Explain why these concepts matter specifically to the proposed research.
4.3 Ethiopian Digital and Cybersecurity Environment
Using credible sources, discuss relevant aspects of Ethiopia's:
Digital transformation
Internet infrastructure
Telecommunications
Financial institutions
Digital financial services
Government digital services
Critical infrastructure
Cybersecurity institutions
Cybersecurity policies and legislation
Data protection environment
Do not assume that one sector has a greater cyber-threat burden than another without evidence.
Where evidence is insufficient, explicitly state:
> “Evidence specific to Ethiopia is limited.”
5. STATEMENT OF THE PROBLEM
Develop a precise problem statement using the following structure:
5.1 Existing Situation
What is currently known about ML-based cyber-threat detection?
5.2 Existing Technical Problem
What limitations exist in current detection methods?
5.3 Dataset Problem
What problems arise from dependence on international cybersecurity datasets?
5.4 Ethiopian Research Problem
Why might models developed using international datasets not automatically perform similarly in Ethiopian environments?
5.5 Practical Problem
What challenges could limit implementation in Ethiopian institutions?
5.6 Research Gap
What has not been adequately investigated?
5.7 Need for the Study
What specific evidence will this study generate?
The problem statement must lead directly to the five research questions.
6. RESEARCH GAP
Conduct a focused literature analysis distinguishing:
GLOBAL GAP
What remains unresolved internationally?
AFRICAN GAP
What is insufficiently studied in African environments?
ETHIOPIAN GAP
What evidence is missing specifically for Ethiopia?
Pay particular attention to:
International benchmark datasets
Dataset age and quality
Ethiopian cybersecurity data scarcity
Dataset transferability
Distribution shift
Class imbalance
False positives
Feature importance
Model complexity
Computational requirements
Deployment feasibility
Do not claim that no Ethiopian research exists without conducting an appropriate literature search.
Clearly distinguish:
> “No evidence was found”
from
> “No research exists.”
7. GENERAL OBJECTIVE
Develop one general objective directly derived from the main research question.
The objective should be measurable and achievable within a first-degree Computer Science project.
A suitable formulation may follow this structure:
> To evaluate the effectiveness of selected Machine Learning algorithms for early cyber-threat detection and assess their applicability to the Ethiopian cybersecurity context.
Improve this wording if the literature and methodology justify a better formulation.
8. SPECIFIC OBJECTIVES
Develop five specific objectives, each directly corresponding to RQ1–RQ5.
The objectives should address:
1. Comparing selected ML algorithms.
2. Evaluating the effect of class imbalance.
3. Identifying important network-traffic features.
4. Assessing international-dataset transferability to Ethiopia.
5. Identifying practical Ethiopian deployment constraints.
Each objective must be:
Specific
Measurable
Achievable
Relevant
Logically connected to a research question
Avoid overly ambitious objectives such as developing a nationwide cybersecurity system.
9. RESEARCH QUESTIONS AND OBJECTIVES ALIGNMENT
Create a formal alignment matrix.
Research Question Specific Objective Data Required Method Expected Evidence
Verify that:
Every research question has an objective.
Every objective can be investigated using the proposed methodology.
Every objective produces measurable evidence.
No major methodology component exists without a corresponding research question or objective.
10. RESEARCH HYPOTHESES
Because the research contains a quantitative experimental component, formulate only hypotheses that can actually be tested.
Primary hypothesis
H₀: There is no statistically significant difference in cyber-threat detection performance among the selected Machine Learning algorithms.
August 15, 2026 221 9
