{"id":"https://openalex.org/W7224549161","doi":"https://doi.org/10.26483/ijarcs.v17i5.7584","title":"Cross-Dataset Evaluation of Intrusion Detection Models for IoT Networks","display_name":"Cross-Dataset Evaluation of Intrusion Detection Models for IoT Networks","publication_year":2026,"publication_date":"2026-10-28","ids":{"openalex":"https://openalex.org/W7224549161","doi":"https://doi.org/10.26483/ijarcs.v17i5.7584"},"language":"en","primary_location":{"id":"pmh:oai:ijarcs.info:article/7584","doi":"https://doi.org/10.26483/ijarcs.v17i5.7584","is_oa":true,"landing_page_url":"http://ijarcs.info/index.php/index/article/view/7584","pdf_url":null,"source":{"id":"https://openalex.org/S2764748552","display_name":"International Journal of Advanced Research in Computer Science","issn_l":"0976-5697","issn":["0976-5697"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4324013418","host_organization_name":"International Journal of Advanced Research in Computer Science","host_organization_lineage":["https://openalex.org/P4324013418"],"host_organization_lineage_names":["International Journal of Advanced Research in Computer Science"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10.26483/ijarcs.v17i5","raw_type":"info:eu-repo/semantics/article"},"volume":null,"type":"article","indexed_in":[],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"http://ijarcs.info/index.php/index/article/view/7584","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160079320","display_name":"Hayder Mustafa Mueen","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mueen, Hayder Mustafa","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141032844","display_name":"Shubbar Salman Baqer Alkhafaji","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Alkhafaji, Shubbar Salman Baqer","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5094190951","display_name":"Ahmad Adel Habeeb","orcid":"https://orcid.org/0009-0009-0710-1633","observed_orcids":["https://orcid.org/0009-0009-0710-1633"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Habeeb, Ahmad Adel","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5092265911","display_name":"Yousif Samer Mudhafar","orcid":"https://orcid.org/0000-0003-4960-7973","observed_orcids":["https://orcid.org/0000-0003-4960-7973"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Mudhafar, Yousif Samer","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.86996105,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":9.999999747378752e-05,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-systems","display_name":"intrusion detection systems","score":0.8560000061988831},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.9409999847412109},{"id":"https://openalex.org/keywords/cross-dataset-evaluation","display_name":"cross-dataset evaluation","score":0.8809999823570251},{"id":"https://openalex.org/keywords/distribution-shift","display_name":"distribution shift","score":0.6759999990463257},{"id":"https://openalex.org/keywords/unsupervised-anomaly-detection","display_name":"unsupervised anomaly detection","score":0.7609999775886536},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.7110000252723694},{"id":"https://openalex.org/keywords/isolation-forest","display_name":"Isolation Forest","score":0.9959999918937683},{"id":"https://openalex.org/keywords/autoencoder","display_name":"autoencoder","score":0.777999997138977},{"id":"https://openalex.org/keywords/unsw-nb15","display_name":"UNSW-NB15","score":0.8870000243186951},{"id":"https://openalex.org/keywords/cicids2017","display_name":"CICIDS2017","score":0.9739999771118164}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8855000138282776},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.6811000108718872},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5795999765396118},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5552999973297119},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.554099977016449},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.5388000011444092},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5250999927520752},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.5231999754905701},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.5105000138282776},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.5095999836921692},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47540000081062317},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.4681999981403351},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.44190001487731934},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.3693000078201294},{"id":"https://openalex.org/C2775941552","wikidata":"https://www.wikidata.org/wiki/Q25212305","display_name":"Isolation (microbiology)","level":2,"score":0.36800000071525574},{"id":"https://openalex.org/C16910744","wikidata":"https://www.wikidata.org/wiki/Q7705759","display_name":"Test data","level":2,"score":0.35839998722076416},{"id":"https://openalex.org/C2776145971","wikidata":"https://www.wikidata.org/wiki/Q30673951","display_name":"Labeled data","level":2,"score":0.32679998874664307},{"id":"https://openalex.org/C110121322","wikidata":"https://www.wikidata.org/wiki/Q865811","display_name":"Distribution (mathematics)","level":2,"score":0.2944999933242798},{"id":"https://openalex.org/C148524875","wikidata":"https://www.wikidata.org/wiki/Q6975395","display_name":"F1 score","level":2,"score":0.28700000047683716},{"id":"https://openalex.org/C169903167","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Test set","level":2,"score":0.28540000319480896},{"id":"https://openalex.org/C2777611316","wikidata":"https://www.wikidata.org/wiki/Q39045282","display_name":"Streaming data","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.2556999921798706}],"mesh":[],"locations_count":1,"locations":[{"id":"pmh:oai:ijarcs.info:article/7584","doi":"https://doi.org/10.26483/ijarcs.v17i5.7584","is_oa":true,"landing_page_url":"http://ijarcs.info/index.php/index/article/view/7584","pdf_url":null,"source":{"id":"https://openalex.org/S2764748552","display_name":"International Journal of Advanced Research in Computer Science","issn_l":"0976-5697","issn":["0976-5697"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4324013418","host_organization_name":"International Journal of Advanced Research in Computer Science","host_organization_lineage":["https://openalex.org/P4324013418"],"host_organization_lineage_names":["International Journal of Advanced Research in Computer Science"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10.26483/ijarcs.v17i5","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"pmh:oai:ijarcs.info:article/7584","doi":"https://doi.org/10.26483/ijarcs.v17i5.7584","is_oa":true,"landing_page_url":"http://ijarcs.info/index.php/index/article/view/7584","pdf_url":null,"source":{"id":"https://openalex.org/S2764748552","display_name":"International Journal of Advanced Research in Computer Science","issn_l":"0976-5697","issn":["0976-5697"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core"],"host_organization":"https://openalex.org/P4324013418","host_organization_name":"International Journal of Advanced Research in Computer Science","host_organization_lineage":["https://openalex.org/P4324013418"],"host_organization_lineage_names":["International Journal of Advanced Research in Computer Science"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"10.26483/ijarcs.v17i5","raw_type":"info:eu-repo/semantics/article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W3155878966","https://openalex.org/W7162470069","https://openalex.org/W7170171081","https://openalex.org/W7148426725","https://openalex.org/W7162438024","https://openalex.org/W7160535123","https://openalex.org/W3209651413","https://openalex.org/W4408386031","https://openalex.org/W7167938297","https://openalex.org/W7124437390"],"abstract_inverted_index":{"As":[0],"IoT":[1],"networks":[2],"become":[3],"more":[4],"complex,":[5],"so":[6],"too":[7],"does":[8],"their":[9,59,87,113,166],"vulnerability":[10],"to":[11,89,91,115,173,210],"various":[12],"cyber":[13],"threats":[14],"and":[15,47,65,75,105,122,217],"attacks,":[16],"making":[17],"the":[18,79,108,193,197,211],"need":[19],"for":[20,103,131,138,225,236,239],"strong":[21],"IDS":[22,29,201,216,224],"an":[23,223],"absolute":[24],"must.":[25],"This":[26,203],"paper":[27],"investigates":[28],"machine":[30],"learning":[31],"models":[32,72,100,149],"based":[33],"on":[34,96,143,154,196],"both":[35],"a":[36,92,226],"single":[37],"data":[38,81,110,156,170,183],"set":[39],"as":[40,42,56,58],"well":[41,57,102],"cross-boundary":[43],"datasets.":[44,67],"Supervised,":[45],"unsupervised,":[46],"hybrid":[48],"methods":[49,214],"(Random":[50],"Forest,":[51,53],"Isolation":[52],"Autoencoder,":[54],"etc.),":[55],"combinations,":[60],"were":[61,124],"evaluated":[62,86],"using":[63,73],"UNSW-NB15":[64],"CICIDS2017":[66],"Where":[68],"most":[69],"studies":[70],"evaluate":[71],"training":[74,104,121],"testing":[76,106,123],"sets":[77],"within":[78,107],"same":[80,109,144],"set,":[82],"this":[83],"study":[84,204],"primarily":[85],"ability":[88,114],"generalize":[90,116],"different":[93,169],"dataset.":[94],"Based":[95,177],"experimental":[97],"results,":[98],"supervised":[99],"performed":[101,125],"set;":[111],"however,":[112],"was":[117],"drastically":[118],"reduced":[119],"when":[120,141,152,164,237],"across":[126,168],"datasets":[127],"(~90%":[128],"F1":[129,136],"score":[130,137],"r.":[132,139],"Forest":[133,140],"vs.":[134],"52%":[135],"trained/tested":[142],"dataset).":[145],"Conversely,":[146],"while":[147],"unsupervised":[148],"lack":[150],"accuracy":[151],"training/testing":[153],"controlled":[155],"sets,":[157],"they":[158],"do":[159],"show":[160],"relatively":[161],"consistent":[162],"performance":[163,167],"comparing":[165],"distributions":[171,191],"due":[172],"dataset":[174,190,230],"distribution":[175,180,231],"biases.":[176],"upon":[178],"feature":[179],"comparisons":[181],"among":[182],"distributions,":[184],"it":[185],"appears":[186],"that":[187,206,218],"differences":[188],"in":[189,219],"have":[192],"greatest":[194],"effect":[195],"generalization":[198],"of":[199,215,222],"current":[200,212],"models.":[202],"concluded":[205],"there":[207],"are":[208],"limitations":[209],"state-of-the-art":[213],"any":[220],"design":[221],"real-world":[227],"IOT":[228],"scenario;":[229],"shifts":[232],"must":[233],"be":[234],"accounted":[235],"providing":[238],"reliable":[240],"INS.":[241]},"counts_by_year":[],"updated_date":"2026-10-31T12:09:11.096373","created_date":"2026-10-30T00:00:00"}