{"id":"https://openalex.org/W7225814618","doi":"https://doi.org/10.21203/rs.3.rs-11204282/v1","title":"Lightweight Anomaly-Based Intrusion Detection for IoT Networks Using Dispersion-Based Majority Class Reduction and Sparse Autoencoder Feature Extraction","display_name":"Lightweight Anomaly-Based Intrusion Detection for IoT Networks Using Dispersion-Based Majority Class Reduction and Sparse Autoencoder Feature Extraction","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225814618","doi":"https://doi.org/10.21203/rs.3.rs-11204282/v1"},"language":"en","primary_location":{"id":"doi:10.21203/rs.3.rs-11204282/v1","doi":"https://doi.org/10.21203/rs.3.rs-11204282/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11204282/v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.21203/rs.3.rs-11204282/v1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5161458780","display_name":"Shrey Sharma","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I164861460","display_name":"Manipal Academy of Higher Education","ror":"https://ror.org/02xzytt36","country_code":"IN","type":"education","lineage":["https://openalex.org/I164861460"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Shrey Sharma","raw_affiliation_strings":["Manipal Academy of Higher Education"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manipal Academy of Higher Education","institution_ids":["https://openalex.org/I164861460"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023030556","display_name":"Vineetha Pais","orcid":"https://orcid.org/0000-0003-3525-1523","observed_orcids":["https://orcid.org/0000-0003-3525-1523"]},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Vineetha Pais","raw_affiliation_strings":["A J Institute of Engineering and Technology"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"A J Institute of Engineering and Technology","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5030599123","display_name":"Balachandra Muniyal","orcid":"https://orcid.org/0000-0002-4839-0082","observed_orcids":["https://orcid.org/0000-0002-4839-0082"]},"institutions":[{"id":"https://openalex.org/I164861460","display_name":"Manipal Academy of Higher Education","ror":"https://ror.org/02xzytt36","country_code":"IN","type":"education","lineage":["https://openalex.org/I164861460"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Balachandra Muniyal","raw_affiliation_strings":["Manipal Academy of Higher Education"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manipal Academy of Higher Education","institution_ids":["https://openalex.org/I164861460"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5161490922","display_name":"Trivikram -","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I164861460","display_name":"Manipal Academy of Higher Education","ror":"https://ror.org/02xzytt36","country_code":"IN","type":"education","lineage":["https://openalex.org/I164861460"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Trivikram -","raw_affiliation_strings":["Manipal Academy of Higher Education"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manipal Academy of Higher Education","institution_ids":["https://openalex.org/I164861460"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9814000129699707,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9814000129699707,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.007300000172108412,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0031999999191612005,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.7317000031471252},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6888999938964844},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6473000049591064},{"id":"https://openalex.org/C197323446","wikidata":"https://www.wikidata.org/wiki/Q331222","display_name":"Oversampling","level":3,"score":0.645799994468689},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.5972999930381775},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.5327000021934509},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5095999836921692},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5026999711990356},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.47699999809265137},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.44530001282691956},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.421999990940094},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4092000126838684},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.40059998631477356},{"id":"https://openalex.org/C2780762811","wikidata":"https://www.wikidata.org/wiki/Q1784941","display_name":"Cosine similarity","level":3,"score":0.396699994802475},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.3603000044822693},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34549999237060547},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.3310999870300293},{"id":"https://openalex.org/C70518039","wikidata":"https://www.wikidata.org/wiki/Q16000077","display_name":"Dimensionality reduction","level":2,"score":0.3111000061035156},{"id":"https://openalex.org/C153668964","wikidata":"https://www.wikidata.org/wiki/Q27636","display_name":"Majority rule","level":2,"score":0.2994999885559082},{"id":"https://openalex.org/C34872919","wikidata":"https://www.wikidata.org/wiki/Q7092302","display_name":"One-class