{"id":"https://openalex.org/W4401251656","doi":"https://doi.org/10.1007/s10922-024-09848-2","title":"Towards Resource-Efficient DDoS Detection in IoT: Leveraging Feature Engineering of System and Network Usage Metrics","display_name":"Towards Resource-Efficient DDoS Detection in IoT: Leveraging Feature Engineering of System and Network Usage Metrics","publication_year":2024,"publication_date":"2024-08-02","ids":{"openalex":"https://openalex.org/W4401251656","doi":"https://doi.org/10.1007/s10922-024-09848-2"},"language":"en","primary_location":{"id":"doi:10.1007/s10922-024-09848-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-024-09848-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10922-024-09848-2.pdf","source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10922-024-09848-2.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5035300502","display_name":"Nikola Gavri\u0107","orcid":"https://orcid.org/0000-0003-3555-1999"},"institutions":[{"id":"https://openalex.org/I2800207870","display_name":"H\u00f8yskolen Kristiania","ror":"https://ror.org/03gss5916","country_code":"NO","type":"education","lineage":["https://openalex.org/I2800207870"]}],"countries":["NO"],"is_corresponding":true,"raw_author_name":"Nikola Gavric","raw_affiliation_strings":["Cybersecurity Department, Kristiania University College, Kikegata 24, 0153, Oslo, Oslo, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cybersecurity Department, Kristiania University College, Kikegata 24, 0153, Oslo, Oslo, Norway","institution_ids":["https://openalex.org/I2800207870"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038716285","display_name":"Guru Prasad Bhandari","orcid":"https://orcid.org/0000-0003-4032-7465"},"institutions":[{"id":"https://openalex.org/I2800207870","display_name":"H\u00f8yskolen Kristiania","ror":"https://ror.org/03gss5916","country_code":"NO","type":"education","lineage":["https://openalex.org/I2800207870"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Guru Prasad Bhandari","raw_affiliation_strings":["Cybersecurity Department, Kristiania University College, Kikegata 24, 0153, Oslo, Oslo, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cybersecurity Department, Kristiania University College, Kikegata 24, 0153, Oslo, Oslo, Norway","institution_ids":["https://openalex.org/I2800207870"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5011052188","display_name":"Andrii Shalaginov","orcid":"https://orcid.org/0000-0003-1980-6875"},"institutions":[{"id":"https://openalex.org/I2800207870","display_name":"H\u00f8yskolen Kristiania","ror":"https://ror.org/03gss5916","country_code":"NO","type":"education","lineage":["https://openalex.org/I2800207870"]}],"countries":["NO"],"is_corresponding":false,"raw_author_name":"Andrii Shalaginov","raw_affiliation_strings":["Cybersecurity Department, Kristiania University College, Kikegata 24, 0153, Oslo, Oslo, Norway"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cybersecurity Department, Kristiania University College, Kikegata 24, 0153, Oslo, Oslo, Norway","institution_ids":["https://openalex.org/I2800207870"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5035300502"],"corresponding_institution_ids":["https://openalex.org/I2800207870"],"apc_list":{"value":2790,"currency":"USD","value_usd":2790},"apc_paid":{"value":2790,"currency":"USD","value_usd":2790},"fwci":2.5993,"has_fulltext":true,"cited_by_count":12,"citation_normalized_percentile":{"value":0.90015482,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"32","issue":"4","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9998000264167786,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.9044268131256104},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.7546438574790955},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6467018723487854},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6361539959907532},{"id":"https://openalex.org/keywords/feature-engineering","display_name":"Feature engineering","score":0.4877679944038391},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.38342034816741943},{"id":"https://openalex.org/keywords/data-science","display_name":"Data science","score":0.3703138828277588},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.35075685381889343},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.2501521110534668},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2473386824131012},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.20429816842079163},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.11948075890541077}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9044268131256104},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.7546438574790955},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6467018723487854},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6361539959907532},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.4877679944038391},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.38342034816741943},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3703138828277588},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.35075685381889343},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.2501521110534668},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2473386824131012},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.20429816842079163},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.11948075890541077},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10922-024-09848-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-024-09848-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10922-024-09848-2.pdf","source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10922-024-09848-2","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10922-024-09848-2","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10922-024-09848-2.pdf","source":{"id":"https://openalex.org/S67072002","display_name":"Journal