{"id":"https://openalex.org/W4415399334","doi":"https://doi.org/10.1109/etfa65518.2025.11205733","title":"Flow-Based vs Packet-Level Intrusion Detection for IoT Networks: A Comparative Resource and Performance Analysis","display_name":"Flow-Based vs Packet-Level Intrusion Detection for IoT Networks: A Comparative Resource and Performance Analysis","publication_year":2025,"publication_date":"2025-09-09","ids":{"openalex":"https://openalex.org/W4415399334","doi":"https://doi.org/10.1109/etfa65518.2025.11205733"},"language":"en","primary_location":{"id":"doi:10.1109/etfa65518.2025.11205733","doi":"https://doi.org/10.1109/etfa65518.2025.11205733","is_oa":false,"landing_page_url":"https://doi.org/10.1109/etfa65518.2025.11205733","pdf_url":null,"source":{"id":"https://openalex.org/S4363607916","display_name":"IEEE International Conference on Emerging Technologies and Factory Automation (ETFA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA)","raw_type":"proceedings-article"},"volume":null,"type":"conference-paper","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5092336968","display_name":"Barikisu A. Asulba","orcid":"https://orcid.org/0000-0002-2809-6273","observed_orcids":["https://orcid.org/0000-0002-2809-6273"]},"institutions":[{"id":"https://openalex.org/I4405252524","display_name":"Centro de Investiga\u00e7\u00e3o em Sistemas Computacionais Embebidos e de Tempo-Real","ror":"https://ror.org/00mfa2s19","country_code":"PT","type":"education","lineage":["https://openalex.org/I4405252524"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Barikisu A. Asulba","raw_affiliation_strings":["CISTER Research Centre,Porto,Portugal"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISTER Research Centre,Porto,Portugal","institution_ids":["https://openalex.org/I4405252524"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5032392879","display_name":"Pedro F. Souto","orcid":"https://orcid.org/0000-0002-0822-3423","observed_orcids":["https://orcid.org/0000-0002-0822-3423"]},"institutions":[{"id":"https://openalex.org/I4405252524","display_name":"Centro de Investiga\u00e7\u00e3o em Sistemas Computacionais Embebidos e de Tempo-Real","ror":"https://ror.org/00mfa2s19","country_code":"PT","type":"education","lineage":["https://openalex.org/I4405252524"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Pedro F. Souto","raw_affiliation_strings":["CISTER Research Centre,Porto,Portugal"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"CISTER Research Centre,Porto,Portugal","institution_ids":["https://openalex.org/I4405252524"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5100751931","display_name":"L\u00fa\u0131s Almeida","orcid":"https://orcid.org/0000-0002-9544-3028","observed_orcids":["https://orcid.org/0000-0002-9544-3028"]},"institutions":[{"id":"https://openalex.org/I182534213","display_name":"Universidade do Porto","ror":"https://ror.org/043pwc612","country_code":"PT","type":"education","lineage":["https://openalex.org/I182534213"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Luis Almeida","raw_affiliation_strings":["Faculdade de Engenharia, Universidade do Porto,Portugal"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculdade de Engenharia, Universidade do Porto,Portugal","institution_ids":["https://openalex.org/I182534213"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"4"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.002099999925121665,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0005000000237487257,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.9129999876022339},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.8140000104904175},{"id":"https://openalex.org/keywords/one-class-svm","display_name":"one-class support vector machine","score":0.7599999904632568},{"id":"https://openalex.org/keywords/edge-deployment","display_name":"edge deployment","score":0.6449999809265137},{"id":"https://openalex.org/keywords/resource-efficiency","display_name":"resource efficiency","score":0.4880000054836273},{"id":"https://openalex.org/keywords/false-alarm-reduction","display_name":"false alarm reduction","score":0.8289999961853027},{"id":"https://openalex.org/keywords/edge-iiot-dataset","display_name":"Edge-IIoT dataset","score":0.6919999718666077}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7864000201225281},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7475000023841858},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.6100999712944031},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5914999842643738},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.560699999332428},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5026000142097473},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.49810001254081726},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.4778999984264374},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.4674000144004822},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.46700000762939453},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.45809999108314514},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.4478999972343445},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.40959998965263367},{"id":"https://openalex.org/C29202148","wikidata":"https://www.wikidata.org/wiki/Q287260","display_name":"Resource