{"id":"https://openalex.org/W7154686167","doi":"https://doi.org/10.1109/access.2026.3685156","title":"Low-Overhead Passive Resilience Monitoring for AIoT Gateways: End-to-End Anomaly Detection via eBPF Timing Traces and Autoencoders","display_name":"Low-Overhead Passive Resilience Monitoring for AIoT Gateways: End-to-End Anomaly Detection via eBPF Timing Traces and Autoencoders","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7154686167","doi":"https://doi.org/10.1109/access.2026.3685156"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3685156","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3685156","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3685156","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5133904514","display_name":"Tsui Peng","orcid":"https://orcid.org/0009-0006-1152-7416"},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Tsui Peng","raw_affiliation_strings":["Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0009-0006-1152-7416","affiliations":[{"raw_affiliation_string":"Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068289895","display_name":"Ching-Huang Lin","orcid":"https://orcid.org/0000-0002-7537-9970"},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Ching-Huang Lin","raw_affiliation_strings":["Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054596500","display_name":"Yu-Chih Wei","orcid":"https://orcid.org/0000-0001-9467-3879"},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Yu-Chih Wei","raw_affiliation_strings":["Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":"https://orcid.org/0000-0001-9467-3879","affiliations":[{"raw_affiliation_string":"Department of Information and Finance Management, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I118292597"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5133882361","display_name":"Bo-Chang Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]},{"id":"https://openalex.org/I99613584","display_name":"National Taipei University","ror":"https://ror.org/03e29r284","country_code":"TW","type":"education","lineage":["https://openalex.org/I99613584"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Bo-Chang Chen","raw_affiliation_strings":["Information Security Program, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Program, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I99613584","https://openalex.org/I118292597"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056232201","display_name":"Jen-Yu Yeh","orcid":null},"institutions":[{"id":"https://openalex.org/I118292597","display_name":"National Taipei University of Technology","ror":"https://ror.org/00cn92c09","country_code":"TW","type":"education","lineage":["https://openalex.org/I118292597"]},{"id":"https://openalex.org/I99613584","display_name":"National Taipei University","ror":"https://ror.org/03e29r284","country_code":"TW","type":"education","lineage":["https://openalex.org/I99613584"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Jen-Yu Yeh","raw_affiliation_strings":["Information Security Program, National Taipei University of Technology, Taipei, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Information Security Program, National Taipei University of Technology, Taipei, Taiwan","institution_ids":["https://openalex.org/I99613584","https://openalex.org/I118292597"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.57832059,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"61753","last_page":"61771"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12216","display_name":"Network Time Synchronization Technologies","score":0.24490000307559967,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12216","display_name":"Network Time Synchronization Technologies","score":0.24490000307559967,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.23970000445842743,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10138","display_name":"Network Traffic and Congestion Control","score":0.08579999953508377,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7145000100135803},{"id":"https://openalex.org/keywords/resilience","display_name":"Resilience (materials science)","score":0.49079999327659607},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.40860000252723694},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.34880000352859497},{"id":"https://openalex.org/keywords/object-detection","display_name":"Object detection","score":0.3179999887943268},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.29109999537467957}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7447999715805054},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7145000100135803},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5008999705314636},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.49079999327659607},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.40860000252723694},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.34880000352859497},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.32600000500679016},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.3179999887943268},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.29109999537467957},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2782999873161316},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2685000002384186},{"id":"https://openalex.org/C31972630","wikidata":"https://www.wikidata.org/wiki/Q844240","display_name":"Computer