{"id":"https://openalex.org/W7160502132","doi":"https://doi.org/10.1109/access.2026.3691262","title":"A Comprehensive Survey on Concept-Drift-Resilient Network Intrusion Detection Systems","display_name":"A Comprehensive Survey on Concept-Drift-Resilient Network Intrusion Detection Systems","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7160502132","doi":"https://doi.org/10.1109/access.2026.3691262"},"language":"en","primary_location":{"id":"doi:10.1109/access.2026.3691262","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691262","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2026.3691262","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106318415","display_name":"Mateus Komarchesqui","orcid":"https://orcid.org/0009-0004-6854-4896"},"institutions":[{"id":"https://openalex.org/I127110123","display_name":"Universidade Estadual de Londrina","ror":"https://ror.org/01585b035","country_code":"BR","type":"education","lineage":["https://openalex.org/I127110123"]}],"countries":["BR"],"is_corresponding":true,"raw_author_name":"Mateus Komarchesqui","raw_affiliation_strings":["Computer Science Department, State University of Londrina, Londrina, Brazil"],"raw_orcid":"https://orcid.org/0009-0004-6854-4896","affiliations":[{"raw_affiliation_string":"Computer Science Department, State University of Londrina, Londrina, Brazil","institution_ids":["https://openalex.org/I127110123"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5098671003","display_name":"Vitor Gabriel da Silva Ruffo","orcid":"https://orcid.org/0009-0000-5392-6921"},"institutions":[{"id":"https://openalex.org/I127110123","display_name":"Universidade Estadual de Londrina","ror":"https://ror.org/01585b035","country_code":"BR","type":"education","lineage":["https://openalex.org/I127110123"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Vitor Gabriel Da Silva Ruffo","raw_affiliation_strings":["Electrical Engineering Department, State University of Londrina, Londrina, Brazil"],"raw_orcid":"https://orcid.org/0009-0000-5392-6921","affiliations":[{"raw_affiliation_string":"Electrical Engineering Department, State University of Londrina, Londrina, Brazil","institution_ids":["https://openalex.org/I127110123"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017112584","display_name":"Daniel Matheus Brand\u00e3o Lent","orcid":"https://orcid.org/0000-0002-1343-0398"},"institutions":[{"id":"https://openalex.org/I127110123","display_name":"Universidade Estadual de Londrina","ror":"https://ror.org/01585b035","country_code":"BR","type":"education","lineage":["https://openalex.org/I127110123"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Daniel Matheus Brand\u00e3o Lent","raw_affiliation_strings":["Electrical Engineering Department, State University of Londrina, Londrina, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-1343-0398","affiliations":[{"raw_affiliation_string":"Electrical Engineering Department, State University of Londrina, Londrina, Brazil","institution_ids":["https://openalex.org/I127110123"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106283523","display_name":"Vin\u00edcius Ferreira Schiavon","orcid":null},"institutions":[{"id":"https://openalex.org/I127110123","display_name":"Universidade Estadual de Londrina","ror":"https://ror.org/01585b035","country_code":"BR","type":"education","lineage":["https://openalex.org/I127110123"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Vin\u00edcius Ferreira Schiavon","raw_affiliation_strings":["Computer Science Department, State University of Londrina, Londrina, Brazil"],"raw_orcid":"https://orcid.org/0009-0003-6560-9730","affiliations":[{"raw_affiliation_string":"Computer Science Department, State University of Londrina, Londrina, Brazil","institution_ids":["https://openalex.org/I127110123"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135605379","display_name":"Matheus Riki Nakanishi","orcid":null},"institutions":[{"id":"https://openalex.org/I127110123","display_name":"Universidade Estadual de Londrina","ror":"https://ror.org/01585b035","country_code":"BR","type":"education","lineage":["https://openalex.org/I127110123"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Matheus Riki Nakanishi","raw_affiliation_strings":["Computer Science Department, State University of Londrina, Londrina, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, State University of Londrina, Londrina, Brazil","institution_ids":["https://openalex.org/I127110123"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135622789","display_name":"Gustavo Hideyuki Kitamura Nishikawa","orcid":null},"institutions":[{"id":"https://openalex.org/I127110123","display_name":"Universidade Estadual de