{"id":"https://openalex.org/W7160418821","doi":"https://doi.org/10.1016/j.comnet.2026.112359","title":"Robust AI-based intrusion detection for IoMT: A data-efficient approach via optimized feature selection and hybrid data balancing","display_name":"Robust AI-based intrusion detection for IoMT: A data-efficient approach via optimized feature selection and hybrid data balancing","publication_year":2026,"publication_date":"2026-05-06","ids":{"openalex":"https://openalex.org/W7160418821","doi":"https://doi.org/10.1016/j.comnet.2026.112359"},"language":"en","primary_location":{"id":"doi:10.1016/j.comnet.2026.112359","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112359","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.comnet.2026.112359","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114522872","display_name":"Jordi Dom\u00e9nech","orcid":"https://orcid.org/0000-0002-2977-7265"},"institutions":[{"id":"https://openalex.org/I4210130845","display_name":"i2CAT","ror":"https://ror.org/02rkks755","country_code":"ES","type":"nonprofit","lineage":["https://openalex.org/I4210130845","https://openalex.org/I4387153040"]},{"id":"https://openalex.org/I9617848","display_name":"Universitat Polit\u00e8cnica de Catalunya","ror":"https://ror.org/03mb6wj31","country_code":"ES","type":"education","lineage":["https://openalex.org/I9617848"]}],"countries":["ES"],"is_corresponding":true,"raw_author_name":"Jordi Dom\u00e9nech","raw_affiliation_strings":["Cybersecurity & Blockchain Research Group, i2CAT, Barcelona, 08034, Spain","Department of Network Engineering, Universitat Polit\u00e8cnica de Catalunya (UPC), Barcelona, 08034, Spain"],"raw_orcid":"https://orcid.org/0000-0002-2977-7265","affiliations":[{"raw_affiliation_string":"Cybersecurity & Blockchain Research Group, i2CAT, Barcelona, 08034, Spain","institution_ids":["https://openalex.org/I4210130845"]},{"raw_affiliation_string":"Department of Network Engineering, Universitat Polit\u00e8cnica de Catalunya (UPC), Barcelona, 08034, Spain","institution_ids":["https://openalex.org/I9617848"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5037701241","display_name":"Saber Mhiri","orcid":"https://orcid.org/0000-0001-7288-4659"},"institutions":[{"id":"https://openalex.org/I4210130845","display_name":"i2CAT","ror":"https://ror.org/02rkks755","country_code":"ES","type":"nonprofit","lineage":["https://openalex.org/I4210130845","https://openalex.org/I4387153040"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Saber Mhiri","raw_affiliation_strings":["Cybersecurity & Blockchain Research Group, i2CAT, Barcelona, 08034, Spain"],"raw_orcid":"https://orcid.org/0000-0001-7288-4659","affiliations":[{"raw_affiliation_string":"Cybersecurity & Blockchain Research Group, i2CAT, Barcelona, 08034, Spain","institution_ids":["https://openalex.org/I4210130845"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135525981","display_name":"Olga Le\u00f3n","orcid":"https://orcid.org/0000-0003-2869-051X"},"institutions":[{"id":"https://openalex.org/I9617848","display_name":"Universitat Polit\u00e8cnica de Catalunya","ror":"https://ror.org/03mb6wj31","country_code":"ES","type":"education","lineage":["https://openalex.org/I9617848"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Olga Le\u00f3n","raw_affiliation_strings":["Department of Network Engineering, Universitat Polit\u00e8cnica de Catalunya (UPC), Barcelona, 08034, Spain"],"raw_orcid":"https://orcid.org/0000-0003-2869-051X","affiliations":[{"raw_affiliation_string":"Department of Network Engineering, Universitat Polit\u00e8cnica de Catalunya (UPC), Barcelona, 08034, Spain","institution_ids":["https://openalex.org/I9617848"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5026307340","display_name":"Muhammad Shuaib Siddiqui","orcid":"https://orcid.org/0000-0002-8257-4969"},"institutions":[{"id":"https://openalex.org/I4210130845","display_name":"i2CAT","ror":"https://ror.org/02rkks755","country_code":"ES","type":"nonprofit","lineage":["https://openalex.org/I4210130845","https://openalex.org/I4387153040"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Muhammad Shuaib Siddiqui","raw_affiliation_strings":["Cybersecurity & Blockchain Research Group, i2CAT, Barcelona, 08034, Spain"],"raw_orcid":"https://orcid.org/0000-0002-8257-4969","affiliations":[{"raw_affiliation_string":"Cybersecurity & Blockchain