vision","level":1,"score":0.25540000200271606},{"id":"https://openalex.org/C104267543","wikidata":"https://www.wikidata.org/wiki/Q208163","display_name":"Signal processing","level":3,"score":0.2538999915122986}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3685156","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3685156","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:eca7fee0097b469e83490a8a2d172f4b","is_oa":true,"landing_page_url":"https://doaj.org/article/eca7fee0097b469e83490a8a2d172f4b","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 61753-61771 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3685156","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3685156","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6246447563171387,"id":"https://metadata.un.org/sdg/13","display_name":"Climate action"}],"awards":[{"id":"https://openalex.org/G7191348050","display_name":null,"funder_award_id":"114-2634-F-027-001-MBK","funder_id":"https://openalex.org/F4320331164","funder_display_name":"National Science and Technology Council"}],"funders":[{"id":"https://openalex.org/F4320331164","display_name":"National Science and Technology Council","ror":"https://ror.org/00wnb9798"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Modern":[0],"AIoT":[1,165,228],"services":[2],"are":[3],"vulnerable":[4],"to":[5,151,213],"complex,":[6],"cross-domain":[7],"failures":[8,172],"spanning":[9],"wireless":[10],"sensor":[11],"networks,":[12],"edge":[13,199],"AI":[14,101],"inference,":[15],"and":[16,106,138,147,156,198,217],"cloud":[17,107],"reporting.":[18],"Conventional":[19],"monitoring":[20],"typically":[21],"relies":[22],"on":[23,34,117,162],"isolated":[24],"single-node":[25],"metrics":[26],"that":[27,38,55,168],"lack":[28],"an":[29],"integrated":[30],"end-to-end":[31,58],"perspective,":[32],"or":[33],"exhaustive":[35],"active":[36],"probing":[37],"incurs":[39],"prohibitive":[40],"resource":[41],"overhead.":[42],"To":[43],"address":[44],"this":[45,47,203],"gap,":[46],"paper":[48],"presents":[49],"a":[50,123,140,163,206,222],"lightweight,":[51],"gateway-centric":[52],"resilience-monitoring":[53],"framework":[54,170],"provides":[56],"comprehensive":[57],"observability":[59],"purely":[60],"at":[61],"the":[62,74,169,181,186,192],"edge.":[63],"By":[64],"hooking":[65],"into":[66],"kernel-level":[67],"TCP":[68],"state":[69],"transitions":[70],"via":[71],"Linux":[72],"eBPF,":[73],"proposed":[75],"system":[76],"decouples":[77],"network-induced":[78],"delays":[79],"from":[80,191,209],"application":[81],"computational":[82],"bottlenecks.":[83],"We":[84],"reconstruct":[85],"fine-grained":[86],"discrete":[87],"latency":[88],"segments\u2014including":[89],"device-to-gateway":[90],"transmission":[91],"(<italic":[92,98,103,109],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[93,99,104,110],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">T<sub>de</sub></i>),":[94],"IoT":[95],"service":[96],"execution":[97],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">T<sub>is</sub></i>),":[100],"inference":[102],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">T<sub>ai</sub></i>),":[105],"reporting":[108],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">T<sub>ec</sub></i>)\u2014completely":[111],"eliminating":[112],"injected":[113],"measurement":[114],"traffic.":[115],"Based":[116],"these":[118],"non-intrusive":[119],"metrics,":[120],"we":[121],"design":[122],"hybrid":[124],"detection":[125],"architecture:":[126],"(i)":[127],"protocol-oriented":[128],"static":[129],"thresholds":[130],"for":[131,226],"immediate,":[132],"interpretable":[133],"localization":[134],"of":[135],"hard":[136],"outages,":[137],"(ii)":[139],"window-based":[141],"behavioral":[142],"layer":[143,183],"integrating":[144],"Autoencoders":[145],"(AE)":[146],"Cumulative":[148],"Sum":[149],"(CUSUM)":[150],"handle":[152],"subtle":[153],"concept":[154],"drifts":[155],"coupled":[157],"performance":[158,188],"degradations.":[159],"Extensive":[160],"evaluations":[161],"physical":[164],"testbed":[166],"demonstrate":[167],"localizes":[171],"with":[173],"minimal":[174],"CPU":[175],"overhead":[176],"(less":[177],"than":[178],"1%).":[179],"Furthermore,":[180],"learning-based":[182],"successfully":[184],"captures":[185],"elusive":[187],"fluctuations":[189],"arising":[190],"dynamic":[193],"interplay":[194],"between":[195],"network":[196],"conditions":[197],"computing":[200],"workloads.":[201],"Ultimately,":[202],"approach":[204],"facilitates":[205],"paradigm":[207],"shift":[208],"reactive":[210],"failure":[211],"handling":[212],"proactive":[214],"early":[215],"warning":[216],"autonomous":[218],"anomaly":[219],"detection,":[220],"offering":[221],"highly":[223],"deployable":[224],"foundation":[225],"robust":[227],"operations.":[229]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-04-18T00:00:00"}