{"id":"https://openalex.org/W7225619129","doi":"https://doi.org/10.3390/s26217079","title":"A Data-Adaptive Explainable Intrusion Detection Framework for IoMT Using Sampling Strategy Search and Ensemble Learning","display_name":"A Data-Adaptive Explainable Intrusion Detection Framework for IoMT Using Sampling Strategy Search and Ensemble Learning","publication_year":2026,"publication_date":"2026-11-09","ids":{"openalex":"https://openalex.org/W7225619129","doi":"https://doi.org/10.3390/s26217079"},"language":"en","primary_location":{"id":"doi:10.3390/s26217079","doi":"https://doi.org/10.3390/s26217079","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s26217079","pdf_url":null,"source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","medline","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.3390/s26217079","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5082706838","display_name":"G\u00fczin Uluta\u015f","orcid":"https://orcid.org/0000-0001-5729-6613","observed_orcids":["https://orcid.org/0000-0001-5729-6613"]},"institutions":[{"id":"https://openalex.org/I162720556","display_name":"Karadeniz Technical University","ror":"https://ror.org/03z8fyr40","country_code":"TR","type":"education","lineage":["https://openalex.org/I162720556"]}],"countries":["TR"],"is_corresponding":true,"raw_author_name":"Guzin Ulutas","raw_affiliation_strings":["Department of Computer Engineering, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye"],"raw_orcid":"https://orcid.org/0000-0001-5729-6613","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye","institution_ids":["https://openalex.org/I162720556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5043263878","display_name":"Metehan Bulut","orcid":"https://orcid.org/0009-0002-9926-207X","observed_orcids":["https://orcid.org/0009-0002-9926-207X"]},"institutions":[{"id":"https://openalex.org/I162720556","display_name":"Karadeniz Technical University","ror":"https://ror.org/03z8fyr40","country_code":"TR","type":"education","lineage":["https://openalex.org/I162720556"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Metehan Bulut","raw_affiliation_strings":["Department of Computer Engineering, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye"],"raw_orcid":"https://orcid.org/0009-0002-9926-207X","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye","institution_ids":["https://openalex.org/I162720556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036447788","display_name":"Beste \u00dcst\u00fcbio\u011flu","orcid":"https://orcid.org/0000-0001-7451-0634","observed_orcids":["https://orcid.org/0000-0001-7451-0634"]},"institutions":[{"id":"https://openalex.org/I162720556","display_name":"Karadeniz Technical University","ror":"https://ror.org/03z8fyr40","country_code":"TR","type":"education","lineage":["https://openalex.org/I162720556"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Beste Ustubioglu","raw_affiliation_strings":["Department of Computer Engineering, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye"],"raw_orcid":"https://orcid.org/0000-0001-7451-0634","affiliations":[{"raw_affiliation_string":"Department of Computer Engineering, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye","institution_ids":["https://openalex.org/I162720556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060955164","display_name":"I\u015f\u0131lay Bozkurt","orcid":"https://orcid.org/0000-0001-6941-9721","observed_orcids":["https://orcid.org/0000-0001-6941-9721"]},"institutions":[{"id":"https://openalex.org/I162720556","display_name":"Karadeniz Technical University","ror":"https://ror.org/03z8fyr40","country_code":"TR","type":"education","lineage":["https://openalex.org/I162720556"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Isilay Bozkurt","raw_affiliation_strings":["Department of Software Development, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye"],"raw_orcid":"https://orcid.org/0000-0001-6941-9721","affiliations":[{"raw_affiliation_string":"Department of Software Development, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye","institution_ids":["https://openalex.org/I162720556"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025854218","display_name":"Mustafa Hakan Bozkurt","orcid":"https://orcid.org/0000-0002-7734-0295","observed_orcids":["https://orcid.org/0000-0002-7734-0295"]},"institutions":[{"id":"https://openalex.org/I162720556","display_name":"Karadeniz Technical University","ror":"https://ror.org/03z8fyr40","country_code":"TR","type":"education","lineage":["https://openalex.org/I162720556"]}],"countries":["TR"],"is_corresponding":false,"raw_author_name":"Mustafa Hakan Bozkurt","raw_affiliation_strings":["Department of Artificial Intelligence Engineering, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye"],"raw_orcid":"https://orcid.org/0000-0002-7734-0295","affiliations":[{"raw_affiliation_string":"Department of Artificial Intelligence Engineering, Karadeniz Technical University, 61080 Trabzon, T\u00fcrkiye","institution_ids":["https://openalex.org/I162720556"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085854897","display_name":"Dasara Shullani","orcid":"https://orcid.org/0000-0003-2753-366X","observed_orcids":["https://orcid.org/0000-0003-2753-366X"]},"institutions":[{"id":"https://openalex.org/I45084792","display_name":"University