{"id":"https://openalex.org/W7224089913","doi":"https://doi.org/10.66279/695vq644","title":"Lightweight Federated Edge AI Framework for Real-Time Intrusion Detection in Industrial IoT Ecosystems","display_name":"Lightweight Federated Edge AI Framework for Real-Time Intrusion Detection in Industrial IoT Ecosystems","publication_year":2026,"publication_date":"2026-10-28","ids":{"openalex":"https://openalex.org/W7224089913","doi":"https://doi.org/10.66279/695vq644"},"language":"en","primary_location":{"id":"doi:10.66279/695vq644","doi":"https://doi.org/10.66279/695vq644","is_oa":true,"landing_page_url":"https://doi.org/10.66279/695vq644","pdf_url":"https://pub.scientificirg.com/index.php/ESIT/article/download/645/95","source":{"id":"https://openalex.org/S7407057476","display_name":"Engineering Systems and Intelligent Technologies (ESIT)","issn_l":"3071-253X","issn":["3071-253X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Engineering Systems and Intelligent Technologies (ESIT)","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://pub.scientificirg.com/index.php/ESIT/article/download/645/95","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5081747087","display_name":"Ahmed Hammad","orcid":"https://orcid.org/0000-0002-0631-2019","observed_orcids":["https://orcid.org/0000-0002-0631-2019"]},"institutions":[{"id":"https://openalex.org/I196431481","display_name":"Isra University","ror":"https://ror.org/04rmz8121","country_code":"PK","type":"education","lineage":["https://openalex.org/I196431481"]},{"id":"https://openalex.org/I92449659","display_name":"Isra University","ror":"https://ror.org/04d4bt482","country_code":"JO","type":"education","lineage":["https://openalex.org/I92449659"]}],"countries":["JO","PK"],"is_corresponding":false,"raw_author_name":"Ahmed Hammad","raw_affiliation_strings":["Isra University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Isra University","institution_ids":["https://openalex.org/I196431481","https://openalex.org/I92449659"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5018284854","display_name":"Hegazi M. Ibrahim","orcid":"https://orcid.org/0000-0002-9437-8367","observed_orcids":["https://orcid.org/0000-0002-9437-8367"]},"institutions":[{"id":"https://openalex.org/I196431481","display_name":"Isra University","ror":"https://ror.org/04rmz8121","country_code":"PK","type":"education","lineage":["https://openalex.org/I196431481"]},{"id":"https://openalex.org/I92449659","display_name":"Isra University","ror":"https://ror.org/04d4bt482","country_code":"JO","type":"education","lineage":["https://openalex.org/I92449659"]}],"countries":["JO","PK"],"is_corresponding":false,"raw_author_name":"Hegazi M. Ibrahim","raw_affiliation_strings":["Isra University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Isra University","institution_ids":["https://openalex.org/I196431481","https://openalex.org/I92449659"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"5","issue":"1","first_page":"1","last_page":"17"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9707000255584717,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9707000255584717,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10764","display_name":"Privacy-Preserving Technologies in Data","score":0.01549999974668026,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10273","display_name":"IoT and Edge/Fog Computing","score":0.0017000000225380063,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":0.9459999799728394},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.8339999914169312},{"id":"https://openalex.org/keywords/industrial-internet-of-things","display_name":"Industrial Internet of Things","score":0.8270000219345093},{"id":"https://openalex.org/keywords/industrial-control-networks","display_name":"industrial control networks","score":0.906000018119812},{"id":"https://openalex.org/keywords/edge-intelligence","display_name":"edge AI","score":0.7149999737739563},{"id":"https://openalex.org/keywords/lightweight-neural-networks","display_name":"lightweight neural networks","score":0.7710000276565552},{"id":"https://openalex.org/keywords/depthwise-separable-convolution","display_name":"depthwise separable convolution","score":0.9350000023841858},{"id":"https://openalex.org/keywords/self-attention","display_name":"self-attention","score":0.9789999723434448},{"id":"https://openalex.org/keywords/stochastic-quantization","display_name":"stochastic quantization","score":0.953000009059906},{"id":"https://openalex.org/keywords/privacy-protection","display_name":"privacy