of Network and Systems Management","issn_l":"1064-7570","issn":["1064-7570","1573-7705"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Network and Systems Management","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/8","display_name":"Decent work and economic growth","score":0.41999998688697815}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4401251656.pdf","grobid_xml":"https://content.openalex.org/works/W4401251656.grobid-xml"},"referenced_works_count":38,"referenced_works":["https://openalex.org/W1972532183","https://openalex.org/W2122646361","https://openalex.org/W2520381575","https://openalex.org/W2529113503","https://openalex.org/W2564566221","https://openalex.org/W2571907764","https://openalex.org/W2612437872","https://openalex.org/W2617557114","https://openalex.org/W2620213176","https://openalex.org/W2733765803","https://openalex.org/W2784153182","https://openalex.org/W2797742547","https://openalex.org/W3004848853","https://openalex.org/W3024476475","https://openalex.org/W3031160330","https://openalex.org/W3085955590","https://openalex.org/W3105750153","https://openalex.org/W3117452863","https://openalex.org/W3122859344","https://openalex.org/W3155215751","https://openalex.org/W3165483060","https://openalex.org/W3206894072","https://openalex.org/W3209498073","https://openalex.org/W4221079563","https://openalex.org/W4224278516","https://openalex.org/W4226319939","https://openalex.org/W4241348844","https://openalex.org/W4244284037","https://openalex.org/W4281719610","https://openalex.org/W4302286646","https://openalex.org/W4306398602","https://openalex.org/W4312055178","https://openalex.org/W4313890394","https://openalex.org/W4321609027","https://openalex.org/W4381053814","https://openalex.org/W4382281941","https://openalex.org/W4389117175","https://openalex.org/W4400927635"],"related_works":["https://openalex.org/W4386482731","https://openalex.org/W2765763546","https://openalex.org/W4385302085","https://openalex.org/W2750075801","https://openalex.org/W3164948662","https://openalex.org/W4400413234","https://openalex.org/W3153597579","https://openalex.org/W4385336128","https://openalex.org/W4394398790","https://openalex.org/W4399455186"],"abstract_inverted_index":{"Abstract":[0],"The":[1,198],"Internet":[2],"of":[3,12,100,131,156,168,177,192],"Things":[4],"(IoT)":[5],"is":[6],"omnipresent,":[7],"exposing":[8],"a":[9,66,86,93,135,161,172,218,223],"large":[10],"number":[11],"devices":[13,204],"that":[14,153,201],"often":[15],"lack":[16],"security":[17],"controls":[18],"to":[19,40,96,146],"the":[20,24,62,80,111,165,178,190],"public":[21],"Internet.":[22],"In":[23,73],"modern":[25],"world,":[26],"many":[27,45],"everyday":[28],"processes":[29],"depend":[30],"on":[31,92],"these":[32],"devices,":[33],"and":[34,88,117,126,137,187,207],"their":[35,56],"service":[36],"outage":[37],"could":[38],"lead":[39],"catastrophic":[41],"consequences.":[42],"There":[43],"are":[44,123,128],"Deep":[46],"Packet":[47],"Inspection":[48],"(DPI)":[49],"based":[50],"intrusion":[51],"detection":[52],"systems":[53],"(IDS).":[54],"However,":[55],"linear":[57],"computational":[58,220],"complexity":[59],"induced":[60],"by":[61,104,174],"event-driven":[63],"nature":[64],"poses":[65],"power-demanding":[67],"obstacle":[68],"in":[69,134,164],"resource-constrained":[70],"IoT":[71,185,203],"environments.":[72],"this":[74],"paper,":[75],"we":[76,84,142,151,188],"shift":[77],"away":[78],"from":[79],"traditional":[81],"IDS":[82],"as":[83,150],"introduce":[85],"novel":[87],"lightweight":[89],"framework,":[90],"relying":[91],"time-driven":[94],"algorithm":[95],"detect":[97,147,206],"Distributed":[98],"Denial":[99,155],"Service":[101,157],"(DDoS)":[102],"attacks":[103,182,214],"employing":[105],"Machine":[106],"Learning":[107],"(ML)":[108],"algorithms":[109],"leveraging":[110],"newly":[112],"engineered":[113],"features":[114,122],"containing":[115],"system":[116],"network":[118],"utilization":[119],"information.":[120],"These":[121],"periodically":[124],"generated,":[125],"there":[127],"only":[129],"ten":[130],"them,":[132],"resulting":[133],"low":[136,219],"constant":[138],"algorithmic":[139],"complexity.":[140],"Moreover,":[141],"leverage":[143],"IoT-specific":[144],"patterns":[145],"malicious":[148],"traffic":[149],"argue":[152],"each":[154],"(DoS)":[158],"attack":[159],"leaves":[160],"unique":[162],"fingerprint":[163],"proposed":[166],"set":[167],"features.":[169],"We":[170],"construct":[171],"dataset":[173],"launching":[175],"some":[176],"most":[179],"prevalent":[180],"DoS":[181,209],"against":[183,215],"an":[184],"device,":[186],"demonstrate":[189],"effectiveness":[191],"our":[193],"approach":[194],"with":[195,222],"high":[196],"accuracy.":[197],"results":[199],"show":[200],"standalone":[202],"can":[205],"classify":[208],"and,":[210],"therefore,":[211],"arguably,":[212],"DDoS":[213],"them":[216],"at":[217],"cost":[221],"deterministic":[224],"delay.":[225]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":7}],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-10T00:00:00"}