{"id":"https://openalex.org/W7225177987","doi":"https://doi.org/10.1007/s44196-026-01669-2","title":"CAMRA: Cross-Architecture Multimodal Reinforcement Learning with Federated Adaptation for IoT Malware Detection and Classification","display_name":"CAMRA: Cross-Architecture Multimodal Reinforcement Learning with Federated Adaptation for IoT Malware Detection and Classification","publication_year":2026,"publication_date":"2026-11-03","ids":{"openalex":"https://openalex.org/W7225177987","doi":"https://doi.org/10.1007/s44196-026-01669-2"},"language":"en","primary_location":{"id":"doi:10.1007/s44196-026-01669-2","doi":"https://doi.org/10.1007/s44196-026-01669-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44196-026-01669-2","pdf_url":null,"source":{"id":"https://openalex.org/S190680769","display_name":"International Journal of Computational Intelligence Systems","issn_l":"1875-6883","issn":["1875-6883","1875-6891"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-70","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computational Intelligence Systems","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1007/s44196-026-01669-2","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160524359","display_name":"Advait Gourkhede","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I162030827","display_name":"Thapar Institute of Engineering & Technology","ror":"https://ror.org/00wdq3744","country_code":"IN","type":"education","lineage":["https://openalex.org/I162030827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Advait Gourkhede","raw_affiliation_strings":["Department of Computer Science and Engineering, Thapar Institute of Engineering and Technology, Patiala, 147004, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Thapar Institute of Engineering and Technology, Patiala, 147004, India","institution_ids":["https://openalex.org/I162030827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160461412","display_name":"Ashmit Cajla","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I162030827","display_name":"Thapar Institute of Engineering & Technology","ror":"https://ror.org/00wdq3744","country_code":"IN","type":"education","lineage":["https://openalex.org/I162030827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Ashmit Cajla","raw_affiliation_strings":["Department of Electronics and Communication Engineering, Thapar Institute of Engineering and Technology, Patiala, 147004, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Electronics and Communication Engineering, Thapar Institute of Engineering and Technology, Patiala, 147004, India","institution_ids":["https://openalex.org/I162030827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5028873992","display_name":"Gurpal Singh Chhabra","orcid":"https://orcid.org/0000-0001-5306-4348","observed_orcids":["https://orcid.org/0000-0001-5306-4348"]},"institutions":[{"id":"https://openalex.org/I162030827","display_name":"Thapar Institute of Engineering & Technology","ror":"https://ror.org/00wdq3744","country_code":"IN","type":"education","lineage":["https://openalex.org/I162030827"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Gurpal Singh Chhabra","raw_affiliation_strings":["Department of Computer Science and Engineering, Thapar Institute of Engineering and Technology, Patiala, 147004, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Thapar Institute of Engineering and Technology, Patiala, 147004, India","institution_ids":["https://openalex.org/I162030827"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082884572","display_name":"Sandeep Verma","orcid":"https://orcid.org/0000-0001-7335-8116","observed_orcids":["https://orcid.org/0000-0001-7335-8116"]},"institutions":[{"id":"https://openalex.org/I162030827","display_name":"Thapar Institute of Engineering & Technology","ror":"https://ror.org/00wdq3744","country_code":"IN","type":"education","lineage":["https://openalex.org/I162030827"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Sandeep Verma","raw_affiliation_strings":["Department of Computer Science and Engineering, Thapar Institute of Engineering and Technology, Patiala, 147004, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Thapar Institute of Engineering and Technology, Patiala, 147004, India","institution_ids":["https://openalex.org/I162030827"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5090119188","display_name":"Byomakesh Mahapatra","orcid":"https://orcid.org/0000-0002-9126-1729","observed_orcids":["https://orcid.org/0000-0002-9126-1729"]},"institutions":[{"id":"https://openalex.org/I164861460","display_name":"Manipal