Designing MARTO: Modular Log Fusion and Entropy-Based Adaptive Threat Scoring with Embedded Software Testing Validation

Abstract

This study presents MARTO (Modular Adaptive Real-Time Orchestrator), a cybersecurity framework designed to merge multi-source IDS log fusion with entropy-based adaptive scoring for anomaly detection. The framework incorporates protocol-aware entropy enhancement together with software testing methodologies such as trace simulation and toggleable logic for embedded validation. The Adaptive Threat Entropy Component (ATEC) strengthens flow scoring by incorporating session duration and protocol volatility. Experimental evaluations demonstrate MARTO’s capability to detect anomalous flows with improved transparency and reproducibility, addressing limitations observed in existing IDS frameworks.