{"id":"https://openalex.org/W4417536578","doi":"https://doi.org/10.1038/s41598-025-33426-4","title":"D3O-IIoT: deep reinforcement learning-driven dynamic deception orchestration for industrial IoT security","display_name":"D3O-IIoT: deep reinforcement learning-driven dynamic deception orchestration for industrial IoT security","publication_year":2025,"publication_date":"2025-12-21","ids":{"openalex":"https://openalex.org/W4417536578","doi":"https://doi.org/10.1038/s41598-025-33426-4","pmid":"https://pubmed.ncbi.nlm.nih.gov/41423564"},"language":"en","primary_location":{"id":"doi:10.1038/s41598-025-33426-4","doi":"https://doi.org/10.1038/s41598-025-33426-4","is_oa":true,"landing_page_url":"https://doi.org/10.1038/s41598-025-33426-4","pdf_url":"https://www.nature.com/articles/s41598-025-33426-4_reference.pdf","source":{"id":"https://openalex.org/S196734849","display_name":"Scientific Reports","issn_l":"2045-2322","issn":["2045-2322"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","jufo-1","ki-jl-1","medline","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319908","host_organization_name":"Nature Portfolio","host_organization_lineage":["https://openalex.org/P4310319908","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Nature Portfolio","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Reports","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj","pubmed"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.nature.com/articles/s41598-025-33426-4_reference.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Usman Wushishi","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I10535382","display_name":"Chongqing University of Posts and Telecommunications","ror":"https://ror.org/03dgaqz26","country_code":"CN","type":"education","lineage":["https://openalex.org/I10535382"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Usman Wushishi","raw_affiliation_strings":["School of Computer Science and Technology, Chongqing University of Posts and Telecommunications, Chongqing, 400065, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Chongqing University of Posts and Telecommunications, Chongqing, 400065, China","institution_ids":["https://openalex.org/I10535382"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Altaf Hussain","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I10535382","display_name":"Chongqing University of Posts and Telecommunications","ror":"https://ror.org/03dgaqz26","country_code":"CN","type":"education","lineage":["https://openalex.org/I10535382"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Altaf Hussain","raw_affiliation_strings":["School of Computer Science and Technology, Chongqing University of Posts and Telecommunications, Chongqing, 400065, China. altafkfm74@gmail.com"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Chongqing University of Posts and Telecommunications, Chongqing, 400065, China. altafkfm74@gmail.com","institution_ids":["https://openalex.org/I10535382"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Muhammad Imran Khalid","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I10535382","display_name":"Chongqing University of Posts and Telecommunications","ror":"https://ror.org/03dgaqz26","country_code":"CN","type":"education","lineage":["https://openalex.org/I10535382"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Muhammad Imran Khalid","raw_affiliation_strings":["School of Computer Science and Technology, Chongqing University of Posts and Telecommunications, Chongqing, 400065, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Chongqing University of Posts and Telecommunications, Chongqing, 400065, China","institution_ids":["https://openalex.org/I10535382"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Nasir Hussain","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I10535382","display_name":"Chongqing University of Posts and Telecommunications","ror":"https://ror.org/03dgaqz26","country_code":"CN","type":"education","lineage":["https://openalex.org/I10535382"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Nasir Hussain","raw_affiliation_strings":["School of Computer Science and Technology, Chongqing University of Posts and Telecommunications, Chongqing, 400065, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Chongqing University of Posts and Telecommunications, Chongqing, 400065, China","institution_ids":["https://openalex.org/I10535382"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Mona Jamjoom","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I106778892","display_name":"Princess Nourah bint Abdulrahman