preservation","score":0.39399999380111694},{"id":"https://openalex.org/keywords/real-time-detection","display_name":"real-time detection","score":0.6710000038146973},{"id":"https://openalex.org/keywords/industrial-gateway","display_name":"industrial gateway","score":0.7429999709129333},{"id":"https://openalex.org/keywords/attack-detection","display_name":"attack detection","score":0.44200000166893005}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7179999947547913},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.6514000296592712},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5699999928474426},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.4672999978065491},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4487999975681305},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.43720000982284546},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.43380001187324524},{"id":"https://openalex.org/C40071531","wikidata":"https://www.wikidata.org/wiki/Q2513962","display_name":"Industrial control system","level":3,"score":0.39410001039505005},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.39079999923706055},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.38449999690055847},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.38179999589920044},{"id":"https://openalex.org/C28855332","wikidata":"https://www.wikidata.org/wiki/Q198099","display_name":"Quantization (signal processing)","level":2,"score":0.3621000051498413},{"id":"https://openalex.org/C102392041","wikidata":"https://www.wikidata.org/wiki/Q592860","display_name":"Sliding window protocol","level":3,"score":0.35350000858306885},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.3409000039100647},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.3402000069618225},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.32839998602867126},{"id":"https://openalex.org/C134066672","wikidata":"https://www.wikidata.org/wiki/Q1424639","display_name":"Payload (computing)","level":3,"score":0.3224000036716461},{"id":"https://openalex.org/C61326573","wikidata":"https://www.wikidata.org/wiki/Q1496376","display_name":"Gaussian process","level":3,"score":0.31049999594688416},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.3018999993801117},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.29829999804496765},{"id":"https://openalex.org/C92717368","wikidata":"https://www.wikidata.org/wiki/Q1162538","display_name":"Plaintext","level":3,"score":0.29440000653266907},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C159254197","wikidata":"https://www.wikidata.org/wiki/Q1144915","display_name":"Lexicographical order","level":2,"score":0.28690001368522644},{"id":"https://openalex.org/C173018170","wikidata":"https://www.wikidata.org/wiki/Q165678","display_name":"Microcontroller","level":2,"score":0.2809000015258789},{"id":"https://openalex.org/C91739489","wikidata":"https://www.wikidata.org/wiki/Q7447752","display_name":"Selective Repeat ARQ","level":5,"score":0.2800000011920929},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.27730000019073486},{"id":"https://openalex.org/C67212190","wikidata":"https://www.wikidata.org/wiki/Q104851","display_name":"Firmware","level":2,"score":0.27619999647140503},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.275299996137619},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.27480000257492065},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2676999866962433},{"id":"https://openalex.org/C159886148","wikidata":"https://www.wikidata.org/wiki/Q176645","display_name":"Markov process","level":2,"score":0.26179999113082886},{"id":"https://openalex.org/C2776666747","wikidata":"https://www.wikidata.org/wiki/Q1135322","display_name":"Modbus","level":3,"score":0.260699987411499},{"id":"https://openalex.org/C77553402","wikidata":"https://www.wikidata.org/wiki/Q13222579","display_name":"Upper and lower bounds","level":2,"score":0.25209999084472656},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.66279/695vq644","doi":"https://doi.org/10.66279/695vq644","is_oa":true,"landing_page_url":"https://doi.org/10.66279/695vq644","pdf_url":"https://pub.scientificirg.com/index.php/ESIT/article/download/645/95","source":{"id":"https://openalex.org/S7407057476","display_name":"Engineering Systems and Intelligent Technologies (ESIT)","issn_l":"3071-253X","issn":["3071-253X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Engineering Systems and Intelligent