Londrina","ror":"https://ror.org/01585b035","country_code":"BR","type":"education","lineage":["https://openalex.org/I127110123"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Gustavo Hideyuki Kitamura Nishikawa","raw_affiliation_strings":["Computer Science Department, State University of Londrina, Londrina, Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer Science Department, State University of Londrina, Londrina, Brazil","institution_ids":["https://openalex.org/I127110123"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135604627","display_name":"Luiz Fernando Carvalho","orcid":null},"institutions":[{"id":"https://openalex.org/I1283613182","display_name":"Universidade Tecnol\u00f3gica Federal do Paran\u00e1","ror":"https://ror.org/002v2kq79","country_code":"BR","type":"education","lineage":["https://openalex.org/I1283613182"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Luiz Fernando Carvalho","raw_affiliation_strings":["Computer Engineering Department, Federal University of Technology—Paraná, Apucarana, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-3982-0917","affiliations":[{"raw_affiliation_string":"Computer Engineering Department, Federal University of Technology—Paraná, Apucarana, Brazil","institution_ids":["https://openalex.org/I1283613182"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5046936081","display_name":"M\u00e1rio Lemes Proen\u00e7a","orcid":"https://orcid.org/0000-0002-0492-322X"},"institutions":[{"id":"https://openalex.org/I127110123","display_name":"Universidade Estadual de Londrina","ror":"https://ror.org/01585b035","country_code":"BR","type":"education","lineage":["https://openalex.org/I127110123"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Mario Lemes Proen\u00e7a","raw_affiliation_strings":["Computer Science Department, State University of Londrina, Londrina, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-0492-322X","affiliations":[{"raw_affiliation_string":"Computer Science Department, State University of Londrina, Londrina, Brazil","institution_ids":["https://openalex.org/I127110123"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":8,"corresponding_author_ids":["https://openalex.org/A5106318415"],"corresponding_institution_ids":["https://openalex.org/I127110123"],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.88592555,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"14","issue":null,"first_page":"69689","last_page":"69718"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9674000144004822,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9674000144004822,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.011099999770522118,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.002400000113993883,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.8436999917030334},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.7371000051498413},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6331999897956848},{"id":"https://openalex.org/keywords/field","display_name":"Field (mathematics)","score":0.5306000113487244},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.42500001192092896},{"id":"https://openalex.org/keywords/empirical-research","display_name":"Empirical research","score":0.3783999979496002},{"id":"https://openalex.org/keywords/service","display_name":"Service (business)","score":0.3734999895095825},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.3725000023841858}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.8436999917030334},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7718999981880188},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.7371000051498413},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6331999897956848},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.5306000113487244},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.42500001192092896},{"id":"https://openalex.org/C120936955","wikidata":"https://www.wikidata.org/wiki/Q2155640","display_name":"Empirical research","level":2,"score":0.3783999979496002},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.3734999895095825},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.3725000023841858},{"id":"https://openalex.org/C126831891","wikidata":"https://www.wikidata.org/wiki/Q221673","display_name":"Host (biology)","level":2,"score":0.36419999599456787},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34540000557899475},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3370000123977661},{"id":"https://openalex.org/C2779618445","wikidata":"https://www.wikidata.org/wiki/Q1640628","display_name":"Network