University","ror":"https://ror.org/05b0cyh02","country_code":"SA","type":"education","lineage":["https://openalex.org/I106778892"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mona Jamjoom","raw_affiliation_strings":["Department of Computer Sciences, College of Computer and Information Sciences, Princess Nourah Bint Abdulrahman University, Riyadh, 11671, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Sciences, College of Computer and Information Sciences, Princess Nourah Bint Abdulrahman University, Riyadh, 11671, Saudi Arabia","institution_ids":["https://openalex.org/I106778892"]}]},{"author_position":"last","author":{"id":null,"display_name":"Zahid Ullah","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I240666556","display_name":"Imam Mohammad ibn Saud Islamic University","ror":"https://ror.org/05gxjyb39","country_code":"SA","type":"education","lineage":["https://openalex.org/I240666556"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Zahid Ullah","raw_affiliation_strings":["Information Systems Department, College of Computer and Information Sciences, Imam Mohammad Ibn Saud Islamic University (IMSIU), Riyadh, 11432, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Systems Department, College of Computer and Information Sciences, Imam Mohammad Ibn Saud Islamic University (IMSIU), Riyadh, 11432, Saudi Arabia","institution_ids":["https://openalex.org/I240666556"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I10535382"],"apc_list":{"value":2690,"currency":"USD","value_usd":2690},"apc_paid":{"value":2690,"currency":"USD","value_usd":2690},"fwci":2.1767,"has_fulltext":true,"cited_by_count":5,"citation_normalized_percentile":{"value":0.88925512,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"16","issue":"1","first_page":"2389","last_page":"2389"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9711999893188477,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9711999893188477,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.01360000018030405,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0031999999191612005,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/industrial-internet-of-things-security","display_name":"Industrial Internet of Things security","score":0.9330000281333923},{"id":"https://openalex.org/keywords/deep-reinforcement-learning","display_name":"deep reinforcement learning","score":0.7929999828338623},{"id":"https://openalex.org/keywords/honeypot-deployment","display_name":"honeypot deployment","score":0.75},{"id":"https://openalex.org/keywords/moving-target-defense","display_name":"moving target defense","score":1.0},{"id":"https://openalex.org/keywords/node-isolation","display_name":"node isolation","score":0.9760000109672546},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.8700000047683716},{"id":"https://openalex.org/keywords/false-positive-control","display_name":"false positive control","score":0.6520000100135803},{"id":"https://openalex.org/keywords/markov-decision-process","display_name":"Markov decision process","score":0.7139999866485596},{"id":"https://openalex.org/keywords/real-time-threat-monitoring","display_name":"real-time threat monitoring","score":0.6340000033378601}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7893000245094299},{"id":"https://openalex.org/C2779267917","wikidata":"https://www.wikidata.org/wiki/Q170028","display_name":"Deception","level":2,"score":0.7774999737739563},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.6323000192642212},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.6194000244140625},{"id":"https://openalex.org/C191267431","wikidata":"https://www.wikidata.org/wiki/Q911932","display_name":"Honeypot","level":2,"score":0.5630000233650208},{"id":"https://openalex.org/C106189395","wikidata":"https://www.wikidata.org/wiki/Q176789","display_name":"Markov decision process","level":3,"score":0.46950000524520874},{"id":"https://openalex.org/C201307755","wikidata":"https://www.wikidata.org/wiki/Q4071928","display_name":"Cyber-attack","level":2,"score":0.4230000078678131},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.4049000144004822},{"id":"https://openalex.org/C202839342","wikidata":"https://www.wikidata.org/wiki/Q60740481","display_name":"Industrial Internet","level":3,"score":0.37700000405311584},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.3621000051498413},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.357699990272522},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.33340001106262207},{"id":"https://openalex.org/C29852176","wikidata":"https://www.wikidata.org/wiki/Q373338","display_name":"Critical