Nghi Hoang Khoa

dblp:245/8446 · DBLP profile ↗
← Back
8ranked-venue papers
1as first author
8since 2021 · last 2026
0000-0001-6418-4169ORCID · corroborated

Domains — the database's venue-derived domains; a paper can count in several

Security and privacy · 3 · 3 since 2021Software engineering, systems software and programming languages · 3 · 1 first-author · 3 since 2021Artificial intelligence and machine learning · 1 · 1 since 2021Computer networks · 1 · 1 since 2021
YearPublicationVenuePosition
2026 xPriMES: Explainable reinforcement learning-guided mutation strategy with dual-environment interaction for evading black-box malware detectors
Phan The Duy, Nguyen Manh Cuong, Ha Trieu Yen Vy, Le Tuan Luong, Nguyen Tran Duc Anh, Nghi Hoang Khoa, Van-Hau Pham
Inf. Softw. Technol.6
2026 Android malware detection by using graph optimization of static features based on pre-trained language models
Nghi Hoang Khoa, Doan Minh Trung, Duong The Dat, Phan The Duy, Van-Hau Pham, Cam Nguyen Tan
Inf. Softw. Technol.1
2026 Enhanced android malware classification using multi machine learning models and generative adversarial network
Cam Nguyen Tan, Nguyen Cong Danh, Nghi Hoang Khoa
Neural Comput. Appl.3
2025 G-FLEX: A Graph-Based and Fine-Tuned Transformer Framework with Explainable AI for Fileless Malware Detection
Bao Pham-Thai, Nghi Hoang Khoa, Ngo Duc Hoang Son, Khanh Ho-Vi, Phan The Duy
ISPEC2
2023 A Multimodal Deep Learning Approach for Efficient Vulnerability Detection in Smart Contracts
abstract
In this paper, we present a comprehensive approach for efficient vulnerability detection in Ethereum smart contracts using a multimodal deep learning (DL) approach. Our proposed approach combines two levels of features in smart contracts, including source code, bytecode, and utilizes BERT and Bi-LSTM models to extract and analyze the features. The last layer of our multimodal approach is a fully connected layer that predicts the vulnerability in Ethereum smart contracts. We address the limitations of existing deep learning-based vulnerability detection methods for smart contracts, which often rely on a single type of feature or model, resulting in limited accuracy and effectiveness. The experimental results show that our proposed approach achieves superior results compared to existing state-of-the-art methods, demonstrating the effectiveness and potential of multimodal DL approaches in smart contract vulnerability detection.
Le Cong Trinh, Vu Trung Kien, Trinh Minh Hoang, Nguyen Huu Quyen, Nghi Hoang Khoa, Phan The Duy, Van-Hau Pham
GLOBECOM5
2023 Investigating on the robustness of flow-based intrusion detection system against adversarial samples using Generative Adversarial Networks
Phan The Duy, Nghi Hoang Khoa, Do Thi Thu Hien, Hien Do Hoang, Van-Hau Pham
J. Inf. Secur. Appl.2
2021 A Deep Transfer Learning Approach for Flow-Based Intrusion Detection in SDN-Enabled Network
abstract
Revolutionizing operation model of traditional network in programmability, scalability, and orchestration, Software-Defined Networking (SDN) has considered as a novel network management approach for a massive network with heterogeneous devices. However, it is also highly susceptible to security attacks like conventional network. Inspired from the success of different machine learning algorithms in other domains, many intrusion detection systems (IDS) are presented to identify attacks aiming to harm the network. In this paper, leveraging the flow-based nature of SDN, we introduce DeepFlowIDS, a deep learning (DL)-based approach for anomaly detection using the flow analysis method in SDN. Furthermore, instead of using a lot of network properties, we only utilize essential characteristics of traffic flows to analyze with deep neural networks in IDS. This is to reduce the computational and time cost of attack traffic detection. Besides, we also study the practical benefits of applying deep transfer learning from computer vision to intrusion detection. This method can inherit the knowledge of an effective DL model from other contexts to resolve another task in cybersecurity. Our DL-based IDSs are built and trained with the NSL-KDD and CICIDS2018 dataset in both fine-tuning and feature extractor strategy of transfer learning. Then, it is integrated with the SDN controller to analyze traffic flows retrieved from OpenFlow statistics to recognize the anomaly action in the network.
Phan The Duy, Nghi Hoang Khoa, Hoang Hiep, Nguyen Ba Tuan, Hien Do Hoang, Do Thi Thu Hien, Van-Hau Pham
SoMeT2
2021 DIGFuPAS: Deceive IDS with GAN and function-preserving on adversarial samples in SDN-enabled networks
Phan The Duy, Le Khac Tien, Nghi Hoang Khoa, Do Thi Thu Hien, Anh Gia-Tuan Nguyen, Van-Hau Pham
Comput. Secur.3