service","level":2,"score":0.31949999928474426},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.3061000108718872},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.30000001192092896},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.29840001463890076},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.29440000653266907},{"id":"https://openalex.org/C51675839","wikidata":"https://www.wikidata.org/wiki/Q1665681","display_name":"Intelligent Network","level":2,"score":0.2831999957561493},{"id":"https://openalex.org/C2780741293","wikidata":"https://www.wikidata.org/wiki/Q4818019","display_name":"Attack patterns","level":3,"score":0.2825999855995178},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2750000059604645},{"id":"https://openalex.org/C527648132","wikidata":"https://www.wikidata.org/wiki/Q189900","display_name":"Information security","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.2623000144958496},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2621999979019165},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.2563999891281128},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.25440001487731934}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2026.3691262","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691262","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:516aeeb7faa2465c8dfc4bcf711f11e5","is_oa":true,"landing_page_url":"https://doaj.org/article/516aeeb7faa2465c8dfc4bcf711f11e5","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 14, Pp 69689-69718 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2026.3691262","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2026.3691262","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2489062931","display_name":null,"funder_award_id":"306397/2022-6","funder_id":"https://openalex.org/F4320322025","funder_display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico"},{"id":"https://openalex.org/G4974335173","display_name":null,"funder_award_id":"306397/2022-6","funder_id":"https://openalex.org/F4320328530","funder_display_name":"Foundation for Scientific and Technological Development in Health"}],"funders":[{"id":"https://openalex.org/F4320316371","display_name":"Fundacion Araucaria","ror":null},{"id":"https://openalex.org/F4320321091","display_name":"Coordena\u00e7\u00e3o de Aperfei\u00e7oamento de Pessoal de N\u00edvel Superior","ror":"https://ror.org/00x0ma614"},{"id":"https://openalex.org/F4320322025","display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico","ror":"https://ror.org/03swz6y49"},{"id":"https://openalex.org/F4320322772","display_name":"Funda\u00e7\u00e3o Arauc\u00e1ria","ror":"https://ror.org/02r7nkw81"},{"id":"https://openalex.org/F4320328530","display_name":"Foundation for Scientific and Technological Development in Health","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,18,64,98],"evolution":[1],"of":[2,24,66,132],"computer":[3],"networks":[4,70],"for":[5],"service":[6],"provision,":[7],"through":[8],"new":[9],"devices":[10],"and":[11,32,53,80,115,117,146],"architectures,":[12],"renders":[13,71],"past":[14],"traffic":[15,56],"patterns":[16],"obsolete.":[17],"shift":[19],"in":[20,102,124],"the":[21,129],"statistical":[22],"properties":[23],"data":[25],"is":[26,33],"known":[27],"as":[28],"concept":[29],"drift":[30,113],"(CD)":[31],"bound":[34],"to":[35,68,77,88],"affect":[36],"automated":[37],"pattern":[38],"recognition-based":[39],"systems.":[40],"Network":[41],"intrusion":[42],"detection":[43,114],"systems":[44,105],"(NIDS)":[45],"are":[46,62,106],"widely":[47],"studied":[48],"security":[49],"solutions":[50],"that":[51],"model":[52],"monitor":[54],"network":[55],"behavior,":[57],"alerting":[58],"when":[59],"malicious":[60],"activities":[61],"detected.":[63],"lack":[65],"adaptability":[67],"evolving":[69,134],"NIDS":[72,111],"ineffective":[73],"over":[74],"time,":[75],"leading":[76],"operational":[78],"instability":[79],"increased":[81],"vulnerability.":[82],"In":[83],"this":[84,133],"survey,":[85],"we":[86],"aim":[87],"present":[89],"an":[90],"empirical":[91],"literature":[92],"review":[93],"on":[94],"state-of-the-art":[95],"CD-resilient":[96],"NIDS.":[97],"essential":[99],"steps":[100],"involved":[101],"developing":[103],"such":[104],"comprehensively":[107],"examined:":[108],"benchmark":[109],"datasets,":[110],"development,":[112],"adaptation,":[116],"dynamic":[118],"performance":[119],"evaluation.":[120],"An":[121],"increasing":[122],"trend":[123],"academic":[125],"output":[126],"has":[127],"underscored":[128],"critical":[130],"importance":[131],"field":[135],"since":[136],"2022.":[137],"We":[138],"support":[139],"its":[140],"research":[141],"by":[142],"identifying":[143],"open":[144],"issues":[145],"highlighting":[147],"future":[148],"investigation":[149],"directions.":[150]},"counts_by_year":[],"updated_date":"2026-05-17T08:19:37.847499","created_date":"2026-05-08T00:00:00"}