Adaptive Divergence-Based Detection of Port Scanning Attacks in Network Traffic
Port scanning is one of the most common reconnaissance techniques used by attackers to identify active hosts, open ports, and vulnerable services before launching more complex cyberattacks. Traditional rule-based and static threshold-based detection methods often fail to maintain reliable performance in dynamic network...