{"id":"https://openalex.org/W7128598544","doi":"https://doi.org/10.1016/j.comnet.2026.112100","title":"Design and evaluation of a robust and explainable intrusion detection framework for 5G/B5G networks","display_name":"Design and evaluation of a robust and explainable intrusion detection framework for 5G/B5G networks","publication_year":2026,"publication_date":"2026-02-11","ids":{"openalex":"https://openalex.org/W7128598544","doi":"https://doi.org/10.1016/j.comnet.2026.112100"},"language":"en","primary_location":{"id":"doi:10.1016/j.comnet.2026.112100","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112100","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.comnet.2026.112100","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125605453","display_name":"Nasim Nezhadsistani","orcid":null},"institutions":[{"id":"https://openalex.org/I237525767","display_name":"Zurich Insurance Group (Switzerland)","ror":"https://ror.org/03cw8qd03","country_code":"CH","type":"company","lineage":["https://openalex.org/I237525767"]}],"countries":["CH"],"is_corresponding":true,"raw_author_name":"Nasim Nezhadsistani","raw_affiliation_strings":["Communication Systems Group (CSG), Department of Informatics, University of Z\u00fcrich, Z\u00fcrich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-6504-6729","affiliations":[{"raw_affiliation_string":"Communication Systems Group (CSG), Department of Informatics, University of Z\u00fcrich, Z\u00fcrich, Switzerland","institution_ids":["https://openalex.org/I237525767"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125621997","display_name":"Mohsen Tajgardan","orcid":null},"institutions":[{"id":"https://openalex.org/I4210157736","display_name":"Qom University of Technology","ror":"https://ror.org/04zepk655","country_code":"IR","type":"education","lineage":["https://openalex.org/I4210157736"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mohsen Tajgardan","raw_affiliation_strings":["Faculty of Electrical and Computer Engineering, Qom University of Technology, Iran"],"raw_orcid":"https://orcid.org/0000-0003-1220-5196","affiliations":[{"raw_affiliation_string":"Faculty of Electrical and Computer Engineering, Qom University of Technology, Iran","institution_ids":["https://openalex.org/I4210157736"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125617714","display_name":"Mahdi Rabbani","orcid":null},"institutions":[{"id":"https://openalex.org/I106938459","display_name":"University of New Brunswick","ror":"https://ror.org/05nkf0n29","country_code":"CA","type":"education","lineage":["https://openalex.org/I106938459"]},{"id":"https://openalex.org/I4405258595","display_name":"Canadian Institute for Cybersecurity","ror":"https://ror.org/00yhsjs55","country_code":"CA","type":"facility","lineage":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Mahdi Rabbani","raw_affiliation_strings":["Canadian Institute for Cybersecurity, University of New Brunswick, Fredericton, NB, Canada"],"raw_orcid":"https://orcid.org/0000-0002-6613-0954","affiliations":[{"raw_affiliation_string":"Canadian Institute for Cybersecurity, University of New Brunswick, Fredericton, NB, Canada","institution_ids":["https://openalex.org/I106938459","https://openalex.org/I4405258595"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125597840","display_name":"Weijie Niu","orcid":null},"institutions":[{"id":"https://openalex.org/I237525767","display_name":"Zurich Insurance Group (Switzerland)","ror":"https://ror.org/03cw8qd03","country_code":"CH","type":"company","lineage":["https://openalex.org/I237525767"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Weijie Niu","raw_affiliation_strings":["Communication Systems Group (CSG), Department of Informatics, University of Z\u00fcrich, Z\u00fcrich, Switzerland"],"raw_orcid":"https://orcid.org/0009-0008-9265-391X","affiliations":[{"raw_affiliation_string":"Communication Systems Group (CSG), Department of Informatics, University of Z\u00fcrich, Z\u00fcrich, Switzerland","institution_ids":["https://openalex.org/I237525767"]}]},{"author_position":"last","author":{"id":null,"display_name":"Burkhard Stiller","orcid":"https://orcid.org/0000-0002-7461-7463"},"institutions":[{"id":"https://openalex.org/I237525767","display_name":"Zurich Insurance Group (Switzerland)","ror":"https://ror.org/03cw8qd03","country_code":"CH","type":"company","lineage":["https://openalex.org/I237525767"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Burkhard Stiller","raw_affiliation_strings":["Communication Systems Group (CSG), Department of Informatics, University of Z\u00fcrich, Z\u00fcrich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0002-7461-7463","affiliations":[{"raw_affiliation_string":"Communication