infrastructure","level":2,"score":0.31859999895095825},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.29109999537467957},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.28110000491142273},{"id":"https://openalex.org/C172191483","wikidata":"https://www.wikidata.org/wiki/Q1071806","display_name":"Provisioning","level":2,"score":0.2777999937534332},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.27709999680519104},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.2770000100135803},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C2775924081","wikidata":"https://www.wikidata.org/wiki/Q55608371","display_name":"Control (management)","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C60891933","wikidata":"https://www.wikidata.org/wiki/Q796575","display_name":"Ant colony","level":3,"score":0.2687999904155731},{"id":"https://openalex.org/C97508593","wikidata":"https://www.wikidata.org/wiki/Q1359069","display_name":"Contingency","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2669000029563904},{"id":"https://openalex.org/C154908896","wikidata":"https://www.wikidata.org/wiki/Q2167404","display_name":"Security policy","level":2,"score":0.2667999863624573},{"id":"https://openalex.org/C119701452","wikidata":"https://www.wikidata.org/wiki/Q5165881","display_name":"Control reconfiguration","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.2581000030040741},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.25540000200271606},{"id":"https://openalex.org/C145804949","wikidata":"https://www.wikidata.org/wiki/Q478123","display_name":"Situation awareness","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":4,"locations":[{"id":"doi:10.1038/s41598-025-33426-4","doi":"https://doi.org/10.1038/s41598-025-33426-4","is_oa":true,"landing_page_url":"https://doi.org/10.1038/s41598-025-33426-4","pdf_url":"https://www.nature.com/articles/s41598-025-33426-4_reference.pdf","source":{"id":"https://openalex.org/S196734849","display_name":"Scientific Reports","issn_l":"2045-2322","issn":["2045-2322"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","jufo-1","ki-jl-1","medline","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319908","host_organization_name":"Nature Portfolio","host_organization_lineage":["https://openalex.org/P4310319908","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Nature Portfolio","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Reports","raw_type":"journal-article"},{"id":"pmid:41423564","doi":null,"is_oa":false,"landing_page_url":"https://pubmed.ncbi.nlm.nih.gov/41423564","pdf_url":null,"source":{"id":"https://openalex.org/S4306525036","display_name":"PubMed","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific reports","raw_type":"Journal Article"},{"id":"pmh:oai:doaj.org/article:068395779094463e8f12b8730ada4d71","doi":null,"is_oa":true,"landing_page_url":"https://doaj.org/article/068395779094463e8f12b8730ada4d71","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Scientific Reports, Vol 16, Iss 1, Pp 1-18 (2025)","raw_type":"article"},{"id":"pmh:oai:pubmedcentral.nih.gov:12816736","doi":null,"is_oa":true,"landing_page_url":"https://pmc.ncbi.nlm.nih.gov/articles/PMC12816736/","pdf_url":null,"source":{"id":"https://openalex.org/S2764455111","display_name":"PubMed Central","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/I1299303238","host_organization_name":"National Institutes of Health","host_organization_lineage":["https://openalex.org/I1299303238"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Sci Rep","raw_type":"Text"}],"best_oa_location":{"id":"doi:10.1038/s41598-025-33426-4","doi":"https://doi.org/10.1038/s41598-025-33426-4","is_oa":true,"landing_page_url":"https://doi.org/10.1038/s41598-025-33426-4","pdf_url":"https://www.nature.com/articles/s41598-025-33426-4_reference.pdf","source":{"id":"https://openalex.org/S196734849","display_name":"Scientific Reports","issn_l":"2045-2322","issn":["2045-2322"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","jufo-1","ki-jl-1","medline","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319908","host_organization_name":"Nature Portfolio","host_organization_lineage":["https://openalex.org/P4310319908","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Nature Portfolio","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Reports","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G7891003125","display_name":null,"funder_award_id":"PNURSP2025R104","funder_id":"https://openalex.org/F4320322484","funder_display_name":"Princess Nourah Bint Abdulrahman University"}],"funders":[{"id":"https://openalex.org/F4320322484","display_name":"Princess Nourah Bint Abdulrahman