{"id":"https://openalex.org/W3216442403","doi":"https://doi.org/10.1007/978-3-031-08147-7_13","title":"A Comparative Analysis of Machine Learning Techniques for IoT Intrusion Detection","display_name":"A Comparative Analysis of Machine Learning Techniques for IoT Intrusion Detection","publication_year":2022,"publication_date":"2022-01-01","ids":{"openalex":"https://openalex.org/W3216442403","doi":"https://doi.org/10.1007/978-3-031-08147-7_13","mag":"3216442403"},"language":"en","primary_location":{"id":"doi:10.1007/978-3-031-08147-7_13","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-08147-7_13","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-08147-7_13.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"type":"book-chapter","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-08147-7_13.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5000190815","display_name":"Jo\u00e3o Vitorino","orcid":"https://orcid.org/0000-0002-4968-3653"},"institutions":[{"id":"https://openalex.org/I83863532","display_name":"Polytechnic Institute of Porto","ror":"https://ror.org/04988re48","country_code":"PT","type":"education","lineage":["https://openalex.org/I83863532"]}],"countries":["PT"],"is_corresponding":true,"raw_author_name":"Jo\u00e3o Vitorino","raw_affiliation_strings":["Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal"],"raw_orcid":"https://orcid.org/0000-0002-4968-3653","affiliations":[{"raw_affiliation_string":"Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal","institution_ids":["https://openalex.org/I83863532"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5050021219","display_name":"Rui Andrade","orcid":"https://orcid.org/0000-0003-2356-3706"},"institutions":[{"id":"https://openalex.org/I83863532","display_name":"Polytechnic Institute of Porto","ror":"https://ror.org/04988re48","country_code":"PT","type":"education","lineage":["https://openalex.org/I83863532"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Rui Andrade","raw_affiliation_strings":["Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal"],"raw_orcid":"https://orcid.org/0000-0003-2356-3706","affiliations":[{"raw_affiliation_string":"Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal","institution_ids":["https://openalex.org/I83863532"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5005516592","display_name":"Isabel Pra\u00e7a","orcid":"https://orcid.org/0000-0002-2519-9859"},"institutions":[{"id":"https://openalex.org/I83863532","display_name":"Polytechnic Institute of Porto","ror":"https://ror.org/04988re48","country_code":"PT","type":"education","lineage":["https://openalex.org/I83863532"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Isabel Pra\u00e7a","raw_affiliation_strings":["Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal"],"raw_orcid":"https://orcid.org/0000-0002-2519-9859","affiliations":[{"raw_affiliation_string":"Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal","institution_ids":["https://openalex.org/I83863532"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068230356","display_name":"Orlando Sousa","orcid":"https://orcid.org/0000-0003-0779-3480"},"institutions":[{"id":"https://openalex.org/I83863532","display_name":"Polytechnic Institute of Porto","ror":"https://ror.org/04988re48","country_code":"PT","type":"education","lineage":["https://openalex.org/I83863532"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Orlando Sousa","raw_affiliation_strings":["Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal"],"raw_orcid":"https://orcid.org/0000-0003-0779-3480","affiliations":[{"raw_affiliation_string":"Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal","institution_ids":["https://openalex.org/I83863532"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5004608532","display_name":"Eva Maia","orcid":"https://orcid.org/0000-0002-8075-531X"},"institutions":[{"id":"https://openalex.org/I83863532","display_name":"Polytechnic Institute of Porto","ror":"https://ror.org/04988re48","country_code":"PT","type":"education","lineage":["https://openalex.org/I83863532"]}],"countries":["PT"],"is_corresponding":false,"raw_author_name":"Eva Maia","raw_affiliation_strings":["Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal"],"raw_orcid":"https://orcid.org/0000-0002-8075-531X","affiliations":[{"raw_affiliation_string":"Research Group on Intelligent Engineering and Computing for Advanced Innovation and Development (GECAD), School of Engineering, Polytechnic of Porto (ISEP/IPP), 4249-015, Porto, Portugal","institution_ids":["https://openalex.org/I83863532"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5000190815"],"corresponding_institution_ids":["https://openalex.org/I83863532"],"apc_list":{"value":5000,"currency":"EUR","value_usd":5392},"apc_paid":{"value":5000,"currency":"EUR","value_usd":5392},"fwci":25.8185,"has_fulltext":true,"cited_by_count":49,"citation_normalized_percentile":{"value":0.99742871,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":96,"max":100},"biblio":{"volume":null,"issue":null,"first_page":"191","last_page":"207"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9990000128746033,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8588519096374512},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7322533130645752},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7151004076004028},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.6909141540527344},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.6616195440292358},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.6220611929893494},{"id":"https://openalex.org/keywords/reinforcement-learning","display_name":"Reinforcement learning","score":0.572060763835907},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.5065628290176392},{"id":"https://openalex.org/keywords/gradient-boosting","display_name":"Gradient boosting","score":0.4902708828449249},{"id":"https://openalex.org/keywords/extreme-learning-machine","display_name":"Extreme learning