Systems Group (CSG), Department of Informatics, University of Z\u00fcrich, Z\u00fcrich, Switzerland","institution_ids":["https://openalex.org/I237525767"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5125605453"],"corresponding_institution_ids":["https://openalex.org/I237525767"],"apc_list":{"value":2370,"currency":"USD","value_usd":2370},"apc_paid":{"value":2370,"currency":"USD","value_usd":2370},"fwci":29.8913,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.99371219,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"278","issue":null,"first_page":"112100","last_page":"112100"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.2702000141143799,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.2702000141143799,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.07909999787807465,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.07620000094175339,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.7638999819755554},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6638000011444092},{"id":"https://openalex.org/keywords/autoencoder","display_name":"Autoencoder","score":0.5073999762535095},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.4814999997615814},{"id":"https://openalex.org/keywords/vulnerability","display_name":"Vulnerability (computing)","score":0.47620001435279846},{"id":"https://openalex.org/keywords/implementation","display_name":"Implementation","score":0.3776000142097473},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.3594000041484833},{"id":"https://openalex.org/keywords/range","display_name":"Range (aeronautics)","score":0.35920000076293945},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.3553999960422516}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9075000286102295},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.7638999819755554},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6638000011444092},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5378999710083008},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.5073999762535095},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4814999997615814},{"id":"https://openalex.org/C95713431","wikidata":"https://www.wikidata.org/wiki/Q631425","display_name":"Vulnerability (computing)","level":2,"score":0.47620001435279846},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47589999437332153},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4153999984264374},{"id":"https://openalex.org/C26713055","wikidata":"https://www.wikidata.org/wiki/Q245962","display_name":"Implementation","level":2,"score":0.3776000142097473},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3594000041484833},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.35920000076293945},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3553999960422516},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3330000042915344},{"id":"https://openalex.org/C41608201","wikidata":"https://www.wikidata.org/wiki/Q980509","display_name":"Embedding","level":2,"score":0.31290000677108765},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.3124000132083893},{"id":"https://openalex.org/C2780009758","wikidata":"https://www.wikidata.org/wiki/Q6804172","display_name":"Measure (data warehouse)","level":2,"score":0.31200000643730164},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3003999888896942},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3003000020980835},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.29260000586509705},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.290800005197525},{"id":"https://openalex.org/C160920958","wikidata":"https://www.wikidata.org/wiki/Q7662746","display_name":"Synthetic data","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C88796919","wikidata":"https://www.wikidata.org/wiki/Q1142907","display_name":"Backbone network","level":2,"score":0.27970001101493835},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.263700008392334},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.2531999945640564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.comnet.2026.112100","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112100","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.comnet.2026.112100","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112100","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G3189900290","display_name":null,"funder_award_id":"101139285","funder_id":"https://openalex.org/F4320334322","funder_display_name":"HORIZON EUROPE Framework Programme"},{"id":"https://openalex.org/G925656167","display_name":null,"funder_award_id":"23.00642","funder_id":"https://openalex.org/F4320335238","funder_display_name":"Staatssekretariat