{"id":"https://openalex.org/W7225835471","doi":"https://doi.org/10.21203/rs.3.rs-11456417/v1","title":"Explainable Dual Branch Attention Network for Industrial IoT Intrusion Detection","display_name":"Explainable Dual Branch Attention Network for Industrial IoT Intrusion Detection","publication_year":2026,"publication_date":"2026-11-11","ids":{"openalex":"https://openalex.org/W7225835471","doi":"https://doi.org/10.21203/rs.3.rs-11456417/v1"},"language":"en","primary_location":{"id":"doi:10.21203/rs.3.rs-11456417/v1","doi":"https://doi.org/10.21203/rs.3.rs-11456417/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11456417/v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"volume":null,"type":"preprint","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.21203/rs.3.rs-11456417/v1","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5077676352","display_name":"Vanlalruata Hnamte","orcid":"https://orcid.org/0000-0002-3376-7828","observed_orcids":["https://orcid.org/0000-0002-3376-7828"]},"institutions":[{"id":"https://openalex.org/I195459967","display_name":"Mizoram University","ror":"https://ror.org/04b1m3e94","country_code":"IN","type":"education","lineage":["https://openalex.org/I195459967"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Vanlalruata Hnamte","raw_affiliation_strings":["Mizoram University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mizoram University","institution_ids":["https://openalex.org/I195459967"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5119004615","display_name":"Chhakchhuak Laldinsanga","orcid":"https://orcid.org/0009-0000-9595-1594","observed_orcids":["https://orcid.org/0009-0000-9595-1594"]},"institutions":[{"id":"https://openalex.org/I195459967","display_name":"Mizoram University","ror":"https://ror.org/04b1m3e94","country_code":"IN","type":"education","lineage":["https://openalex.org/I195459967"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Chhakchhuak Laldinsanga","raw_affiliation_strings":["Mizoram University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mizoram University","institution_ids":["https://openalex.org/I195459967"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5161487122","display_name":"Chhakchhuak Lalduhawma","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I195459967","display_name":"Mizoram University","ror":"https://ror.org/04b1m3e94","country_code":"IN","type":"education","lineage":["https://openalex.org/I195459967"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Chhakchhuak Lalduhawma","raw_affiliation_strings":["Mizoram University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mizoram University","institution_ids":["https://openalex.org/I195459967"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5066216654","display_name":"Jamal Hussain","orcid":"https://orcid.org/0000-0001-5553-3654","observed_orcids":["https://orcid.org/0000-0001-5553-3654"]},"institutions":[{"id":"https://openalex.org/I195459967","display_name":"Mizoram University","ror":"https://ror.org/04b1m3e94","country_code":"IN","type":"education","lineage":["https://openalex.org/I195459967"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Jamal Hussain","raw_affiliation_strings":["Mizoram University"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Mizoram University","institution_ids":["https://openalex.org/I195459967"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5077676352"],"corresponding_institution_ids":["https://openalex.org/I195459967"],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0012000000569969416,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7782999873161316},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6394000053405762},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5335999727249146},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5099999904632568},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.49480000138282776},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.48840001225471497},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.42579999566078186},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.41819998621940613},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4050000011920929},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3887999951839447},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3813999891281128},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.3635999858379364},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3529999852180481},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3440000116825104},{"id":"https://openalex.org/C98045186","wikidata":"https://www.wikidata.org/wiki/Q205663","display_name":"Process (computing)","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C2781018962","wikidata":"https://www.wikidata.org/wiki/Q5164884","display_name":"Container (type