{"id":"https://openalex.org/W7225001219","doi":"https://doi.org/10.1038/s41598-026-79015-x","title":"CAMELOT-IDS: a multi-scale transformer with empirical uncertainty diagnostics for IoT intrusion detection","display_name":"CAMELOT-IDS: a multi-scale transformer with empirical uncertainty diagnostics for IoT intrusion detection","publication_year":2026,"publication_date":"2026-10-31","ids":{"openalex":"https://openalex.org/W7225001219","doi":"https://doi.org/10.1038/s41598-026-79015-x"},"language":"en","primary_location":{"id":"doi:10.1038/s41598-026-79015-x","doi":"https://doi.org/10.1038/s41598-026-79015-x","is_oa":true,"landing_page_url":"https://doi.org/10.1038/s41598-026-79015-x","pdf_url":"https://www.nature.com/articles/s41598-026-79015-x_reference.pdf","source":{"id":"https://openalex.org/S196734849","display_name":"Scientific Reports","issn_l":"2045-2322","issn":["2045-2322"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","jufo-1","ki-jl-1","medline","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319908","host_organization_name":"Nature Portfolio","host_organization_lineage":["https://openalex.org/P4310319908","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Nature Portfolio","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Reports","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.nature.com/articles/s41598-026-79015-x_reference.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5157492765","display_name":"Ayesha Qureshi","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I174731842","display_name":"Islamia University of Bahawalpur","ror":"https://ror.org/002rc4w13","country_code":"PK","type":"education","lineage":["https://openalex.org/I174731842"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Ayesha Qureshi","raw_affiliation_strings":["Department of Information Technology, The Islamia University of Bahawalpur, Bahawalpur, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Technology, The Islamia University of Bahawalpur, Bahawalpur, Pakistan","institution_ids":["https://openalex.org/I174731842"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5019585948","display_name":"Imran Sarwar Bajwa","orcid":"https://orcid.org/0000-0002-5161-6441","observed_orcids":["https://orcid.org/0000-0002-5161-6441"]},"institutions":[{"id":"https://openalex.org/I174731842","display_name":"Islamia University of Bahawalpur","ror":"https://ror.org/002rc4w13","country_code":"PK","type":"education","lineage":["https://openalex.org/I174731842"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Imran Sarwar Bajwa","raw_affiliation_strings":["Department of Computer Science, The Islamia University of Bahawalpur, Bahawalpur, Pakistan"],"raw_orcid":"https://orcid.org/0000-0002-5161-6441","affiliations":[{"raw_affiliation_string":"Department of Computer Science, The Islamia University of Bahawalpur, Bahawalpur, Pakistan","institution_ids":["https://openalex.org/I174731842"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002558255","display_name":"Nadeem Sarwar","orcid":"https://orcid.org/0000-0001-8681-6382","observed_orcids":["https://orcid.org/0000-0001-8681-6382"]},"institutions":[{"id":"https://openalex.org/I59225215","display_name":"Bahria University","ror":"https://ror.org/02v8d7770","country_code":"PK","type":"education","lineage":["https://openalex.org/I59225215"]}],"countries":["PK"],"is_corresponding":true,"raw_author_name":"Nadeem Sarwar","raw_affiliation_strings":["Department of Computer Science, Bahria University Lahore Campus, Lahore, Pakistan"],"raw_orcid":"https://orcid.org/0000-0001-8681-6382","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Bahria University Lahore Campus, Lahore, Pakistan","institution_ids":["https://openalex.org/I59225215"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031545931","display_name":"Monia Hamdi","orcid":"https://orcid.org/0000-0003-3690-9868","observed_orcids":["https://orcid.org/0000-0003-3690-9868"]},"institutions":[{"id":"https://openalex.org/I106778892","display_name":"Princess Nourah bint Abdulrahman University","ror":"https://ror.org/05b0cyh02","country_code":"SA","type":"education","lineage":["https://openalex.org/I106778892"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Monia Hamdi","raw_affiliation_strings":["Department of Information Technology, College of Computer and Information Sciences, Princess Nourah bint Abdulrahman University, P.O. Box 84428, Riyadh 11671, Saudi Arabia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information Technology, College of Computer and Information Sciences, Princess Nourah bint Abdulrahman University, P.O. Box 84428, Riyadh 11671, Saudi Arabia","institution_ids":["https://openalex.org/I106778892"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5040966539","display_name":"Ali