University","ror":"https://ror.org/05b0cyh02"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4417536578.pdf","grobid_xml":"https://content.openalex.org/works/W4417536578.grobid-xml"},"referenced_works_count":34,"referenced_works":["https://openalex.org/W2794168745","https://openalex.org/W2903957940","https://openalex.org/W2966247046","https://openalex.org/W3013103056","https://openalex.org/W3015296286","https://openalex.org/W3034520543","https://openalex.org/W3156178383","https://openalex.org/W3174885261","https://openalex.org/W3187251708","https://openalex.org/W3189826552","https://openalex.org/W4210683250","https://openalex.org/W4386825138","https://openalex.org/W4389408081","https://openalex.org/W4391132011","https://openalex.org/W4400234889","https://openalex.org/W4400475279","https://openalex.org/W4401105672","https://openalex.org/W4403295017","https://openalex.org/W4403621806","https://openalex.org/W4405489887","https://openalex.org/W4407295151","https://openalex.org/W4408469845","https://openalex.org/W4408681036","https://openalex.org/W4408888131","https://openalex.org/W4409205049","https://openalex.org/W4410227168","https://openalex.org/W4410393448","https://openalex.org/W4410409227","https://openalex.org/W4410630954","https://openalex.org/W4411205336","https://openalex.org/W4413736352","https://openalex.org/W4415923733","https://openalex.org/W6906800255","https://openalex.org/W7089522869"],"related_works":[],"abstract_inverted_index":{"The":[0,25,84,199],"industrial":[1,23],"Internet":[2],"of":[3,15,22,39,79,144,167,175,192],"Things":[4],"(IIoT)":[5],"systems":[6],"are":[7,30],"under":[8,249],"mounting":[9],"cyber":[10],"threats":[11,209],"that":[12,41,59,127,170,186,221],"take":[13],"advantage":[14],"the":[16,34,47,77,171,190],"resource":[17,116],"shortage":[18],"and":[19,73,115,158,163,185,210,241],"operational":[20],"vulnerability":[21],"systems.":[24],"current":[26],"intrusion":[27],"detection":[28],"schemes":[29],"based":[31],"on":[32,76,119,161,207,215],"either":[33],"static":[35],"or":[36],"passive":[37],"form":[38],"defense":[40,85],"is":[42,87,141,152,177],"not":[43],"dynamically":[44,60],"adapted":[45],"to":[46,105],"changing":[48],"attacks.":[49],"This":[50],"paper":[51],"presents":[52],"D3O-IIoT,":[53],"a":[54,90,96,102,130,136,218],"progressive":[55],"reinforcement":[56],"learning":[57],"model":[58],"coordinates":[61],"deception":[62,110,243],"techniques,":[63],"including":[64],"honeypot":[65],"deployment,":[66],"moving":[67],"target":[68],"defense,":[69],"fake":[70],"telemetry":[71],"injection,":[72],"node":[74],"isolation":[75,203],"basis":[78],"real":[80,226],"time":[81],"threat":[82],"monitoring.":[83],"problem":[86],"formulated":[88],"as":[89],"Markov":[91],"Decision":[92],"Process,":[93],"in":[94,225],"which":[95,140],"Dueling":[97],"Deep":[98],"Q-Network":[99],"agent":[100],"maximizes":[101],"multi-objective":[103],"reward":[104,176],"balance":[106],"between":[107],"attack":[108,132],"mitigation,":[109],"engagement,":[111],"false":[112,138,178],"positive":[113,179],"control":[114,180],"cost.":[117],"Experiments":[118],"three":[120],"IIoT":[121,231],"datasets":[122],"(CIC-IIoT2025,":[123],"WUSTL-IIoT2021,":[124],"TON-IoT)":[125],"demonstrate":[126],"D3O-IIoT":[128,228],"has":[129],"13.7%":[131],"mitigation":[133],"rate":[134],"with":[135,217,239],"0.3%":[137],"alarm,":[139],"an":[142],"improvement":[143],"293\u2013767%":[145],"(p":[146],"<":[147],"0.0001)":[148],"over":[149],"baselines.":[150],"Generalization":[151],"confirmed":[153,208],"by":[154,233],"cross-dataset":[155],"validation":[156],"(97.7%":[157],"77.8%":[159],"retention":[160],"TON-IoT":[162],"WUSTL-IIoT,":[164],"respectively).":[165],"Results":[166],"Ablation":[168],"determine":[169],"most":[172],"critical":[173],"component":[174],"(51.4%":[181],"degradation":[182],"upon":[183,230],"removal)":[184],"sensitivity":[187],"analysis":[188],"indicates":[189],"possibility":[191],"46.1%":[193],"tunability":[194],"through":[195],"risk":[196],"threshold":[197],"change.":[198],"acquired":[200],"policy":[201],"favors":[202],"(71.2":[204],"per":[205,213],"cent)":[206,214],"honeypots":[211],"(15.4":[212],"reconnaissance":[216],"2.07ms":[219],"latency":[220],"can":[222],"be":[223],"deployed":[224],"time.":[227],"builds":[229],"cybersecurity":[232],"substituting":[234],"fixed":[235],"set":[236],"rule-based":[237],"defenses":[238],"dynamic":[240],"learning-based":[242],"orchestration,":[244],"balancing":[245],"various":[246],"practical":[247],"goals":[248],"resource-constrained":[250],"conditions.":[251]},"counts_by_year":[{"year":2026,"cited_by_count":5}],"updated_date":"2026-10-15T10:00:46.086208","created_date":"2025-12-21T00:00:00"}