of Florence","ror":"https://ror.org/04jr1s763","country_code":"IT","type":"education","lineage":["https://openalex.org/I45084792"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Dasara Shullani","raw_affiliation_strings":["Department of Information Engineering, University of Florence, 50139 Florence, Italy"],"raw_orcid":"https://orcid.org/0000-0003-2753-366X","affiliations":[{"raw_affiliation_string":"Department of Information Engineering, University of Florence, 50139 Florence, Italy","institution_ids":["https://openalex.org/I45084792"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5082706838"],"corresponding_institution_ids":["https://openalex.org/I162720556"],"apc_list":{"value":2600,"currency":"CHF","value_usd":3137},"apc_paid":{"value":2600,"currency":"CHF","value_usd":3137},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"26","issue":"21","first_page":"7079","last_page":"7079"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13038","display_name":"Internet of Things and AI","score":0.010599999688565731,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/internet-of-medical-things","display_name":"Internet of Medical Things","score":0.9179999828338623},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.984000027179718},{"id":"https://openalex.org/keywords/explainable-ai","display_name":"explainable AI","score":0.8040000200271606},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"ensemble learning","score":0.9150000214576721},{"id":"https://openalex.org/keywords/shap","display_name":"SHAP","score":0.8389999866485596},{"id":"https://openalex.org/keywords/lime","display_name":"lime","score":0.9980000257492065},{"id":"https://openalex.org/keywords/medical-device-security","display_name":"medical device security","score":0.7620000243186951},{"id":"https://openalex.org/keywords/healthcare-cybersecurity","display_name":"healthcare cybersecurity","score":0.49000000953674316},{"id":"https://openalex.org/keywords/ciciomt2024","display_name":"CICIoMT2024","score":0.9950000047683716}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7957000136375427},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7796000242233276},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.5929999947547913},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5906000137329102},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5792999863624573},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.5576000213623047},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5162000060081482},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4975000023841858},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47040000557899475},{"id":"https://openalex.org/C182365436","wikidata":"https://www.wikidata.org/wiki/Q50701","display_name":"Variable (mathematics)","level":2,"score":0.4499000012874603},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.438400000333786},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.41929998993873596},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.3716000020503998},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.366100013256073},{"id":"https://openalex.org/C2780428219","wikidata":"https://www.wikidata.org/wiki/Q16952335","display_name":"Cover (algebra)","level":2,"score":0.3456999957561493},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.3147999942302704},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.31450000405311584},{"id":"https://openalex.org/C119898033","wikidata":"https://www.wikidata.org/wiki/Q3433888","display_name":"Ensemble forecasting","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.2897999882698059},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2890999913215637},{"id":"https://openalex.org/C89611455","wikidata":"https://www.wikidata.org/wiki/Q6804646","display_name":"Mechanism (biology)","level":2,"score":0.2816999852657318},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C107327155","wikidata":"https://www.wikidata.org/wiki/Q330268","display_name":"Decision support system","level":2,"score":0.2565000057220459},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2556000053882599},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.25220000743865967}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.3390/s26217079","doi":"https://doi.org/10.3390/s26217079","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s26217079","pdf_url":null,"source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","medline","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.3390/s26217079","doi":"https://doi.org/10.3390/s26217079","is_oa":true,"landing_page_url":"https://doi.org/10.3390/s26217079","pdf_url":null,"source":{"id":"https://openalex.org/S101949793","display_name":"Sensors","issn_l":"1424-8220","issn":["1424-8220"],"is_oa":true,"is_in_doaj":true,"is_core":true,"listed_in":["anvur-scientific","cwts-core","doaj","jufo-1","medline","norway-1","poland-100","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Sensors","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Good health and