Hasan Kanaker

Dr. Hasan Kanaker


Research Focus & Metrics

Academic Career Length

5Years (2022-Present)

(Calculated once Scilit publication data is synced: current year − year of first publication + 1)

Representative Publications

View All Publications
1 December 2024 in International Journal of Electrical and Computer Engineering (IJECE)
Verified
Journal Article
Open access
PDF file
HKHasan Kanaker
Hasan Kanaker
MTMonther Tarawneh
Monther Tarawneh
NKNader Abdel Karim
Nader Abdel Karim
AAAdeeb Alsaaidah
Adeeb Alsaaidah
MAMaher Abuhamdeh
Maher Abuhamdeh
ZAZaid Alhalhouli
Zaid Alhalhouli
Cloud computing offers several advantages, including cost savings and easy access to resources, it is also could be vulnerable to serious security attacks such as cloud Trojan horse infection attacks. To address this issue, machine learning is a promising approach for detecting these threats. Thus, different machine learning tools and models have been employed to detect Trojan horse infection such as Weka and Python Colab. This study aims to compare the performance of Weka and Python Colab, as popular tools for building machine learning models. This study evaluates the recall, accuracy, and F1-score of machine learning models built with Weka and Python Colab and compares their computational resources required employing several machine learning algorithms. The dataset collected and analyzed using dynamic analysis of Trojan horse infection in control lab environment. The findings of this study can help determine the decision about which tool to use to detect Trojan horse infections and provide insights into the strengths and limitations of Weka and Python Colab for building machine-learning models in general.

20 December 2022 in International Journal of Interactive Mobile Technologies (iJIM)
Verified
Journal Article
Open access
PDF file
HKHasan Kanaker
Hasan Kanaker
NKNader Abdel Karim
Nader Abdel Karim
SASamer A.B. Awwad
Samer A.B. Awwad
NINurul Halimatul Asmak Ismail
Nurul Halimatul Asmak Ismail
JZJamal Zraqou
Jamal Zraqou
AAAbdullah Alali
Abdullah Alali
Cloud computing technology is known as a distributed computing network, which consists of a large number of servers connected via the internet. This technology involves many worthwhile resources, such as applications, services, and large database storage. Users have the ability to access cloud services and resources through web services. Cloud computing provides a considerable number of benefits, such as effective virtualized resources, cost efficiency, self-service access, flexibility, and scalability. However, many security issues are present in cloud computing environment. One of the most common security challenges in the cloud computing environment is the trojan horses. Trojan horses can disrupt cloud computing services and damage the resources, applications, or virtual machines in the cloud structure. Trojan horse attacks are dangerous, complicated and very difficult to be detected. In this research, eight machine learning classifiers for trojan horse detection in a cloud-based environment have been investigated. The accuracy of the cloud trojan horses detection rate has been investigated using dynamic analysis, Cukoo sandbox, and the Weka data mining tool. Based on the conducted experiments, the SMO and Multilayer Perceptron have been found to be the best classifiers for trojan horse detection in a cloud-based environment. Although SMO and Multilayer Perceptron have achieved the highest accuracy rate of 95.86%, Multilayer Perceptron has outperformed SMO in term of Receiver Operating Characteristic (ROC) area.

2 January 2024 in Energies
Verified
Journal Article
Open access
PDF file
Walid EmarWalid Emar
Walid Emar
Haitham M. Ata IssaHaitham M. Ata Issa
Haitham M. Ata Issa
HKHasan Kanaker
Hasan Kanaker
OFOsama Fares
Osama Fares
HAHani Attar
Hani Attar
In addition to their conventional use in electric motor drives, DC-DC converters have a variety of other uses, such as energy storage, energy conversion, cyber security systems, uninterruptible power supplies, and renewable energy systems. An innovative DC-DC converter is suggested in this article. Designing a new, high-gain DC-DC converter scheme known as a double-switch SEPIC-buck converter (DSSB) is possible after making some adjustments to the SEPIC converter that is currently known in accordance with accepted techniques. The output voltage magnitude of the proposed converter is either larger than or less than the input voltage magnitude and is the same sign as the input voltage. According to the theoretical and analytical study that has been supported by the real-world application, high voltage gain, low switching stress, and low inductor current ripple are the main characteristics of the proposed DSSB converter. The related small-signal model was also used to build the closed-loop system. The frequency response and output voltage behavior were investigated when the input source voltage abruptly changed as a step function. Based on the comparison study with other DC-DC converters, the DSSB converter outperforms currently known DC-DC converters such as Buck, SEPIC, Boost, Buck-Boost, and other SEPIC converter topologies in terms of voltage gain, harmonic content, normalized current ripple, dynamic performance, and efficiency. Additionally, the frequency response and control of the proposed converter using an alternate current (AC), small-signal, analysis-based, current-mode control technique are both provided. Thus, the DSSB is regarded as safe in overcurrent situations because of the small-signal analysis with the current control strategy. As a result of the verification of the proposed control technique, the resistance to changes in the DSSB parameters, improved dynamic performance, and higher control accuracy are further advantages of current-mode control based on small-signal analysis over other control approaches (PI controllers). Finally, the experimental and simulation results from Simplorer 7 and MATLAB/Simulink are used to validate the findings of the analytical and comparative investigation.