machine","score":0.45002371072769165},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.44497621059417725},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.35115158557891846},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.2407761812210083},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.20142409205436707},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.13053372502326965}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8588519096374512},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7322533130645752},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7151004076004028},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6909141540527344},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.6616195440292358},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6220611929893494},{"id":"https://openalex.org/C97541855","wikidata":"https://www.wikidata.org/wiki/Q830687","display_name":"Reinforcement learning","level":2,"score":0.572060763835907},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.5065628290176392},{"id":"https://openalex.org/C70153297","wikidata":"https://www.wikidata.org/wiki/Q5591907","display_name":"Gradient boosting","level":3,"score":0.4902708828449249},{"id":"https://openalex.org/C2780150128","wikidata":"https://www.wikidata.org/wiki/Q21948731","display_name":"Extreme learning machine","level":3,"score":0.45002371072769165},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.44497621059417725},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35115158557891846},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2407761812210083},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.20142409205436707},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.13053372502326965},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/978-3-031-08147-7_13","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-08147-7_13","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-08147-7_13.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},{"id":"pmh:oai:arXiv.org:2111.13149","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2111.13149","pdf_url":"https://arxiv.org/pdf/2111.13149","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"doi:10.1007/978-3-031-08147-7_13","is_oa":true,"landing_page_url":"https://doi.org/10.1007/978-3-031-08147-7_13","pdf_url":"https://link.springer.com/content/pdf/10.1007/978-3-031-08147-7_13.pdf","source":{"id":"https://openalex.org/S106296714","display_name":"Lecture notes in computer science","issn_l":"0302-9743","issn":["0302-9743","1611-3349"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"book series"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Lecture Notes in Computer Science","raw_type":"book-chapter"},"sustainable_development_goals":[{"score":0.49000000953674316,"id":"https://metadata.un.org/sdg/15","display_name":"Life in Land"}],"awards":[{"id":"https://openalex.org/G405747289","display_name":null,"funder_award_id":"871967","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W3216442403.pdf","grobid_xml":"https://content.openalex.org/works/W3216442403.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W2008056655","https://openalex.org/W2144182447","https://openalex.org/W2155968351","https://openalex.org/W2295598076","https://openalex.org/W2296719434","https://openalex.org/W2746553466","https://openalex.org/W2768348081","https://openalex.org/W2811266402","https://openalex.org/W2911505293","https://openalex.org/W2921920205","https://openalex.org/W2929049293","https://openalex.org/W2940895343","https://openalex.org/W2958285686","https://openalex.org/W2969468102","https://openalex.org/W2973862992","https://openalex.org/W2980185226","https://openalex.org/W2980576170","https://openalex.org/W2982472211","https://openalex.org/W2986455874","https://openalex.org/W2991140181","https://openalex.org/W3003685271","https://openalex.org/W3015246755","https://openalex.org/W3021575588","https://openalex.org/W3021804235","https://openalex.org/W3092021803","https://openalex.org/W3099793430","https://openalex.org/W3102476541","https://openalex.org/W3209498073","https://openalex.org/W4254182148"],"related_works":["https://openalex.org/W2067443264","https://openalex.org/W31566076","https://openalex.org/W4297902562","https://openalex.org/W2741186499","https://openalex.org/W2097492617","https://openalex.org/W2804652951","https://openalex.org/W2968645206","https://openalex.org/W2753240997","https://openalex.org/W2556335056","https://openalex.org/W2002678693"],"abstract_inverted_index":{"Abstract":[0],"The":[1,60,105],"digital":[2],"transformation":[3],"faces":[4],"tremendous":[5],"security":[6],"challenges.":[7],"In":[8],"particular,":[9],"the":[10,22,50,101,121,125,135,138,143],"growing":[11],"number":[12],"of":[13,17,28,38,49,64,128],"cyber-attacks":[14],"targeting":[15],"Internet":[16],"Things":[18],"(IoT)":[19],"systems":[20],"restates":[21],"need":[23],"for":[24,149],"a":[25,35,86,94],"reliable":[26,107],"detection":[27,103,118],"malicious":[29],"network":[30],"activity.":[31],"This":[32],"paper":[33],"presents":[34],"comparative":[36],"analysis":[37],"supervised,":[39],"unsupervised":[40],"and":[41,56,85,120],"reinforcement":[42],"learning":[43],"techniques":[44,145],"on":[45,93],"nine":[46],"malware":[47],"captures":[48],"IoT-23":[51],"dataset,":[52],"considering":[53],"both":[54],"binary":[55],"multi-class":[57],"classification":[58],"scenarios.":[59],"developed":[61],"models":[62],"consisted":[63],"Support":[65],"Vector":[66],"Machine":[67,76],"(SVM),":[68],"Extreme":[69],"Gradient":[70,74],"Boosting":[71,75],"(XGBoost),":[72],"Light":[73],"(LightGBM),":[77],"Isolation":[78],"Forest":[79],"(iForest),":[80],"Local":[81],"Outlier":[82],"Factor":[83],"(LOF)":[84],"Deep":[87,96],"Reinforcement":[88],"Learning":[89],"(DRL)":[90],"model":[91,123],"based":[92],"Double":[95],"Q-Network":[97],"(DDQIN),":[98],"adapted":[99],"to":[100,132],"intrusion":[102,151],"context.":[104],"most":[106],"performance":[108],"was":[109],"achieved":[110],"by":[111],"LightGBM.":[112],"Nonetheless,":[113],"iForest":[114],"displayed":[115],"good":[116],"anomaly":[117],"results":[119,140],"DRL":[122],"demonstrated":[124],"possible":[126],"benefits":[127],"employing":[129],"this":[130],"methodology":[131],"continuously":[133],"improve":[134],"detection.":[136,152],"Overall,":[137],"obtained":[139],"indicate":[141],"that":[142],"analyzed":[144],"are":[146],"well":[147],"suited":[148],"IoT":[150]},"counts_by_year":[{"year":2026,"cited_by_count":7},{"year":2025,"cited_by_count":13},{"year":2024,"cited_by_count":13},{"year":2023,"cited_by_count":13},{"year":2022,"cited_by_count":3}],"updated_date":"2026-06-14T07:44:22.658603","created_date":"2025-10-10T00:00:00"}