Research Group, i2CAT, Barcelona, 08034, Spain","institution_ids":["https://openalex.org/I4210130845"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135435314","display_name":"Josep Pegueroles","orcid":null},"institutions":[{"id":"https://openalex.org/I9617848","display_name":"Universitat Polit\u00e8cnica de Catalunya","ror":"https://ror.org/03mb6wj31","country_code":"ES","type":"education","lineage":["https://openalex.org/I9617848"]}],"countries":["ES"],"is_corresponding":false,"raw_author_name":"Josep Pegueroles","raw_affiliation_strings":["Department of Network Engineering, Universitat Polit\u00e8cnica de Catalunya (UPC), Barcelona, 08034, Spain"],"raw_orcid":"https://orcid.org/0000-0002-5194-4883","affiliations":[{"raw_affiliation_string":"Department of Network Engineering, Universitat Polit\u00e8cnica de Catalunya (UPC), Barcelona, 08034, Spain","institution_ids":["https://openalex.org/I9617848"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5114522872"],"corresponding_institution_ids":["https://openalex.org/I4210130845","https://openalex.org/I9617848"],"apc_list":{"value":2370,"currency":"USD","value_usd":2370},"apc_paid":{"value":2370,"currency":"USD","value_usd":2370},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.94397804,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":"284","issue":null,"first_page":"112359","last_page":"112359"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.33469998836517334,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.33469998836517334,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.06480000168085098,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13918","display_name":"Advanced Data and IoT Technologies","score":0.043299999088048935,"subfield":{"id":"https://openalex.org/subfields/2208","display_name":"Electrical and Electronic Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6693000197410583},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.6570000052452087},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.47859999537467957},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4499000012874603},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.3984000086784363},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.375},{"id":"https://openalex.org/keywords/noisy-data","display_name":"Noisy data","score":0.31279999017715454}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8866999745368958},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6693000197410583},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.6570000052452087},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4819999933242798},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.47859999537467957},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4499000012874603},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4230000078678131},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3984000086784363},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.375},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.35749998688697815},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.35409998893737793},{"id":"https://openalex.org/C2781170535","wikidata":"https://www.wikidata.org/wiki/Q30587856","display_name":"Noisy data","level":2,"score":0.31279999017715454},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3041999936103821},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.30000001192092896},{"id":"https://openalex.org/C2983325608","wikidata":"https://www.wikidata.org/wiki/Q17084606","display_name":"Data association","level":3,"score":0.29660001397132874},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.29330000281333923},{"id":"https://openalex.org/C138959212","wikidata":"https://www.wikidata.org/wiki/Q1806783","display_name":"Load balancing (electrical power)","level":3,"score":0.2896000146865845},{"id":"https://openalex.org/C62469222","wikidata":"https://www.wikidata.org/wiki/Q17092103","display_name":"Hybrid algorithm (constraint satisfaction)","level":5,"score":0.2702000141143799},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.25699999928474426},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2540999948978424}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.comnet.2026.112359","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112359","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.comnet.2026.112359","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.comnet.2026.112359","pdf_url":null,"source":{"id":"https://openalex.org/S63392143","display_name":"Computer