3 papers
cs.CR2026
Multi-View Fusion for Encrypted C2 Detection: A Leakage-Controlled Measurement Study of Evaluation Pitfalls
Hoang-Huy Nguyen-Huu, Van-Tri Phan, Khuong Nguyen-An
Command-and-control (C2) traffic increasingly hides within TLS, so defenders now apply machine learning to traffic metadata. Many studies assume that combining two metadata views,…
cs.CR2026
Design and Evaluation of a Controlled Post-Alert Incident Orchestration and Response Subsystem Using a Rule Engine and a Local Large Language Model
Hoang-Lam Huynh, Quoc-Cuong Tang, Van-Tri Phan +1
This paper presents a controlled post-alert incident orchestration and response subsystem for educational information systems. The architecture separates deterministic classificati…
cs.CR2026
Passive Hybrid Network-Based Intrusion Detection System (Hybrid-NIDS) Combining Suricata and Random Forest
Quoc-Cuong Tang, Hoang-Lam Huynh, Van-Tri Phan +1
This paper evaluates a passive Hybrid Network-based Intrusion Detection System (Hybrid-NIDS) prototype that combines Suricata with Random Forest flow classification and centralized…