{"id":"https://openalex.org/W7154686167","doi":"https://doi.org/10.1109/access.2026.3685156","title":"Low-Overhead Passive Resilience Monitoring for AIoT Gateways: End-to-End Anomaly Detection via eBPF Timing Traces and Autoencoders","display_name":"Low-Overhead Passive Resilience Monitoring for AIoT Gateways: End-to-End Anomaly Detection via eBPF Timing Traces and Autoencoders","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7154686167","doi":"https://doi.org/10.1109/access.2026.3685156"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3685156","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3685156","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3685156","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133904514","display_name":"Tsui Peng","orcid":"https://orcid.org/0009-0006-1152-7416"},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Tsui Peng","raw_affiliation_strings":["Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0009-0006-1152-7416","affiliations":[{"raw_affiliation_string":"Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068289895","display_name":"Ching-Huang Lin","orcid":"https://orcid.org/0000-0002-7537-9970"},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Ching-Huang Lin","raw_affiliation_strings":["Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054596500","display_name":"Yu-Chih Wei","orcid":"https://orcid.org/0000-0001-9467-3879"},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Yu-Chih Wei","raw_affiliation_strings":["Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0000-0001-9467-3879","affiliations":[{"raw_affiliation_string":"Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133882361","display_name":"Bo-Chang Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]},{"id":"https://openalex.org/I99613584","display_name":"National Taipei University","ror":"https://ror.org/03e29r284","country_code":"TW","type":"education","lineage":["https://openalex.org/I99613584"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Bo-Chang Chen","raw_affiliation_strings":["Information Security Program, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Program, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597","https://openalex.org/I99613584"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056232201","display_name":"Jen-Yu Yeh","orcid":null},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]},{"id":"https://openalex.org/I99613584","display_name":"National Taipei University","ror":"https://ror.org/03e29r284","country_code":"TW","type":"education","lineage":["https://openalex.org/I99613584"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Jen-Yu Yeh","raw_affiliation_strings":["Information Security Program, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Program, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597","https://openalex.org/I99613584"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.43285789,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"61753","last_page":"61771"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12216","display_name":"Network Time Synchronization Technologies","score":0.24490000307559967,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12216","display_name":"Network Time Synchronization Technologies","score":0.24490000307559967,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.23970000445842743,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.08579999953508377,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7145000100135803},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.49079999327659607},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.40860000252723694},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.34880000352859497},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.3179999887943268},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.29109999537467957}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7447999715805054},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7145000100135803},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5008999705314636},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.49079999327659607},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.40860000252723694},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.34880000352859497},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32600000500679016},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.3179999887943268},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.29109999537467957},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2782999873161316},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2685000002384186},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.25540000200271606},{"id":"https://openalex.org/C104267543","wikidata":"https://www.wikidata.org/wiki/Q208163","display_name":"Signal processing","level":3,"score":0.2538999915122986}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3685156","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3685156","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:eca7fee0097b469e83490a8a2d172f4b","is_oa":true,"landing_page_url":"https://doaj.org/article/eca7fee0097b469e83490a8a2d172f4b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 61753-61771 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3685156","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3685156","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6246447563171387,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[{"id":"https://openalex.org/G7191348050","display_name":null,"funder_award_id":"114-2634-F-027-001-MBK","funder_id":"https://openalex.org/F4320331164","funder_display_name":"National Science and Technology Council"}],"funders":[{"id":"https://openalex.org/F4320331164","display_name":"National Science and Technology Council","ror":"https://ror.org/00wnb9798"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Modern":[0],"AIoT":[1,157,220],"services":[2],"are":[3],"vulnerable":[4],"to":[5,143,205],"complex,":[6],"cross-domain":[7],"failures":[8,164],"spanning":[9],"wireless":[10],"sensor":[11],"networks,":[12],"edge":[13,191],"AI":[14,97],"inference,":[15],"and":[16,100,130,139,148,190,209],"cloud":[17,101],"reporting.":[18],"Conventional":[19],"monitoring":[20],"typically":[21],"relies":[22],"on":[23,34,109,154],"isolated":[24],"single-node":[25],"metrics":[26],"that":[27,38,55,160],"lack":[28],"an":[29],"integrated":[30],"end-to-end":[31,58],"perspective,":[32],"or":[33],"exhaustive":[35],"active":[36],"probing":[37],"incurs":[39],"prohibitive":[40],"resource":[41],"overhead.":[42],"To":[43],"address":[44],"this":[45,47,195],"gap,":[46],"paper":[48],"presents":[49],"a":[50,115,132,155,198,214],"lightweight,":[51],"gateway-centric":[52],"resilience-monitoring":[53],"framework":[54,162],"provides":[56],"comprehensive":[57],"observability":[59],"purely":[60],"at":[61],"the":[62,74,161,173,178,184],"edge.":[63],"By":[64],"hooking":[65],"into":[66],"kernel-level":[67],"TCP":[68],"state":[69],"transitions":[70],"via":[71],"Linux":[72],"eBPF,":[73],"proposed":[75],"system":[76],"decouples":[77],"network-induced":[78],"delays":[79],"from":[80,183,201],"application":[81],"computational":[82],"bottlenecks.":[83],"We":[84],"reconstruct":[85],"fine-grained":[86],"discrete":[87],"latency":[88],"segments\u2014including":[89],"device-to-gateway":[90],"transmission":[91],"(Tde),":[92],"IoT":[93],"service":[94],"execution":[95],"(Tis),":[96],"inference":[98],"(Tai),":[99],"reporting":[102],"(Tec)\u2014completely":[103],"eliminating":[104],"injected":[105],"measurement":[106],"traffic.":[107],"Based":[108],"these":[110],"non-intrusive":[111],"metrics,":[112],"we":[113],"design":[114],"hybrid":[116],"detection":[117],"architecture:":[118],"(i)":[119],"protocol-oriented":[120],"static":[121],"thresholds":[122],"for":[123,218],"immediate,":[124],"interpretable":[125],"localization":[126],"of":[127],"hard":[128],"outages,":[129],"(ii)":[131],"window-based":[133],"behavioral":[134],"layer":[135,175],"integrating":[136],"Autoencoders":[137],"(AE)":[138],"Cumulative":[140],"Sum":[141],"(CUSUM)":[142],"handle":[144],"subtle":[145],"concept":[146],"drifts":[147],"coupled":[149],"performance":[150,180],"degradations.":[151],"Extensive":[152],"evaluations":[153],"physical":[156],"testbed":[158],"demonstrate":[159],"localizes":[163],"with":[165],"minimal":[166],"CPU":[167],"overhead":[168],"(less":[169],"than":[170],"1%).":[171],"Furthermore,":[172],"learning-based":[174],"successfully":[176],"captures":[177],"elusive":[179],"fluctuations":[181],"arising":[182],"dynamic":[185],"interplay":[186],"between":[187],"network":[188],"conditions":[189],"computing":[192],"workloads.":[193],"Ultimately,":[194],"approach":[196],"facilitates":[197],"paradigm":[199],"shift":[200],"reactive":[202],"failure":[203],"handling":[204],"proactive":[206],"early":[207],"warning":[208],"autonomous":[210],"anomaly":[211],"detection,":[212],"offering":[213],"highly":[215],"deployable":[216],"foundation":[217],"robust":[219],"operations.":[221]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2026-04-18T00:00:00"}