27 February 2024 in International Journal of Online and Biomedical Engineering (iJOE)
Verified
Journal Article
Open access
PDF file
MBMahmoud Khalid Baklizi
Mahmoud Khalid Baklizi
Issa AtoumIssa Atoum
Issa Atoum
MAMohammad Alkhazaleh
Mohammad Alkhazaleh
HKHasan Kanaker
Hasan Kanaker
NANIBRAS ABDULLAH
NIBRAS ABDULLAH
AOAhmed Ali Otoom
Ahmed Ali Otoom
Web attacks often target web applications because they can be accessed over a network and often have vulnerabilities. The success of an intrusion detection system (IDS) in detecting web attacks depends on an effective traffic classification system. Several previous studies have utilized machine learning classification methods to create an efficient IDS with various datasets for different types of attacks. This paper utilizes the Canadian Institute for Cyber Security’s (CIC-IDS2017) IDS dataset to assess web attacks. Importantly, the dataset contains 80 attributes of recent assaults, as reported in the 2016 McAfee report. Three machine learning algorithms have been evaluated in this research, namely random forests (RF), k-nearest neighbor (KNN), and naive bayes (NB). The primary goal of this research is to propose an effective machine learning algorithm for the IDS web attacks model. The evaluation compares the performance of three algorithms (RF, KNN, and NB) based on their accuracy and precision in detecting anomalous traffic. The results indicate that the RF outperformed the NB and KNN in terms of average accuracy achieved during the training phase. During the testing phase, the KNN algorithm outperformed others, achieving an average accuracy of 99.4916%. However, RF and KNN achieved 100% average precision and recall rates compared to other algorithms. Finally, the RF and KNN algorithms have been identified as the most effective for detecting IDS web attacks.

27 March 2026 in Computers
Verified
Journal Article
Open access
PDF file
HKHasan Kanaker
Hasan Kanaker
OSOsama Sayaydeh
Osama Sayaydeh
EAEssam Alhroob
Essam Alhroob
NKNader Abdel Karim
Nader Abdel Karim
SSSami Smadi
Sami Smadi
NINurul Halimatul Asmak Ismail
Nurul Halimatul Asmak Ismail
Metaheuristic algorithms have become indispensable for solving high-dimensional, non-convex, and constrained optimization problems arising in science and engineering. However, no single method can simultaneously provide strong global exploration, accurate local exploitation, and robust performance across diverse problem classes. This paper proposes JADEFLO, a new hybrid nature-inspired metaheuristic that couples Adaptive Differential Evolution with Optional External Archive (JADE) and Frilled Lizard Optimization (FLO) in a two-stage search framework. In the first stage, JADE drives global exploration using p-best mutation, an external archive, and adaptive control of the mutation factor and crossover rate to maintain population diversity. In the second stage, FLO performs intensive local refinement by mimicking the hunting and tree-climbing behaviors of frilled lizards through dedicated exploration and exploitation moves. The resulting algorithm has linear time complexity with respect to the population size, dimensionality, and number of iterations. JADEFLO is evaluated on the IEEE CEC 2022 single-objective benchmark suite (F1–F12) and three constrained engineering design problems (Pressure Vessel, tension/compression spring, and speed reducer), using 30 independent runs and comparisons against more than thirty state-of-the-art metaheuristics, including GA, PSO, DE variants, GWO, WOA, MFO, and FLO. The results show that JADEFLO attains the best overall rank on the CEC functions, delivers faster convergence and higher accuracy on most test cases, and matches or improves the best-known designs with markedly reduced variance. These findings indicate that JADEFLO is a promising general-purpose optimizer and a flexible foundation for future extensions to multi-objective and large-scale optimization.

25 April 2026 in Computation
Verified
Journal Article
Open access
PDF file
HKHasan Kanaker
Hasan Kanaker
HFhussam fakhouri
hussam fakhouri
NKNader Abdel Karim
Nader Abdel Karim
MAMaher Abuhamdeh
Maher Abuhamdeh
NINurul Halimatul Asmak Ismail
Nurul Halimatul Asmak Ismail
SFSandi Fakhouri
Sandi Fakhouri
Tool-using AI agents couple a language model with controller logic, memory, and external tools such as browsers, email, calendars, file systems, and transaction APIs. This architecture expands capability, but it also enlarges the security boundary: agents routinely ingest untrusted content while holding privileges that can reveal private data and trigger external side effects. The resulting failures are not limited to poor text generation; they include prompt injection, indirect injection through tool outputs, confused-deputy behavior, unauthorized actions, and misleading claims about the tool state. Because large-scale testing on deployed products is difficult, vendor-specific, and ethically sensitive, we present a transparent, theoretical simulation-based framework for evaluating user-facing risk in tool-using agents. The methodological contribution is a formal threat model that separates compromise, harm, and severity, and a Monte Carlo evaluation pipeline that maps architectural choices (permissions, retrieval, memory exposure, and approvals) and defensive controls to comparable outcome metrics. We instantiate the framework for six representative threat scenarios and nine defense configurations, reporting attack success rate (ASR), benign task success, latency overhead, and severity-weighted harm. Across scenarios, the least-privilege tool design is the strongest single broad control, human-in-the-loop approvals sharply reduce high-impact actions and exports but degrade under user error and habituation, retrieval allowlisting nearly eliminates indirect injection while leaving other channels largely unaffected, and rate limiting reduces tail severity more than ASR. These results position agent safety as an architectural and operational problem and because they arise from an assumption-explicit simulator rather than field measurements, should be read as comparative design guidance rather than incident-rate estimates for any deployed product.