allocation","level":2,"score":0.36070001125335693},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.3142000138759613},{"id":"https://openalex.org/C2778112365","wikidata":"https://www.wikidata.org/wiki/Q3511065","display_name":"Sequence (biology)","level":2,"score":0.31189998984336853},{"id":"https://openalex.org/C77052588","wikidata":"https://www.wikidata.org/wiki/Q644307","display_name":"Constant false alarm rate","level":2,"score":0.3057999908924103},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.30169999599456787},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.30149999260902405},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2989000082015991},{"id":"https://openalex.org/C83665646","wikidata":"https://www.wikidata.org/wiki/Q42139305","display_name":"Feature vector","level":2,"score":0.2890999913215637},{"id":"https://openalex.org/C54108766","wikidata":"https://www.wikidata.org/wiki/Q391064","display_name":"Packet loss","level":3,"score":0.28690001368522644},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C90936777","wikidata":"https://www.wikidata.org/wiki/Q917189","display_name":"Host-based intrusion detection system","level":4,"score":0.2842000126838684},{"id":"https://openalex.org/C18762648","wikidata":"https://www.wikidata.org/wiki/Q42213","display_name":"Work (physics)","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.25850000977516174},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2558000087738037},{"id":"https://openalex.org/C2986587452","wikidata":"https://www.wikidata.org/wiki/Q938438","display_name":"Statistical analysis","level":2,"score":0.2524999976158142}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/etfa65518.2025.11205733","doi":"https://doi.org/10.1109/etfa65518.2025.11205733","is_oa":false,"landing_page_url":"https://doi.org/10.1109/etfa65518.2025.11205733","pdf_url":null,"source":{"id":"https://openalex.org/S4363607916","display_name":"IEEE International Conference on Emerging Technologies and Factory Automation (ETFA)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"conference"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE 30th International Conference on Emerging Technologies and Factory Automation (ETFA)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.4943999946117401,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":8,"referenced_works":["https://openalex.org/W2969295985","https://openalex.org/W3162956350","https://openalex.org/W4205559658","https://openalex.org/W4226319939","https://openalex.org/W4375852305","https://openalex.org/W4378905933","https://openalex.org/W4382281941","https://openalex.org/W4411936737"],"related_works":["https://openalex.org/W4285818738","https://openalex.org/W7164877770","https://openalex.org/W4403977055","https://openalex.org/W7131362720","https://openalex.org/W4410851711","https://openalex.org/W4414630452","https://openalex.org/W7223350200","https://openalex.org/W7138849227","https://openalex.org/W7212229842","https://openalex.org/W4401344934"],"abstract_inverted_index":{"IoT":[0],"networks":[1],"require":[2],"efficient":[3],"intrusion":[4,23],"detection":[5,9,24,97],"systems":[6],"that":[7,91],"balance":[8],"accuracy":[10],"with":[11,99],"computational":[12],"constraints":[13],"for":[14,86],"edge":[15],"deployment.":[16],"This":[17],"work":[18],"introduces":[19],"a":[20],"novel":[21],"packet-level":[22,60,93],"method":[25,61,94],"using":[26,67],"14":[27],"statistical":[28],"features":[29],"extracted":[30],"from":[31],"sliding":[32],"windows":[33,45],"through":[34],"basic":[35],"counting":[36],"operations.":[37],"The":[38],"approach":[39],"operates":[40],"directly":[41],"on":[42,69],"fixed-size":[43],"packet":[44,52],"without":[46],"requiring":[47],"flow":[48],"reconstruction":[49],"or":[50],"deep":[51],"inspection":[53],"to":[54,110],"compute":[55],"statistics.":[56],"We":[57],"compare":[58],"this":[59],"against":[62],"traditional":[63,111],"flow-based":[64,112],"feature":[65,106],"extraction":[66,107],"tstat":[68],"the":[70],"Edge-IIoTset":[71],"dataset":[72],"across":[73],"10":[74],"attack":[75],"types.":[76],"Both":[77],"approaches":[78],"train":[79],"One-Class":[80],"Support":[81],"Vector":[82],"Machine":[83],"(OCSVM)":[84],"models":[85],"fair":[87],"evaluation.":[88],"Results":[89],"demonstrate":[90],"our":[92],"achieves":[95],"superior":[96],"rates":[98],"lower":[100],"false":[101],"alarms":[102],"while":[103],"significantly":[104],"reducing":[105],"time":[108],"compared":[109],"methods.":[113]},"counts_by_year":[],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2025-10-22T00:00:00"}