f\u00fcr Bildung, Forschung und Innovation"}],"funders":[{"id":"https://openalex.org/F4320323874","display_name":"Universit\u00e4t Z\u00fcrich","ror":"https://ror.org/02crff812"},{"id":"https://openalex.org/F4320334322","display_name":"HORIZON EUROPE Framework Programme","ror":null},{"id":"https://openalex.org/F4320335238","display_name":"Staatssekretariat f\u00fcr Bildung, Forschung und Innovation","ror":"https://ror.org/01kw63t33"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":25,"referenced_works":["https://openalex.org/W1982354667","https://openalex.org/W2084341220","https://openalex.org/W2119821739","https://openalex.org/W2149706766","https://openalex.org/W2793130454","https://openalex.org/W2797972299","https://openalex.org/W2911964244","https://openalex.org/W2924689635","https://openalex.org/W2944046640","https://openalex.org/W3116274835","https://openalex.org/W3134578582","https://openalex.org/W3205985117","https://openalex.org/W4220985823","https://openalex.org/W4296913356","https://openalex.org/W4313423370","https://openalex.org/W4385059984","https://openalex.org/W4391741433","https://openalex.org/W4396930243","https://openalex.org/W4400737507","https://openalex.org/W4401247017","https://openalex.org/W4401842380","https://openalex.org/W4401990795","https://openalex.org/W4403484816","https://openalex.org/W4406158004","https://openalex.org/W4411555061"],"related_works":[],"abstract_inverted_index":{"As":[0],"Fifth-generation":[1],"(5G)":[2],"networks":[3],"advance":[4],"towards":[5],"future":[6],"6G":[7,231],"technology,":[8],"they":[9],"provide":[10,122],"enhanced":[11],"capabilities":[12],"in":[13,54,58,235],"terms":[14],"of":[15,38,201],"data":[16,95],"rates,":[17],"latency,":[18],"and":[19,23,96,143,157,175,177,189,203,221,228],"connectivity.":[20],"The":[21,125,150],"expanding":[22],"heterogeneous":[24],"landscape":[25],"further":[26,113,195],"extends":[27],"the":[28,78,83,154,161,167,208,236],"attack":[29,103],"surface":[30],"with":[31,182],"increasing":[32],"vulnerability":[33],"to":[34,70,115],"a":[35,108,140,198,218],"wide":[36],"range":[37],"dynamic":[39],"cyber":[40],"threats.":[41],"Traditional":[42],"Intrusion":[43],"Detection":[44],"Systems,":[45],"relying":[46],"on":[47],"static":[48],"signature-based":[49],"methods,":[50],"face":[51],"significant":[52],"challenges":[53],"detecting":[55],"novel":[56],"attacks":[57],"such":[59],"complex":[60],"environments.":[61],"This":[62,111,216],"paper":[63],"proposes":[64],"an":[65,131],"explainable":[66],"hybrid":[67],"AE-XGBoost":[68],"framework":[69,126],"address":[71],"these":[72,165],"gaps.":[73],"In":[74],"this":[75],"proposed":[76,168],"framework,":[77],"deep":[79],"autoencoder":[80],"serves":[81],"as":[82],"backbone":[84],"for":[85,100,213,230],"two":[86],"primary":[87],"tasks:":[88],"learning":[89],"robust":[90],"features":[91,205],"from":[92],"high-dimensional":[93],"traffic":[94],"synthesizing":[97],"high-quality":[98],"samples":[99],"minority,":[101],"underrepresented":[102],"classes.":[104],"It":[105],"effectively":[106],"forms":[107],"class-balanced":[109],"dataset.":[110],"is":[112,128],"extended":[114],"integrate":[116],"Shapley":[117],"Additive":[118],"Explanations":[119],"(SHAP),":[120],"which":[121],"needed":[123],"interpretability.":[124],"robustness":[127],"determined":[129],"by":[130],"extensive":[132],"evaluation":[133],"strategy.":[134],"Extensive":[135],"experiments":[136],"are":[137],"conducted":[138],"using":[139,146],"5-fold":[141],"cross-validation":[142],"cross-dataset":[144],"validation":[145],"three":[147],"different":[148,162],"datasets.":[149,163],"experimental":[151],"results":[152],"demonstrate":[153],"model":[155],"effectiveness":[156],"promising":[158],"generalization":[159],"across":[160],"Across":[164],"settings,":[166],"IDS":[169],"achieves":[170],"F1-scores":[171],"between":[172,187],"approximately":[173],"0.96":[174],"0.999":[176],"AUC":[178],"values":[179],"above":[180],"0.97,":[181],"only":[183],"minor":[184],"performance":[185],"differences":[186],"original":[188],"synthetic":[190],"test":[191],"samples.":[192],"SHAP-based":[193],"analysis":[194],"reveals":[196],"that":[197,225],"small":[199],"subset":[200],"5G-":[202],"TCP-level":[204],"consistently":[206],"dominates":[207],"predictions,":[209],"offering":[210],"actionable":[211],"explanations":[212],"security":[214,223],"analysts.":[215],"provides":[217],"successful,":[219],"scalable,":[220],"reliable":[222],"measure":[224],"proves":[226],"effective":[227],"appropriate":[229],"mobile":[232],"network":[233],"implementations":[234],"near":[237],"future.":[238]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-07-15T18:14:33.161393","created_date":"2026-02-11T00:00:00"}