@type":64},"The study trains and tests the model using the CICIDS2017 dataset, leveraging machine learning with feature selection and rule-based classifiers.",{"name":70,"@type":61,"acceptedAnswer":71},"How does the proposed model’s performance compare with existing approaches?",{"text":72,"@type":64},"The comparison with current models shows the proposed method has better proficiency and advantage, including increased attack discovery speed and strong metric results.","https://schema.org",{"og:url":32,"og:type":75,"og:title":10,"og:site_name":45,"og:description":12},"article",{"robots":77,"canonical":32},"index,follow",{"doc_id":79,"site_id":7},290785,1789986574,{"code":4,"msg":82,"data":83},"success",{"doc_id":79,"user_id":84,"nickname":42,"user_avatar":85,"doc_module":4,"category_id":86,"category_name":29,"doc_title":10,"doc_description":12,"doc_content":87,"file_id":88,"file_url":89,"file_type":90,"file_size":91,"view_count":55,"is_deleted":4,"is_public":22,"is_downloadable":22,"audit_status":22,"page_count":92,"language":93,"language_code":8,"site_id":7,"html_lang":8,"table_of_contents":94,"faqs":95,"seo_title":96,"seo_description":12,"update_tm":97,"read_time":98,"preview_page_count":4},1099514067438,"https://ap-avatar.wpscdn.com/avatar/100002539ee87300030?x-image-process=image/resize,m_fixed,w_180,h_180&k=1780474512215547542",8,"Machine learning-based PortScan attacks detection using OneR  \nclassifier  \nMohammed Ibrahim Kareem1, Mohammad Jawad Kadhim Abood2, Karrar Ibrahim3  \n1Department of Information Security, University of Babylon, Hillah, Iraq  \n2Department of Software, University of Babylon, Hillah, Iraq  \n3Department of English, College of Education, Al-Zahraa University for Women, Karbala, Iraq  \nArticle history:  \nReceived May 28, 2022 Revised Jul 14, 2022 Accepted Feb 3, 2023  \nKeywords:  \nCICIDS2017 Feature selection JRip  \nMachine learning Network security PortScan attack  \nCorresponding Author:  \nPortScan attacks are a common security threat in computer networks, where an attacker systematically scans a range of network ports on a target system to identify potential vulnerabilities. Detecting such attacks in a timely and accurate manner is crucial to ensure network security. Attackers can determine whether a port is open by sending a detective message to it, which helps them find potential vulnerabilities. However, the best methods for spotting and identifying port scanner attacks are those that use machine learning. One of the most dangerous online threats is PortScan attack, according to experts. The research is work on detection while improving detection accuracy. Dataset containing tags from network traffic is used to train machine learning techniques for classification. The JRip algorithm is trained and tested using the CICIDS2017 dataset. As a consequence, the best performance results for JRip-based detection schemes were 99.84%, 99.80%, 99.80%, and 0.09 ms for accuracy, precision, recall, F-score, and detection overhead, respectively. Finally, the comparison with current models demonstrated our model's proficiency and advantage with increased attack discovery speed.  \nThis is an open access article under the CC BY-SA license.  \nMohammed Ibrahim Kareem  \nDepartment of Information Security, University of Babylon Hillah, Iraq  \n[Email: Mohamed.ibrahim@uobabylon.edu.iq](Email: Mohamed.ibrahim@uobabylon.edu.iq)  \nArticle Info ABSTRACT  \n1. INTRODUCTION  \nThe first step in launching a network attack is to identify vulnerable hosts and prospective victims. Port scanning is a common method used by attackers to determine the level of vulnerability in their targets. This is a reconnaissance attack that allows the attacker to collect information about receiving hosts' port numbers, network configurations, server implementations, operating systems, and potential service vulnerabilities. Sending a probe packet to a specific host port on the network and analyzing the answer from an open port is what port scanning entails [1] . Port scanning is typically performed on transmission control protocol (TCP), user datagram protocol (UDP), and internet control message protocol (ICMP) channels.  \nIn order to find out which network ports are open and which services are currently using them on a computing endpoint, port scanning is the act of making attempts to connect to multiple network ports on the device. In order to find holes in a system or network, hackers frequently utilize this technique. An attacker can discover the services and apps running on a device and potentially exploit any known vulnerabilities in those services by determining which ports are exposed. Port scanning is frequently the first stage of a cyber-attack, making it crucial to recognize it. Security experts can take proactive steps to secure the systems and networks by spotting port scanning attempts before an attacker has an opportunity to take advantage of any flaws [2] .  \nScientists have spent a lot of time and energy creating reliable methods for detecting port scanning operations over the past ten years, including machine learning. Machine learning makes use of the capacity to learn from examples or data patterns in order to carry out tasks and gradually improve its performance. Machine learning makes it feasible to distinguish between previously unexpected attacks , regular, ","cbCaiqS8lo3wR6X8","https://ap.wps.com/l/cbCaiqS8lo3wR6X8","pdf",391628,7,"English","# Abstract\n# 1. Introduction\n## Port scanning as reconnaissance\n## Network protocols and targets\n## Motivation for machine learning-based detection\n## Key steps in machine learning intrusion detection\n## Related penetration testing context","[{\"question\":\"What is the main goal of the study on PortScan detection?\",\"answer\":\"To detect PortScan attacks efficiently and accurately using a machine-learning classification approach, improving detection performance and speed.\"},{\"question\":\"Which dataset and learning approach are used for training and evaluation?\",\"answer\":\"The study trains and tests the model using the CICIDS2017 dataset, leveraging machine learning with feature selection and rule-based classifiers.\"},{\"question\":\"How does the proposed model’s performance compare with existing approaches?\",\"answer\":\"The comparison with current models shows the proposed method has better proficiency and advantage, including increased attack discovery speed and strong metric results.\"}]","Machine learning-based PortScan attacks detection using OneR classifier - Detection Accuracy Study | PDF",1789642565,18,{"code":4,"msg":82,"data":100},[101,105,109,113,118,123,127,130,135,138,141],{"id":22,"doc_module":4,"doc_module_name":25,"category_name":102,"show_sort_weight":103,"slug":104},"Story & Novel",90,"story-novel",{"id":26,"doc_module":4,"doc_module_name":25,"category_name":106,"show_sort_weight":107,"slug":108},"Literature",80,"literature",{"id":33,"doc_module":4,"doc_module_name":25,"category_name":110,"show_sort_weight":111,"slug":112},"Exam",70,"exam",{"id":114,"doc_module":4,"doc_module_name":25,"category_name":115,"show_sort_weight":116,"slug":117},5,"Comic",60,"comic",{"id":119,"doc_module":4,"doc_module_name":25,"category_name":120,"show_sort_weight":121,"slug":122},6,"Technology",50,"technology",{"id":92,"doc_module":4,"doc_module_name":25,"category_name":124,"show_sort_weight":125,"slug":126},"Healthcare",40,"healthcare",{"id":86,"doc_module":4,"doc_module_name":25,"category_name":29,"show_sort_weight":128,"slug":129},30,"research-report",{"id":131,"doc_module":4,"doc_module_name":25,"category_name":132,"show_sort_weight":133,"slug":134},9,"Religion & Spirituality",20,"religion-spirituality",{"id":133,"doc_module":4,"doc_module_name":25,"category_name":136,"show_sort_weight":133,"slug":137},"World Cup","world-cup",{"id":55,"doc_module":4,"doc_module_name":25,"category_name":139,"show_sort_weight":55,"slug":140},"Lifestyle","lifestyle",{"id":142,"doc_module":4,"doc_module_name":25,"category_name":143,"show_sort_weight":114,"slug":144},19,"General","general"]