Academy of Higher Education","ror":"https://ror.org/02xzytt36","country_code":"IN","type":"education","lineage":["https://openalex.org/I164861460"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Byomakesh Mahapatra","raw_affiliation_strings":["Manipal Institute of Technology, Manipal Academy of Higher Education, Manipal, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manipal Institute of Technology, Manipal Academy of Higher Education, Manipal, India","institution_ids":["https://openalex.org/I164861460"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5082884572","https://openalex.org/A5090119188"],"corresponding_institution_ids":["https://openalex.org/I162030827","https://openalex.org/I164861460"],"apc_list":{"value":2490,"currency":"USD","value_usd":2490},"apc_paid":{"value":2490,"currency":"USD","value_usd":2490},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.91364847,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1712","display_name":"Software"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.00019999999494757503,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/iot-malware-detection","display_name":"IoT malware detection","score":0.9900000095367432},{"id":"https://openalex.org/keywords/malware-classification","display_name":"malware classification","score":0.9800000190734863},{"id":"https://openalex.org/keywords/multimodal-fusion","display_name":"multimodal fusion","score":0.847000002861023},{"id":"https://openalex.org/keywords/deep-reinforcement-learning","display_name":"deep reinforcement learning","score":0.8899999856948853},{"id":"https://openalex.org/keywords/federated-learning","display_name":"federated learning","score":0.9919999837875366},{"id":"https://openalex.org/keywords/cross-modal-attention","display_name":"cross-modal attention","score":0.8209999799728394},{"id":"https://openalex.org/keywords/pcap","display_name":"PCAP","score":0.4350000023841858},{"id":"https://openalex.org/keywords/system-call-analysis","display_name":"system call analysis","score":0.5090000033378601},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.9850000143051147},{"id":"https://openalex.org/keywords/loss-weighting","display_name":"loss weighting","score":0.7289999723434448}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8738999962806702},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8715000152587891},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.6026999950408936},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5472999811172485},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.531499981880188},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5217999815940857},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.520799994468689},{"id":"https://openalex.org/C203479927","wikidata":"https://www.wikidata.org/wiki/Q5165939","display_name":"Controller (irrigation)","level":2,"score":0.43950000405311584},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.40689998865127563},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.38850000500679016},{"id":"https://openalex.org/C2780226545","wikidata":"https://www.wikidata.org/wiki/Q6888030","display_name":"Modality (human\u2013computer interaction)","level":2,"score":0.36309999227523804},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.3314000070095062},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.328900009393692},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.3278000056743622},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.3138999938964844},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.29260000586509705},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.2870999872684479},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.28130000829696655},{"id":"https://openalex.org/C14036430","wikidata":"https://www.wikidata.org/wiki/Q3736076","display_name":"Function (biology)","level":2,"score":0.2766999900341034},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2750999927520752},{"id":"https://openalex.org/C170723468","wikidata":"https://www.wikidata.org/wiki/Q182933","display_name":"x86","level":3,"score":0.273499995470047},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.2685999870300293},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.257099986076355},{"id":"https://openalex.org/C77967617","wikidata":"https://www.wikidata.org/wiki/Q4677561","display_name":"Active learning (machine