well-being","score":0.46810001134872437,"id":"https://metadata.un.org/sdg/3"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":50,"referenced_works":["https://openalex.org/W3011185495","https://openalex.org/W3033120446","https://openalex.org/W3200314112","https://openalex.org/W4310835597","https://openalex.org/W4316591601","https://openalex.org/W4379618984","https://openalex.org/W4386070139","https://openalex.org/W4387917942","https://openalex.org/W4390146777","https://openalex.org/W4390670372","https://openalex.org/W4394699061","https://openalex.org/W4399310816","https://openalex.org/W4401359105","https://openalex.org/W4402035331","https://openalex.org/W4402130526","https://openalex.org/W4403391159","https://openalex.org/W4403422123","https://openalex.org/W4404180292","https://openalex.org/W4405030644","https://openalex.org/W4405584328","https://openalex.org/W4405675931","https://openalex.org/W4405957344","https://openalex.org/W4406137943","https://openalex.org/W4407172131","https://openalex.org/W4407784628","https://openalex.org/W4407938121","https://openalex.org/W4408146556","https://openalex.org/W4408841535","https://openalex.org/W4409191127","https://openalex.org/W4409276848","https://openalex.org/W4410192254","https://openalex.org/W4410308958","https://openalex.org/W4410336663","https://openalex.org/W4410351913","https://openalex.org/W4410638761","https://openalex.org/W4410783799","https://openalex.org/W4411235471","https://openalex.org/W4411451813","https://openalex.org/W4411515411","https://openalex.org/W4411626643","https://openalex.org/W4412471001","https://openalex.org/W4412529466","https://openalex.org/W4413003778","https://openalex.org/W4415047124","https://openalex.org/W4416405347","https://openalex.org/W4416406874","https://openalex.org/W7118348423","https://openalex.org/W7118733059","https://openalex.org/W7125473886","https://openalex.org/W7131629941"],"related_works":["https://openalex.org/W7224080429","https://openalex.org/W7214107518","https://openalex.org/W7166666967","https://openalex.org/W4414881642","https://openalex.org/W4411849920","https://openalex.org/W7223203870","https://openalex.org/W7172306218","https://openalex.org/W7169045600","https://openalex.org/W4416748135","https://openalex.org/W7167504994"],"abstract_inverted_index":{"In":[0],"recent":[1],"years,":[2],"the":[3,28,31,42,74,111,125,162,216],"widespread":[4],"adoption":[5],"of":[6,8,34,45,219],"Internet":[7],"Medical":[9],"Things":[10],"(IoMT)":[11],"systems":[12],"in":[13,215],"healthcare":[14,46],"has":[15,40],"provided":[16],"significant":[17],"advantages,":[18],"particularly":[19],"through":[20],"rapid":[21],"decision":[22,127],"support":[23,153],"and":[24,36,54,60,81,123,150,156,189,210,230],"remote":[25],"monitoring.":[26],"At":[27],"same":[29],"time,":[30],"growing":[32],"number":[33],"heterogeneous":[35],"Internet-connected":[37],"medical":[38],"devices":[39],"expanded":[41],"cyberattack":[43],"surface":[44],"infrastructures.":[47],"Resource-constrained":[48],"device":[49],"characteristics,":[50],"variable":[51],"traffic":[52],"patterns,":[53],"evolving":[55],"attack":[56],"types":[57],"make":[58],"fixed":[59,94],"conventional":[61],"security":[62],"mechanisms":[63],"insufficient,":[64],"especially":[65],"for":[66,86],"detecting":[67],"previously":[68],"unseen":[69],"threats.":[70],"This":[71],"study":[72],"proposes":[73],"Dynamic":[75],"Data-Driven":[76],"Pipeline":[77],"(D3P),":[78],"an":[79,106],"adaptable":[80],"explainable":[82],"intrusion":[83,232],"detection":[84,233],"framework":[85,134],"IoMT":[87,236],"environments.":[88],"Rather":[89],"than":[90],"relying":[91],"on":[92,140,161,194],"a":[93,98,116,130,227],"balancing":[95],"strategy":[96],"or":[97],"single":[99],"predetermined":[100],"model":[101],"family,":[102],"D3P":[103,175,225],"automatically":[104],"identifies":[105],"appropriate":[107],"sampling":[108],"strategy,":[109],"selects":[110],"most":[112],"successful":[113],"learners":[114],"from":[115],"candidate":[117],"pool,":[118],"performs":[119],"model-specific":[120],"feature":[121],"selection,":[122],"constructs":[124],"final":[126],"mechanism":[128],"using":[129],"stacking-based":[131],"meta-learner.":[132],"The":[133],"also":[135],"incorporates":[136],"explainability":[137],"components":[138],"based":[139],"SHapley":[141],"Additive":[142],"exPlanations":[143],"(SHAP),":[144],"Local":[145],"Interpretable":[146],"Model-agnostic":[147],"Explanations":[148],"(LIME),":[149],"BorutaSHAP":[151],"to":[152],"both":[154],"global":[155],"local":[157],"interpretation.":[158],"Experimental":[159],"results":[160,222],"test":[163],"sets":[164],"(mean":[165],"\u00b1":[166,178,182,186,191,199,203,207,212],"standard":[167],"deviation":[168],"over":[169],"five":[170],"random":[171],"seeds)":[172],"show":[173],"that":[174,224],"achieves":[176],"0.9701":[177,185],"0.0015":[179,187],"accuracy,":[180,201],"0.9694":[181],"0.0019":[183],"precision,":[184,205],"sensitivity,":[188,209],"0.9697":[190],"0.0014":[192],"F1-score":[193,214],"WUSTL-EHMS-2020,":[195],"while":[196],"reaching":[197],"0.9978":[198,206],"0.0004":[200],"0.9977":[202,211],"0.0005":[204,208,213],"6-class":[217],"scenario":[218],"CICIoMT2024.":[220],"These":[221],"indicate":[223],"provides":[226],"balanced,":[228],"reliable,":[229],"high-performance":[231],"solution":[234],"across":[235],"datasets":[237],"with":[238],"different":[239],"structural":[240],"characteristics.":[241]},"counts_by_year":[],"updated_date":"2026-11-11T12:16:26.678958","created_date":"2026-11-10T00:00:00"}