Incident-aware smart prioritization framework for penetration testing and prevention of URL-based cybersecurity attacks in industry 4.0 IoT networks

In the era of Industry 4.0, where IoT-enabled smart infrastructures are deeply integrated with digital automation, cybersecurity becomes a critical priority. The ubiquitous use of URLs (Uniform Resource Locators) as gateways to online services has introduced not only convenience but also increased exposure to cyber threats. URL-based cyberattacks pose significant risks to Industrial IoT (IIoT) networks, demanding intelligent and proactive security measures. This paper presents an incident-aware smart prioritization framework specifically designed for penetration testing and prevention of URL-based cybersecurity attacks targeting IoT network hosts in Industry 4.0 environments. The proposed approach begins with penetration testing and vulnerability analysis to identify threats across IIoT network hosts. Based on incident awareness, the framework then prioritizes detected threats and utilizes machine learning models for accurate threat classification and prevention. A dynamic threshold mechanism is introduced to enable real-time prevention, minimizing potential damage or loss. The framework evaluates the performance of three widely used machine learning models, Random Forest, Support Vector Machine (SVM), and XGBoost, for classifying malicious URLs. Experimental results indicate that Random Forest achieves the highest accuracy due to its ensemble learning capabilities. SVM demonstrates strong performance in maintaining a balance between precision and recall, while XGBoost, with its high recall rate, is effective in identifying true threats despite a marginally higher false positive rate. The proposed framework significantly enhances the resilience of Industry 4.0 infrastructures by enabling smarter and more targeted mitigation of URL-based cyber threats.

Authors

Institutions

Publication Details

Journal
Scientific Reports
Published
2025-10-29
DOI
https://doi.org/10.1038/s41598-025-21409-4
Citations
1
Primary Topic
Network Security and Intrusion Detection
Type
article
Field-Weighted Citation Impact
1.49
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Incident-aware smart prioritization framework for penetration testing and prevention of URL-based cybersecurity attacks in industry 4.0 IoT networks

Zulfiqar Ahmad, Mohammed Alaa Ala’anzy, Zhanserik Nurlan, Beibut Amirgaliyev et al.
1 citations
Scientific Reports
Network Security and Intrusion Detection
1.49
article

Incident-aware smart prioritization framework for penetration testing and prevention of URL-based cybersecurity attacks in industry 4.0 IoT networks

Zulfiqar Ahmad, Mohammed Alaa Ala’anzy, Zhanserik Nurlan, Beibut Amirgaliyev, Nurkhat Zhakiyev, Dauren Gabdullayev, Bigul Mukhametzhanova, Irawan Sonny
article en
1 citations

Abstract

In the era of Industry 4.0, where IoT-enabled smart infrastructures are deeply integrated with digital automation, cybersecurity becomes a critical priority. The ubiquitous use of URLs (Uniform Resource Locators) as gateways to online services has introduced not only convenience but also increased exposure to cyber threats. URL-based cyberattacks pose significant risks to Industrial IoT (IIoT) networks, demanding intelligent and proactive security measures. This paper presents an incident-aware smart prioritization framework specifically designed for penetration testing and prevention of URL-based cybersecurity attacks targeting IoT network hosts in Industry 4.0 environments. The proposed approach begins with penetration testing and vulnerability analysis to identify threats across IIoT network hosts. Based on incident awareness, the framework then prioritizes detected threats and utilizes machine learning models for accurate threat classification and prevention. A dynamic threshold mechanism is introduced to enable real-time prevention, minimizing potential damage or loss. The framework evaluates the performance of three widely used machine learning models, Random Forest, Support Vector Machine (SVM), and XGBoost, for classifying malicious URLs. Experimental results indicate that Random Forest achieves the highest accuracy due to its ensemble learning capabilities. SVM demonstrates strong performance in maintaining a balance between precision and recall, while XGBoost, with its high recall rate, is effective in identifying true threats despite a marginally higher false positive rate. The proposed framework significantly enhances the resilience of Industry 4.0 infrastructures by enabling smarter and more targeted mitigation of URL-based cyber threats.

Scientific ReportsVol. 15(1)
L. N. Gumilyov Eurasian National University (KZ), Al-Farabi Kazakh National University (KZ), Hazara University (PK), Narxoz University (KZ), Kazakh-American University (KZ), Astana Medical University (KZ), Nazarbayev University (KZ)
Openalex Percentile: Top 12%
Network Security and Intrusion Detection
1.49
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.