{"id":"https://openalex.org/W7225328356","doi":"https://doi.org/10.1515/itit-2026-0048","title":"A lightweight system call intrusion detection method for resource-constrained embedded platforms","display_name":"A lightweight system call intrusion detection method for resource-constrained embedded platforms","publication_year":2026,"publication_date":"2026-11-05","ids":{"openalex":"https://openalex.org/W7225328356","doi":"https://doi.org/10.1515/itit-2026-0048"},"language":"en","primary_location":{"id":"doi:10.1515/itit-2026-0048","doi":"https://doi.org/10.1515/itit-2026-0048","is_oa":true,"landing_page_url":"https://doi.org/10.1515/itit-2026-0048","pdf_url":null,"source":{"id":"https://openalex.org/S4210229153","display_name":"it - Information Technology","issn_l":"1611-2776","issn":["1611-2776","2196-7032"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","poland-20","russia-white-list-3","vabb-shw"],"host_organization":"https://openalex.org/P4310319967","host_organization_name":"R. Oldenbourg Verlag","host_organization_lineage":["https://openalex.org/P4310319967"],"host_organization_lineage_names":["R. Oldenbourg Verlag"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"it - Information Technology","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1515/itit-2026-0048","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5160854998","display_name":"Xueting Bai","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4392738159","display_name":"State Grid Shanxi Electric Power Company Electric Power Research Institute","ror":"https://ror.org/05vs9t239","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4392738159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xueting Bai","raw_affiliation_strings":["Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China","institution_ids":["https://openalex.org/I4392738159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160746100","display_name":"Jian Zhao","orcid":null,"observed_orcids":[]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Jian Zhao","raw_affiliation_strings":["Beijing Smartchip Micro-electronics Technology Co., Ltd. , Beijing , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Beijing Smartchip Micro-electronics Technology Co., Ltd. , Beijing , China","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160757129","display_name":"Yinzhang Cheng","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4392738159","display_name":"State Grid Shanxi Electric Power Company Electric Power Research Institute","ror":"https://ror.org/05vs9t239","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4392738159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yinzhang Cheng","raw_affiliation_strings":["Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China","institution_ids":["https://openalex.org/I4392738159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5160977832","display_name":"Dongdong Yang","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4392738159","display_name":"State Grid Shanxi Electric Power Company Electric Power Research Institute","ror":"https://ror.org/05vs9t239","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4392738159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongdong Yang","raw_affiliation_strings":["Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China","institution_ids":["https://openalex.org/I4392738159"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5159032499","display_name":"Zhenyu Lu","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4392738159","display_name":"State Grid Shanxi Electric Power Company Electric Power Research Institute","ror":"https://ror.org/05vs9t239","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4392738159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhenyu Lu","raw_affiliation_strings":["Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China","institution_ids":["https://openalex.org/I4392738159"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5160849504","display_name":"Zhihong Zheng","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4392738159","display_name":"State Grid Shanxi Electric Power Company Electric Power Research Institute","ror":"https://ror.org/05vs9t239","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4392738159"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhihong Zheng","raw_affiliation_strings":["Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Electric Power Research Institute of State Grid Shanxi Electric Power Co., Ltd. , Taiyuan , China","institution_ids":["https://openalex.org/I4392738159"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":0,"currency":"EUR","value_usd":0},"apc_paid":{"value":0,"currency":"EUR","value_usd":0},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9179999828338623,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9179999828338623,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.07530000060796738,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0015999999595806003,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/host-based-intrusion-detection","display_name":"host-based