Networks","issn_l":"1389-1286","issn":["1389-1286","1872-7069"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Computer Networks","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320327970","display_name":"Instituto Nacional de Ciberseguridad","ror":null},{"id":"https://openalex.org/F4320334830","display_name":"Ag\u00e8ncia de Gesti\u00f3 d'Ajuts Universitaris i de Recerca","ror":"https://ror.org/01n4pqe45"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":31,"referenced_works":["https://openalex.org/W2095148636","https://openalex.org/W2095649738","https://openalex.org/W2148143831","https://openalex.org/W2592842236","https://openalex.org/W2612634114","https://openalex.org/W2962807382","https://openalex.org/W3015219050","https://openalex.org/W3033675321","https://openalex.org/W3136769223","https://openalex.org/W3213173707","https://openalex.org/W4324132475","https://openalex.org/W4353052195","https://openalex.org/W4367016722","https://openalex.org/W4382281941","https://openalex.org/W4387474037","https://openalex.org/W4387917942","https://openalex.org/W4389965896","https://openalex.org/W4399171839","https://openalex.org/W4400251673","https://openalex.org/W4401210511","https://openalex.org/W4401561064","https://openalex.org/W4402035331","https://openalex.org/W4404058778","https://openalex.org/W4405613644","https://openalex.org/W4405675931","https://openalex.org/W4406710186","https://openalex.org/W4406854581","https://openalex.org/W4407003114","https://openalex.org/W4410351913","https://openalex.org/W4416406874","https://openalex.org/W7124982956"],"related_works":[],"abstract_inverted_index":{"The":[0],"growing":[1],"integration":[2],"of":[3,6,70,100,116,122],"the":[4,31,71,85,101,139,147,165],"Internet":[5],"Medical":[7],"Things":[8],"(IoMT)":[9],"in":[10,57,177,187],"critical":[11],"infrastructure":[12],"demands":[13],"efficient":[14],"and":[15,45,74,119,142,157,175],"accurate":[16],"Intrusion":[17],"Detection":[18],"Systems":[19],"(IDS)":[20],"tailored":[21],"to":[22,40,82],"their":[23],"resource-constrained":[24],"environments.":[25,190],"In":[26],"this":[27],"work,":[28],"we":[29],"propose":[30],"Optimized":[32],"Preprocessing":[33],"Framework":[34],"(OPF):":[35],"A":[36],"novel":[37],"pre-processing":[38],"methodology":[39,55],"develop":[41],"a":[42,61,75,89,96,105],"computationally":[43],"optimized":[44],"robust":[46],"against":[47],"extreme":[48,133],"class":[49,129],"imbalance":[50],"Artificial":[51],"Intelligence-based":[52],"IDS.":[53],"Our":[54],"operates":[56],"two":[58],"stages:":[59],"First,":[60],"fully":[62],"balanced":[63,98],"dataset":[64,179],"is":[65,80,93],"created":[66],"using":[67,104],"Random":[68,90,120],"Undersampling":[69,121],"majority":[72,123],"classes,":[73],"Gini":[76],"feature-based":[77],"prioritization":[78],"method":[79,163],"employed":[81],"efficiently":[83],"reduce":[84],"feature":[86,140],"space.":[87],"Then,":[88],"Forest":[91],"model":[92,170],"trained":[94],"on":[95,150],"nearly":[97],"version":[99],"dataset,":[102],"generated":[103],"hybrid":[106],"resampling":[107],"technique":[108],"via":[109],"logarithmic":[110],"interpolation":[111],"that":[112,161],"employs":[113],"SMOTE-based":[114],"oversampling":[115],"minority":[117],"classes":[118],"classes.":[124],"This":[125],"process":[126],"preserves":[127],"relative":[128],"order":[130],"while":[131,168],"compressing":[132],"disparities.":[134],"Moreover,":[135],"it":[136,183],"significantly":[137],"reduces":[138],"space":[141],"computational":[143],"overhead.":[144],"We":[145],"validate":[146],"proposed":[148],"approach":[149],"multiple":[151],"real-world":[152],"datasets,":[153],"including":[154],"CICIoMT2024,":[155],"IoMT-TrafficData,":[156],"CICIoT2023.":[158],"Results":[159],"show":[160],"our":[162],"improves":[164],"F1-score":[166],"metric,":[167],"reducing":[169],"complexity":[171],"by":[172],"31.11%,":[173],"31.39%,":[174],"78.16%":[176],"each":[178],"respectively,":[180],"thereby":[181],"making":[182],"suitable":[184],"for":[185],"deployment":[186],"practical":[188],"IoMT":[189]},"counts_by_year":[],"updated_date":"2026-05-08T13:12:06.581006","created_date":"2026-05-07T00:00:00"}