learning)","level":2,"score":0.2533999979496002}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s44196-026-01669-2","doi":"https://doi.org/10.1007/s44196-026-01669-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44196-026-01669-2","pdf_url":null,"source":{"id":"https://openalex.org/S190680769","display_name":"International Journal of Computational Intelligence Systems","issn_l":"1875-6883","issn":["1875-6883","1875-6891"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-70","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computational Intelligence Systems","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s44196-026-01669-2","doi":"https://doi.org/10.1007/s44196-026-01669-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44196-026-01669-2","pdf_url":null,"source":{"id":"https://openalex.org/S190680769","display_name":"International Journal of Computational Intelligence Systems","issn_l":"1875-6883","issn":["1875-6883","1875-6891"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","ki-jl-1","norway-1","oarl","poland-70","russia-white-list-2","vabb-shw"],"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computational Intelligence Systems","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4387694579","https://openalex.org/W3048726132","https://openalex.org/W7204762879","https://openalex.org/W4313119132","https://openalex.org/W7222377190","https://openalex.org/W4292387506","https://openalex.org/W7212194766","https://openalex.org/W4410886678","https://openalex.org/W3172909833","https://openalex.org/W4281659734"],"abstract_inverted_index":{"Abstract":[0],"The":[1],"domain":[2],"of":[3,5,155,199],"Internet":[4],"Things":[6],"(IoT)":[7],"has":[8],"been":[9],"rapidly":[10],"developing,":[11],"consequently":[12],"expanding":[13],"the":[14,91,109,120,134,163,187,192,196,202],"attack":[15],"surface":[16],"for":[17,34,50],"malware":[18,36,63,73,215,223],"that":[19,78,186],"exploits":[20],"vulnerabilities":[21],"across":[22,108,138],"various":[23],"hardware":[24],"architectures":[25,218],"and":[26,38,61,75,86,100,113,130,162,177,181,191,219],"evades":[27],"conventional":[28],"static":[29],"detection":[30,37,74],"techniques.":[31],"Past":[32],"frameworks":[33],"IoT":[35],"classification":[39,76],"often":[40],"rely":[41],"on":[42,206,238],"a":[43,51,71,153],"single":[44],"data":[45,103,145],"modality":[46],"or":[47],"are":[48,195],"designed":[49],"specific":[52],"device":[53],"architecture,":[54],"which":[55],"limits":[56],"their":[57,143],"ability":[58],"to":[59,126,235],"detect":[60],"classify":[62],"in":[64],"heterogeneous":[65],"environments.":[66],"This":[67],"paper":[68],"proposes":[69],"CAMRA,":[70],"cross-architecture":[72],"framework":[77],"combines":[79],"multimodal":[80],"data,":[81],"Deep":[82],"Reinforcement":[83],"Learning":[84,88],"(DRL),":[85],"Federated":[87],"(FL).":[89],"Using":[90],"CIC-YNU-IoT-MAL-26":[92],"dataset,":[93],"CAMRA":[94,151],"fuses":[95],"network-level":[96],"(PCAP),":[97],"hardware-level":[98],"(SAR),":[99],"system-level":[101],"(STRACE)":[102],"streams":[104],"through":[105],"cross-modal":[106],"attention":[107],"ARM,":[110],"MIPS,":[111],"MIPSEL,":[112],"x86":[114],"architectures.":[115],"A":[116],"DRL":[117,203],"controller":[118,204],"adapts":[119,133],"per-class":[121],"loss":[122,193],"weights":[123,190],"during":[124],"training":[125],"address":[127],"class":[128,189,210],"imbalance,":[129],"federated":[131,164],"learning":[132],"centrally":[135],"trained":[136],"model":[137,165,176],"architecture-specific":[139],"clients":[140],"while":[141,229],"keeping":[142],"raw":[144],"local.":[146],"Over":[147],"ten":[148],"random":[149],"seeds,":[150],"achieves":[152,166],"Macro-F1":[154],"$$0.752":[156],"\\pm":[157,168],"0.012$$":[158],"(accuracy":[159,170],"$$98.4\\%$$":[160],"),":[161,172],"$$0.741":[167],"0.008$$":[169],"$$98.6\\%$$":[171],"outperforming":[173],"every":[174],"single-modality":[175],"standard":[178],"baseline.":[179],"Ablation":[180],"paired":[182],"statistical":[183],"tests":[184],"show":[185],"frequency-based":[188],"function":[194],"main":[197],"drivers":[198],"performance,":[200],"with":[201,208],"performing":[205],"par":[207],"fixed":[209],"weighting.":[211],"In":[212],"holdout":[213],"experiments,":[214],"from":[216,220],"unseen":[217,222,231],"an":[221,230],"family":[224],"is":[225],"detected":[226],"as":[227],"malicious,":[228],"ARM":[232],"architecture":[233],"leads":[234],"false":[236],"alarms":[237],"benign":[239],"data.":[240]},"counts_by_year":[],"updated_date":"2026-11-05T12:25:35.769452","created_date":"2026-11-04T00:00:00"}