Technologies (ESIT)","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.66279/695vq644","doi":"https://doi.org/10.66279/695vq644","is_oa":true,"landing_page_url":"https://doi.org/10.66279/695vq644","pdf_url":"https://pub.scientificirg.com/index.php/ESIT/article/download/645/95","source":{"id":"https://openalex.org/S7407057476","display_name":"Engineering Systems and Intelligent Technologies (ESIT)","issn_l":"3071-253X","issn":["3071-253X"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Engineering Systems and Intelligent Technologies (ESIT)","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.7207000255584717,"display_name":"Industry, innovation and infrastructure"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7224089913.pdf","grobid_xml":"https://content.openalex.org/works/W7224089913.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W7220856040","https://openalex.org/W7133361718","https://openalex.org/W7163919323","https://openalex.org/W7126189930","https://openalex.org/W7161167626","https://openalex.org/W7167896477","https://openalex.org/W7169846463","https://openalex.org/W4388745122","https://openalex.org/W7212026066","https://openalex.org/W7164854359"],"abstract_inverted_index":{"Industrial":[0],"control":[1],"networks":[2],"connect":[3],"programmable":[4],"logic":[5],"controllers":[6],"(PLCs)":[7],"to":[8,15],"enterprise":[9],"systems,":[10],"which":[11],"exposes":[12],"closed-loop":[13],"processes":[14],"flooding,":[16],"scanning,":[17],"spoofing,":[18],"and":[19,30,70,94,123,151,166,178,203,214,225,228,235,241],"injection":[20],"attacks.":[21],"Cloud-hosted":[22],"intrusion":[23,52],"detection":[24,53],"can":[25],"miss":[26],"millisecond":[27],"response":[28],"requirements":[29],"requires":[31],"the":[32,96,140,185,198],"export":[33],"of":[34,99,112,129,139,176,184],"proprietary":[35],"process":[36],"data,":[37],"whereas":[38],"isolated":[39],"edge":[40],"detectors":[41],"observe":[42],"only":[43],"local":[44,107],"traffic.":[45],"This":[46],"paper":[47],"presents":[48],"Fed-EdgeIDS,":[49],"a":[50,78,147,206,210],"federated":[51,137],"framework":[54],"for":[55,135],"low-power":[56],"industrial":[57],"gateways.":[58],"Its":[59],"classifier,":[60],"DSA-Net,":[61],"combines":[62],"one-dimensional":[63,79],"depthwise":[64],"separable":[65],"convolutions":[66],"with":[67,82,106,146,172],"four-head":[68],"self-attention":[69],"has":[71],"67,831":[72],"trainable":[73],"parameters,":[74],"94.6%":[75],"fewer":[76],"than":[77],"CNN":[80],"baseline":[81],"1,248,500":[83],"parameters.":[84],"Each":[85],"gateway":[86],"clips":[87],"its":[88],"model":[89],"update,":[90],"adds":[91],"Gaussian":[92],"noise,":[93],"transmits":[95],"largest":[97],"30%":[98],"coordinates":[100],"after":[101],"unbiased":[102],"8-bit":[103],"stochastic":[104],"quantization":[105],"error":[108],"feedback.":[109],"With":[110],"four":[111],"20":[113],"gateways":[114],"sampled":[115],"per":[116],"round,":[117],"one":[118],"upload":[119],"occupies":[120],"61,051":[121],"bytes,":[122],"50":[124],"rounds":[125],"require":[126],"11.6":[127],"MB":[128,134],"uplink":[130],"payload":[131],"against":[132],"952.5":[133],"uncompressed":[136],"averaging":[138],"baseline.":[141],"The":[142,180],"server":[143],"aggregates":[144],"updates":[145],"coordinate-wise":[148],"trimmed":[149],"mean":[150,219,229],"Nesterov":[152],"momentum.":[153],"Over":[154],"five":[155],"random":[156],"seeds,":[157],"Fed-EdgeIDS":[158],"reaches":[159],"98.74%":[160],"\u00b1":[161,168],"0.12%":[162],"accuracy":[163],"on":[164,170],"Edge-IIoTset":[165],"99.02%":[167],"0.09%":[169],"CIC-IDS2017,":[171],"false":[173],"alarm":[174],"rates":[175],"0.62%":[177],"0.49%.":[179],"client-level":[181],"privacy":[182],"bound":[183],"update":[186],"perturbation":[187],"is":[188,232],"weak":[189],"(\u03b5":[190],"\u2248":[191],"24.8":[192],"at":[193],"\u03b4":[194],"=":[195],"10\u207b\u2075),":[196],"so":[197],"noise":[199],"acts":[200],"as":[201,205],"obfuscation":[202],"not":[204],"formal":[207],"guarantee.":[208],"On":[209],"Raspberry":[211],"Pi":[212],"4":[213],"an":[215],"NVIDIA":[216],"Jetson":[217],"Nano,":[218],"per-window":[220],"inference":[221],"takes":[222],"3.74":[223],"ms":[224,234],"1.18":[226],"ms,":[227,237],"detection-to-containment-dispatch":[230],"latency":[231],"4.56":[233],"1.82":[236],"excluding":[238],"window":[239],"accumulation":[240],"enforcement":[242],"time.":[243]},"counts_by_year":[],"updated_date":"2026-10-30T12:39:25.321706","created_date":"2026-10-29T00:00:00"}