Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal Jurnal Nasional Pendidikan Teknik Informatika (JANAPATI)
Muh Dzikri Alfauzan Nuzul
Departement of Informatics, Universitas Muhammadiyah Makassar, Indonesia
Computer Science & IT Education Engineering

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
T4EDR: Hybrid Threat Detection Framework for EDR Based on Semantic Rule Embedding and Contextual Network Flow Analysis Muh Dzikri Alfauzan Nuzul; Desi Anggreani; Muhammad Faisal; Abd Rahman Wahid; Titik Khawa Abd Rahman
Jurnal Nasional Pendidikan Teknik Informatika: JANAPATI Vol. 15 No. 1 (2026)
Publisher : Prodi Pendidikan Teknik Informatika Universitas Pendidikan Ganesha

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.23887/janapati.v15i1.104059

Abstract

In response to the increasing complexity of cyber threats and attacks, this study proposes an innovative endpoint detection and response (EDR) framework named T4EDR (Transformer for Endpoint Detection and Response). Specifically, it addresses the inefficiencies of traditional systems that rely on static and less adaptive rules. T4EDR integrates semantic analysis methods to interpret security rules and a transformer-based deep learning model to contextually analyze network traffic flows. In the initial phase, thousands of security rules from Wazuh were extracted, embedded, and semantically validated against the MITRE ATT&CK framework, achieving a semantic coherence of 86.43% with a silhouette score of 0.702. Subsequently, the FlowBERT model was designed to classify network traffic flows using the CIC-IDS2018 dataset, achieving 91.1% accuracy, a macro-F1 of 0.79, and a mean Average Precision (mAP) of 0.90, surpassing the quantitative target of 85%. The integration of rule embeddings with FlowBERT hidden states through a linear projector enables adaptive mapping of endpoint activities to relevant security rules, supporting context-based automated responses. The main contribution of this study is an adaptive framework that bridges the gap between traditional rule analysis and deep learning-based detection, thereby enhancing the capability to detect multi-stage threats on modern endpoints.
Co-Authors Abd Rahman Wahid Desi Anggreani Muhammad Faisal Titik Khawa Abd Rahman