Samad","orcid":"https://orcid.org/0000-0001-9284-358X","observed_orcids":["https://orcid.org/0000-0001-9284-358X"]},"institutions":[{"id":"https://openalex.org/I174731842","display_name":"Islamia University of Bahawalpur","ror":"https://ror.org/002rc4w13","country_code":"PK","type":"education","lineage":["https://openalex.org/I174731842"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Ali Samad","raw_affiliation_strings":["Department of Computer Science, The Islamia University of Bahawalpur, Bahawalpur, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, The Islamia University of Bahawalpur, Bahawalpur, Pakistan","institution_ids":["https://openalex.org/I174731842"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5002558255"],"corresponding_institution_ids":["https://openalex.org/I59225215"],"apc_list":{"value":2690,"currency":"USD","value_usd":2690},"apc_paid":{"value":2690,"currency":"USD","value_usd":2690},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.83723747,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9932000041007996,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0024999999441206455,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0015999999595806003,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iot-intrusion-detection","display_name":"IoT intrusion detection","score":0.9850000143051147},{"id":"https://openalex.org/keywords/prediction-sets","display_name":"prediction sets","score":0.8679999709129333},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.7139999866485596},{"id":"https://openalex.org/keywords/distribution-shift","display_name":"distribution shift","score":0.9670000076293945},{"id":"https://openalex.org/keywords/stream-monitoring","display_name":"stream monitoring","score":0.5600000023841858},{"id":"https://openalex.org/keywords/ciciot2023-dataset","display_name":"CICIoT2023","score":0.8040000200271606},{"id":"https://openalex.org/keywords/interpretability","display_name":"interpretability","score":0.49399998784065247}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8069000244140625},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6172999739646912},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.5228000283241272},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.5052000284194946},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4456000030040741},{"id":"https://openalex.org/C165838908","wikidata":"https://www.wikidata.org/wiki/Q736777","display_name":"Calibration","level":2,"score":0.41449999809265137},{"id":"https://openalex.org/C99844830","wikidata":"https://www.wikidata.org/wiki/Q102441924","display_name":"Scaling","level":2,"score":0.38029998540878296},{"id":"https://openalex.org/C2778484313","wikidata":"https://www.wikidata.org/wiki/Q1172540","display_name":"Data stream","level":2,"score":0.36039999127388},{"id":"https://openalex.org/C71901391","wikidata":"https://www.wikidata.org/wiki/Q7126699","display_name":"Upload","level":2,"score":0.3497999906539917},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3476000130176544},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3440999984741211},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.32510000467300415},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.3239000141620636},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.3165999948978424},{"id":"https://openalex.org/C149441793","wikidata":"https://www.wikidata.org/wiki/Q200726","display_name":"Probability distribution","level":2,"score":0.30219998955726624},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.29350000619888306},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.2619999945163727},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2599000036716461},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.257999986410141},{"id":"https://openalex.org/C186967261","wikidata":"https://www.wikidata.org/wiki/Q5082128","display_name":"Mobile device","level":2,"score":0.2565999925136566},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.25049999356269836}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1038/s41598-026-79015-x","doi":"https://doi.org/10.1038/s41598-026-79015-x","is_oa":true,"landing_page_url":"https://doi.org/10.1038/s41598-026-79015-x","pdf_url":"https://www.nature.com/articles/s41598-026-79015-x_reference.pdf","source":{"id":"https://openalex.org/S196734849","display_name":"Scientific Reports","issn_l":"2045-2322","issn":["2045-2322"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","jufo-1","ki-jl-1","medline","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319908","host_organization_name":"Nature Portfolio","host_organization_lineage":["https://openalex.org/P4310319908","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Nature