intrusion detection","score":0.8730000257492065},{"id":"https://openalex.org/keywords/resource-constrained-embedded-systems","display_name":"resource-constrained embedded systems","score":0.9480000138282776},{"id":"https://openalex.org/keywords/post-training-quantization","display_name":"post-training quantization","score":0.949999988079071},{"id":"https://openalex.org/keywords/attention-pooling","display_name":"attention pooling","score":0.6499999761581421},{"id":"https://openalex.org/keywords/data-augmentation","display_name":"data augmentation","score":0.593999981880188},{"id":"https://openalex.org/keywords/imbalanced-data-classification","display_name":"imbalanced classification","score":0.5339999794960022}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7202000021934509},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6169000267982483},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.4553999900817871},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.44600000977516174},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.43549999594688416},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4052000045776367},{"id":"https://openalex.org/C28855332","wikidata":"https://www.wikidata.org/wiki/Q198099","display_name":"Quantization (signal processing)","level":2,"score":0.38429999351501465},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.35679998993873596},{"id":"https://openalex.org/C97256817","wikidata":"https://www.wikidata.org/wiki/Q1462316","display_name":"Spurious relationship","level":2,"score":0.34880000352859497},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33959999680519104},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.32839998602867126},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.31470000743865967},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.30140000581741333},{"id":"https://openalex.org/C127162648","wikidata":"https://www.wikidata.org/wiki/Q16858953","display_name":"Channel (broadcasting)","level":2,"score":0.29319998621940613},{"id":"https://openalex.org/C34736171","wikidata":"https://www.wikidata.org/wiki/Q918333","display_name":"Preprocessor","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C9390403","wikidata":"https://www.wikidata.org/wiki/Q3966","display_name":"Computer hardware","level":1,"score":0.2883000075817108},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.2856999933719635},{"id":"https://openalex.org/C113775141","wikidata":"https://www.wikidata.org/wiki/Q428691","display_name":"Computer engineering","level":1,"score":0.28279998898506165},{"id":"https://openalex.org/C2776384992","wikidata":"https://www.wikidata.org/wiki/Q5379353","display_name":"EnodeB","level":4,"score":0.27559998631477356},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.2745000123977661},{"id":"https://openalex.org/C60448319","wikidata":"https://www.wikidata.org/wiki/Q154021","display_name":"Block cipher mode of operation","level":2,"score":0.2676999866962433},{"id":"https://openalex.org/C555944384","wikidata":"https://www.wikidata.org/wiki/Q249","display_name":"Wireless","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C49289754","wikidata":"https://www.wikidata.org/wiki/Q2267081","display_name":"Side channel attack","level":3,"score":0.26660001277923584},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.26420000195503235},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2590000033378601},{"id":"https://openalex.org/C47487241","wikidata":"https://www.wikidata.org/wiki/Q5227230","display_name":"Data access","level":2,"score":0.25589999556541443},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2558000087738037},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.2556000053882599},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2529999911785126}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1515/itit-2026-0048","doi":"https://doi.org/10.1515/itit-2026-0048","is_oa":true,"landing_page_url":"https://doi.org/10.1515/itit-2026-0048","pdf_url":null,"source":{"id":"https://openalex.org/S4210229153","display_name":"it - Information Technology","issn_l":"1611-2776","issn":["1611-2776","2196-7032"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","poland-20","russia-white-list-3","vabb-shw"],"host_organization":"https://openalex.org/P4310319967","host_organization_name":"R. Oldenbourg Verlag","host_organization_lineage":["https://openalex.org/P4310319967"],"host_organization_lineage_names":["R. Oldenbourg Verlag"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"it - Information Technology","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1515/itit-2026-0048","doi":"https://doi.org/10.1515/itit-2026-0048","is_oa":true,"landing_page_url":"https://doi.org/10.1515/itit-2026-0048","pdf_url":null,"source":{"id":"https://openalex.org/S4210229153","display_name":"it - Information Technology","issn_l":"1611-2776","issn":["1611-2776","2196-7032"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","dongbi-c","jufo-1","poland-20","russia-white-list-3","vabb-shw"],"host_organization":"https://openalex.org/P4310319967","host_organization_name":"R. Oldenbourg Verlag","host_organization_lineage":["https://openalex.org/P4310319967"],"host_organization_lineage_names":["R. Oldenbourg Verlag"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"it - Information Technology","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":26,"referenced_works":["https://openalex.org/W3085139254","https://openalex.org/W3134255974","https://openalex.org/W4200629964","https://openalex.org/W4294691140","https://openalex.org/W4306931429","https://openalex.org/W4362554721","https://openalex.org/W4375951735","https://openalex.org/W4379382625","https://openalex.org/W4383751021","https://openalex.org/W4387394709","https://openalex.org/W4389104738","https://openalex.org/W4390969835","https://openalex.org/W4391759599","https://openalex.org/W4391944556","https://openalex.org/W4393373882","https://openalex.org/W4396514616","https://openalex.org/W4396827044","https://openalex.org/W4403182775","https://openalex.org/W4407097682","https://openalex.org/W4408675811","https://openalex.org/W4410229640","https://openalex.org/W4410552424","https://openalex.org/W4415164192","https://openalex.org/W4416259344","https://openalex.org/W7162320716","https://openalex.org/W7166841995"],"related_works":["https://openalex.org/W3057291873","https://openalex.org/W7204449026","https://openalex.org/W2205393348","https://openalex.org/W4388675532","https://openalex.org/W2236821158","https://openalex.org/W2751171893","https://openalex.org/W4401888689","https://openalex.org/W3016664090","https://openalex.org/W7211964161","https://openalex.org/W7020033049"],"abstract_inverted_index":{"Abstract":[0],"System-call-based":[1],"intrusion":[2,23],"detection":[3,10,24,39],"on":[4,40,75,110,135,194],"resource-constrained":[5],"embedded":[6,41],"platforms":[7],"must":[8],"balance":[9],"accuracy,":[11],"deployment":[12],"overhead,":[13],"and":[14,37,57,82,104,131,138,152,167,175,205,217],"online":[15,38],"integration.":[16],"This":[17],"paper":[18],"proposes":[19],"a":[20,28,51,67],"lightweight":[21],"host-based":[22],"method":[25],"that":[26,120],"combines":[27],"CNN-Transformer":[29],"model,":[30],"multidimensional":[31],"robustness":[32],"optimization,":[33],"progressive":[34,86],"model":[35,123,185],"compression,":[36],"hosts.":[42],"Two":[43],"one-dimensional":[44],"convolution":[45],"layers":[46],"extract":[47],"local":[48],"system-call":[49,213],"patterns,":[50],"Transformer":[52],"encoder":[53],"captures":[54],"long-range":[55],"dependencies,":[56],"attention":[58],"pooling":[59],"aggregates":[60],"salient":[61],"evidence":[62],"for":[63,212],"trajectory-level":[64,68],"classification.":[65],"Under":[66],"data-splitting":[69],"protocol,":[70],"controlled":[71],"experiments":[72],"are":[73],"conducted":[74],"data":[76,218],"augmentation,":[77],"R-Drop":[78],"regularization,":[79],"attention/pooling":[80],"mechanisms,":[81],"auxiliary":[83],"objectives.":[84],"A":[85],"compression":[87],"pipeline":[88,211],"is":[89],"then":[90],"applied,":[91],"including":[92],"architecture":[93],"exploration,":[94],"graph-wide":[95],"channel":[96,102,158],"masking":[97],"with":[98,143],"gradient-constrained":[99],"fine-tuning,":[100],"physical":[101,157],"removal,":[103],"module-wise":[105,180],"post-training":[106],"quantization":[107],"(PTQ).":[108],"Experiments":[109],"the":[111,121,136,164,184,198,209],"Australian":[112],"Defence":[113],"Force":[114],"Academy":[115],"Linux":[116,199],"Dataset":[117],"(ADFA-LD)":[118],"show":[119],"combined":[122],"achieves":[124],"F1":[125],"scores":[126],"of":[127,148],"0.941":[128],"\u00b1":[129,133,150,154],"0.013":[130],"0.869":[132],"0.021":[134],"balanced":[137],"imbalanced":[139],"test":[140],"sets,":[141],"respectively,":[142],"false":[144],"positive":[145],"rates":[146],"(FPRs)":[147],"0.085":[149],"0.048":[151],"0.026":[153],"0.009.":[155],"After":[156],"removal":[159],"at":[160],"d":[161],"=":[162],"28,":[163],"parameter":[165],"count":[166],"floating-point":[168],"operations":[169],"(FLOPs)":[170],"decrease":[171],"to":[172,187],"60.76":[173],"k":[174],"108.13":[176],"M,":[177],"respectively.":[178],"Partial":[179],"PTQ":[181],"further":[182],"reduces":[183],"size":[186],"304.36":[188],"KB.":[189],"An":[190],"ARM64":[191],"prototype":[192],"based":[193],"Quick":[195],"Emulator":[196],"(QEMU),":[197],"audit":[200],"daemon":[201],"(auditd),":[202],"Job-Tree":[203],"aggregation,":[204],"sliding-window":[206],"inference":[207],"validates":[208],"end-to-end":[210],"collection,":[214],"inference,":[215],"alerting,":[216],"upload.":[219]},"counts_by_year":[],"updated_date":"2026-11-07T11:25:07.637180","created_date":"2026-11-06T00:00:00"}