classification","level":3,"score":0.2782000005245209},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.26969999074935913},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.26260000467300415},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.2531999945640564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21203/rs.3.rs-11204282/v1","doi":"https://doi.org/10.21203/rs.3.rs-11204282/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11204282/v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.21203/rs.3.rs-11204282/v1","doi":"https://doi.org/10.21203/rs.3.rs-11204282/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11204282/v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2104167780","https://openalex.org/W2118978333","https://openalex.org/W2122496402","https://openalex.org/W2148143831","https://openalex.org/W2898761242","https://openalex.org/W3197983285","https://openalex.org/W3217648337","https://openalex.org/W4366748065","https://openalex.org/W4381568796","https://openalex.org/W4400424457","https://openalex.org/W4402023995","https://openalex.org/W4402632648","https://openalex.org/W4405631660","https://openalex.org/W4413426292"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1,33,65,188],"Internet":[2],"of":[3,11,105,108,117,150,162,175,240,265,279,291,323,341,352],"Things":[4],"(IoT)":[5],"has":[6,27],"been":[7],"a":[8,30,79,103,118,129,195,236,253,267,298,321,328,339],"common":[9],"target":[10,250],"network-level":[12],"attacks":[13],"due":[14],"to":[15,55,72,127,288],"its":[16,241,342],"rapid":[17],"growth,":[18],"and":[19,42,77,206,212,247,305],"anomaly-based":[20],"intrusion":[21],"detection":[22,52,255,295],"powered":[23],"by":[24,102,113,154,165,285],"deep":[25],"learning":[26,75,89],"emerged":[28],"as":[29],"potential":[31],"defense.":[32],"significant":[34],"class":[35,159,260],"imbalance":[36],"found":[37],"in":[38,62,145,261],"IoT":[39],"traffic":[40],"captures":[41],"the":[43,48,58,114,151,167,184,245,248,258,324,332],"restricted":[44],"processing":[45],"power":[46],"on":[47,234,257,297],"gateway-level":[49],"hardware":[50],"where":[51],"is":[53,90,100,123,191],"expected":[54],"occur,":[56],"are":[57,69,111,181,346],"two":[59,208,289],"main":[60],"challenges":[61],"this":[63],"environment.":[64],"majority-reduction":[66],"balancing":[67,189],"techniques":[68],"still":[70],"limited":[71],"non-IoT,":[73],"non-deep":[74],"settings":[76],"lack":[78],"tractable":[80],"formulation":[81],"at":[82,318,337],"IoT-scale":[83],"candidate-pool":[84],"sizes,":[85],"while":[86,293,327],"autoencoder-based":[87],"feature":[88,131],"almost":[91],"exclusively":[92],"paired":[93],"with":[94,214,348],"synthetic":[95,163,280],"minority":[96,177,259],"oversampling.":[97],"This":[98],"gap":[99],"filled":[101],"collection":[104],"classifier":[106],"heads":[107],"decreasing":[109],"size":[110],"fed":[112],"frozen":[115],"encoder":[116],"sparse":[119],"autoencoder":[120],"(SAE),":[121],"which":[122,138],"trained":[124],"without":[125],"labels":[126],"develop":[128],"compact":[130,329],"representation.":[132],"Dispersion-based":[133],"Majority":[134,202],"Class":[135,203],"Reduction":[136,204],"(DMCR),":[137],"scores":[139],"exactly":[140],"via":[141],"an":[142,155,269],"order-statistics":[143],"identity":[144],"\\((\\mathcal{O}(nd\\log":[146],"n))\\)":[147],"time":[148,284],"instead":[149,161,174,278],"\\((\\mathcal{O}(n^2))\\)":[152],"required":[153],"all-pairs":[156],"reading,":[157],"achieves":[158],"balance":[160],"oversampling":[164,281],"keeping":[166],"most":[168],"mutually":[169],"dissimilar":[170],"real":[171],"majority":[172],"samples":[173],"creating":[176],"ones.":[178],"Four":[179],"configurations":[180],"compared":[182],"using":[183],"BoT-IoT":[185],"(5%)":[186],"dataset.":[187],"comparison":[190],"further":[192,228],"validated":[193],"against":[194,199,207],"classical":[196],"random-undersampling":[197],"baseline,":[198],"Cosine":[200],"Similarity-based":[201],"(CSMCR),":[205],"synthetic-oversampling":[209],"variants,":[210],"ADASYN":[211],"Borderline-SMOTE,":[213],"every":[215],"method,":[216],"DMCR":[217,277],"included,":[218],"evaluated":[219,347],"across":[220],"multiple":[221],"random":[222],"seeds.":[223],"A":[224,310],"separate":[225],"sensitivity":[226],"analysis":[227],"shows":[229],"that":[230,300],"DMCR's":[231],"stability":[232],"depends":[233],"retaining":[235],"sufficiently":[237],"filtered":[238],"subset":[239],"candidate":[242],"pool:":[243],"collapsing":[244],"pool":[246],"retention":[249],"together":[251],"reproduces":[252],"complete":[254],"failure":[256,268],"one":[262,287],"seed":[263],"out":[264],"three,":[266],"aggregate":[270],"F1":[271],"score":[272],"does":[273],"not":[274],"reveal.":[275],"Using":[276],"reduced":[282],"training":[283],"roughly":[286],"orders":[290],"magnitude":[292],"maintaining":[294],"quality":[296,317],"set":[299],"was":[301],"about":[302,338],"116\\((\\times)\\)":[303],"smaller":[304],"contained":[306],"no":[307],"fake":[308],"data.":[309],"deeper,":[311],"batch-normalized":[312],"variant":[313],"restored":[314],"full":[315],"ranking":[316],"less":[319],"than":[320],"fifth":[322],"baseline's":[325,334],"size,":[326],"MLP":[330],"matched":[331],"convolutional":[333],"zero-false-negative":[335],"coverage":[336],"ninth":[340],"parameter":[343],"count.":[344],"Results":[345],"specific":[349],"caution":[350],"because":[351],"BoT-IoT's":[353],"stereotypical,":[354],"lab-generated":[355],"traffic.":[356]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}