Portfolio","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Reports","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1038/s41598-026-79015-x","doi":"https://doi.org/10.1038/s41598-026-79015-x","is_oa":true,"landing_page_url":"https://doi.org/10.1038/s41598-026-79015-x","pdf_url":"https://www.nature.com/articles/s41598-026-79015-x_reference.pdf","source":{"id":"https://openalex.org/S196734849","display_name":"Scientific Reports","issn_l":"2045-2322","issn":["2045-2322"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","cwts-core","doaj","dongbi-c","doyens","jufo-1","ki-jl-1","medline","norway-1","poland-140","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310319908","host_organization_name":"Nature Portfolio","host_organization_lineage":["https://openalex.org/P4310319908","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Nature Portfolio","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Scientific Reports","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[{"id":"https://openalex.org/G8596239825","display_name":null,"funder_award_id":"PNURSP2026R125","funder_id":"https://openalex.org/F4320322484","funder_display_name":"Princess Nourah Bint Abdulrahman University"}],"funders":[{"id":"https://openalex.org/F4320322484","display_name":"Princess Nourah Bint Abdulrahman University","ror":"https://ror.org/05b0cyh02"},{"id":"https://openalex.org/F4320338243","display_name":"JST-Mirai Program","ror":null}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7225001219.pdf","grobid_xml":"https://content.openalex.org/works/W7225001219.grobid-xml"},"referenced_works_count":11,"referenced_works":["https://openalex.org/W2143991132","https://openalex.org/W2295598076","https://openalex.org/W2789828921","https://openalex.org/W3042496707","https://openalex.org/W3089746993","https://openalex.org/W3111356309","https://openalex.org/W3119543788","https://openalex.org/W3170720134","https://openalex.org/W3206014301","https://openalex.org/W7117734764","https://openalex.org/W7204264879"],"related_works":["https://openalex.org/W7169536911","https://openalex.org/W7213966224","https://openalex.org/W7213407664","https://openalex.org/W7159851349","https://openalex.org/W7214965740","https://openalex.org/W7165845802","https://openalex.org/W4408563962","https://openalex.org/W7220868002","https://openalex.org/W4415765698","https://openalex.org/W7224734546"],"abstract_inverted_index":{"Internet":[0],"of":[1,86,148],"Things":[2],"(IoT)":[3],"intrusion":[4],"detection":[5],"must":[6],"address":[7],"severe":[8],"class":[9,143],"imbalance,":[10],"heterogeneous":[11],"traffic,":[12],"and":[13,46,65,91,126,170],"potential":[14],"distribution":[15],"shift":[16],"while":[17],"providing":[18],"interpretable":[19],"information":[20],"about":[21],"predictive":[22],"uncertainty.":[23],"CAMELOT-IDS":[24],"integrates":[25],"semantic":[26],"local-global":[27],"Transformer":[28],"encoding,":[29],"hierarchical":[30],"supervision,":[31],"Label-Distribution-Aware":[32],"Margin":[33],"loss":[34],"with":[35,81,139],"deferred":[36],"reweighting":[37],"(LDAM-DRW),":[38],"deterministic":[39,74],"Mondrian":[40],"Regularized":[41],"Adaptive":[42],"Prediction":[43],"Sets":[44],"(RAPS),":[45],"stream-oriented":[47],"monitoring.":[48],"On":[49],"the":[50,55,73,95,130,140,157],"reported":[51],"CICIoT2023":[52],"analysis":[53],"subset,":[54],"reference":[56],"model":[57],"achieved":[58],"99.20%":[59],"fine-class":[60,63],"accuracy,":[61],"76.76%":[62],"macro-F1,":[64],"99.79%":[66],"malicious-class":[67],"F1.":[68],"At":[69],"\u03b1":[70],"=":[71],"0.10,":[72],"RAPS":[75],"implementation":[76],"produced":[77,153],"99.95%":[78],"empirical":[79,106],"coverage":[80],"a":[82,111],"mean":[83],"prediction-set":[84],"size":[85],"1.60.":[87],"Because":[88],"probability":[89],"scaling":[90],"RAPS-threshold":[92],"estimation":[93],"reused":[94],"same":[96],"labeled":[97],"calibration":[98],"pool,":[99],"these":[100],"set-valued":[101],"results":[102],"are":[103],"interpreted":[104],"as":[105,110],"diagnostics":[107],"rather":[108],"than":[109],"formal":[112],"split-conformal":[113],"validity":[114],"result.":[115],"Batch":[116],"throughput":[117],"was":[118],"18,141.6":[119],"samples/s":[120,128],"on":[121,129],"an":[122,145],"NVIDIA":[123],"RTX":[124],"3060":[125],"1062.3":[127],"tested":[131],"dual-Xeon":[132],"platform.":[133],"Fine-class":[134],"performance":[135],"remained":[136],"highly":[137],"uneven,":[138],"Uploading":[141],"Attack":[142],"yielding":[144],"F1":[146],"score":[147],"4.96%.":[149],"The":[150],"stream-monitoring":[151],"pathway":[152],"no":[154],"trigger":[155],"during":[156],"held-out":[158],"stream":[159],"replay.":[160],"These":[161],"findings":[162],"support":[163],"further":[164],"provenance-aware":[165],"external":[166],"validation,":[167],"dependence-aware":[168],"calibration,":[169],"controlled":[171],"distribution-shift":[172],"evaluation.":[173]},"counts_by_year":[],"updated_date":"2026-11-04T10:54:05.112534","created_date":"2026-11-01T00:00:00"}