theory)","level":2,"score":0.323199987411499},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.32190001010894775},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.2930999994277954},{"id":"https://openalex.org/C35341882","wikidata":"https://www.wikidata.org/wiki/Q8795","display_name":"Internet Protocol","level":3,"score":0.29100000858306885},{"id":"https://openalex.org/C2779190172","wikidata":"https://www.wikidata.org/wiki/Q4913888","display_name":"Binary data","level":3,"score":0.28519999980926514},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.28439998626708984},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.2816999852657318},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.2524000108242035}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.21203/rs.3.rs-11456417/v1","doi":"https://doi.org/10.21203/rs.3.rs-11456417/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11456417/v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"}],"best_oa_location":{"id":"doi:10.21203/rs.3.rs-11456417/v1","doi":"https://doi.org/10.21203/rs.3.rs-11456417/v1","is_oa":true,"landing_page_url":"https://doi.org/10.21203/rs.3.rs-11456417/v1","pdf_url":null,"source":{"id":"https://openalex.org/S4306525896","display_name":"Research Square","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Research Square","raw_type":"posted-content"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"The":[1],"rapid":[2],"expansion":[3],"of":[4,8,217,233],"the":[5,13,72],"Industrial":[6,163],"Internet":[7],"Things":[9],"(IIoT)":[10],"has":[11],"broadened":[12],"cyberattack":[14],"surface":[15],"across":[16,81,140],"critical":[17],"infrastructure.":[18],"Conventional":[19],"intrusion":[20,60],"detection":[21,148],"systems":[22],"often":[23],"process":[24],"isolated":[25],"flow":[26],"metrics":[27],"without":[28],"capturing":[29],"local":[30],"cross-feature":[31,104],"correlations":[32,70],"or":[33,90],"sequential":[34,79],"feature":[35,74,85],"dynamics,":[36],"while":[37,76],"operating":[38],"as":[39],"opaque":[40],"black":[41],"boxes.":[42],"To":[43],"address":[44],"these":[45],"challenges,":[46],"we":[47],"propose":[48],"CP-XNet,":[49],"a":[50,96,107,121,243],"lightweight":[51],"dual-branch":[52],"deep":[53],"learning":[54],"framework":[55],"tailored":[56],"for":[57,102,113],"edge-deployable":[58],"cyber-physical":[59,143],"detection.":[61],"Under":[62],"this":[63],"architectural":[64],"framing,":[65],"spatial":[66],"denotes":[67],"localised":[68,103],"cross-attribute":[69],"along":[71],"engineered":[73],"axis,":[75],"temporal":[77],"represents":[78],"dependencies":[80],"ordered":[82],"intra-flow":[83],"functional":[84],"segments":[86],"rather":[87],"than":[88],"multi-packet":[89],"inter-flow":[91],"time":[92],"series.":[93],"CP-XNet":[94,153],"couples":[95],"feature-axis":[97],"1D-Convolutional":[98],"Neural":[99],"Network":[100],"(CNN)":[101],"extraction":[105],"with":[106],"Bidirectional":[108],"Gated":[109],"Recurrent":[110],"Unit":[111],"(BiGRU)":[112],"structured":[114],"feature-segment":[115],"sequence":[116],"modelling,":[117],"dynamically":[118],"fused":[119],"via":[120],"compact":[122],"two-token":[123],"Multi-Head":[124],"Self-Attention":[125],"(MHSA)":[126],"mechanism.":[127],"Dual-tier":[128],"visual":[129],"explainability":[130],"(SHAP":[131],"and":[132,149,157,167,175,178,200,221],"LIME)":[133],"provides":[134],"protocol-level":[135],"transparent":[136],"decision":[137],"support.":[138],"Evaluated":[139],"three":[141],"contemporary":[142],"benchmark":[144],"testbeds":[145],"under":[146,242],"binary":[147,156,166,177],"multi-class":[150,159,169,180],"threat":[151],"attribution,":[152],"achieves:":[154],"99.49%":[155],"94.39%":[158],"accuracy":[160,170,181],"on":[161,171,182,192,207,236,240],"ToN-IoT":[162],"Telemetry;":[164],"99.97%":[165],"99.84%":[168],"InSDN":[172],"Software-Defined":[173],"Networking;":[174],"95.75%":[176],"93.65%":[179],"CIC-IIoT-2025":[183],"Multi-Device":[184],"traffic.":[185],"Across":[186],"all":[187],"benchmarks,":[188],"batch-amortised":[189],"forward-pass":[190],"latency":[191],"GPU":[193,220,237],"hardware":[194],"remains":[195],"strictly":[196],"bounded":[197],"between":[198],"0.0077":[199],"0.0128":[201],"ms":[202,206,219,223],"per":[203],"sample":[204],"(0.0710":[205],"CPU":[208],"at":[209],"batch":[210],"size":[211],"B=256,":[212],"alongside":[213],"streaming":[214],"single-sample":[215],"latencies":[216],"0.0820":[218],"0.4100":[222],"CPU),":[224],"translating":[225],"to":[226],"an":[227],"estimated":[228],"nominal":[229,244],"power-envelope":[230],"energy":[231],"proxy":[232],"0.077-0.128":[234],"mJ":[235,239],"(0.710":[238],"CPU)":[241],"10-W":[245],"edge":[246,258],"envelope.":[247],"A":[248],"prospective":[249],"IEC":[250],"61850":[251],"digital":[252],"substation":[253],"deployment":[254],"architecture":[255],"illustrates":[256],"passive":[257],"integration":[259],"boundaries.":[260]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-11-12T00:00:00"}