{"id":"https://openalex.org/W7127647158","doi":"https://doi.org/10.1109/ccnc65079.2026.11366512","title":"Benchmarking Machine Learning Models for IoT Malware Detection under Data Scarcity and Drift","display_name":"Benchmarking Machine Learning Models for IoT Malware Detection under Data Scarcity and Drift","publication_year":2026,"publication_date":"2026-01-09","ids":{"openalex":"https://openalex.org/W7127647158","doi":"https://doi.org/10.1109/ccnc65079.2026.11366512"},"language":null,"primary_location":{"id":"doi:10.1109/ccnc65079.2026.11366512","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccnc65079.2026.11366512","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE 23rd Consumer Communications &amp;amp; Networking Conference (CCNC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5123951704","display_name":"Jake Lyon","orcid":null},"institutions":[{"id":"https://openalex.org/I118746106","display_name":"College of Wooster","ror":"https://ror.org/029zqs055","country_code":"US","type":"education","lineage":["https://openalex.org/I118746106"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Jake Lyon","raw_affiliation_strings":["The College of Wooster,Department of Computer Science,Wooster,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"The College of Wooster,Department of Computer Science,Wooster,USA","institution_ids":["https://openalex.org/I118746106"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065553357","display_name":"Ehsan Saeedizade","orcid":"https://orcid.org/0000-0002-8455-8313"},"institutions":[{"id":"https://openalex.org/I134113660","display_name":"University of Nevada, Reno","ror":"https://ror.org/01keh0577","country_code":"US","type":"education","lineage":["https://openalex.org/I134113660"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Ehsan Saeedizade","raw_affiliation_strings":["University of Nevada-Reno,Department of Computer Science and Engineering,Reno,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nevada-Reno,Department of Computer Science and Engineering,Reno,USA","institution_ids":["https://openalex.org/I134113660"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5124033653","display_name":"Shamik Sengupta","orcid":null},"institutions":[{"id":"https://openalex.org/I134113660","display_name":"University of Nevada, Reno","ror":"https://ror.org/01keh0577","country_code":"US","type":"education","lineage":["https://openalex.org/I134113660"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Shamik Sengupta","raw_affiliation_strings":["University of Nevada-Reno,Department of Computer Science and Engineering,Reno,USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Nevada-Reno,Department of Computer Science and Engineering,Reno,USA","institution_ids":["https://openalex.org/I134113660"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.13722347,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.944100022315979,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.944100022315979,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.017899999395012856,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.002400000113993883,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7287999987602234},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6610999703407288},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5651000142097473},{"id":"https://openalex.org/keywords/benchmarking","display_name":"Benchmarking","score":0.47510001063346863},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.38839998841285706},{"id":"https://openalex.org/keywords/supervised-learning","display_name":"Supervised learning","score":0.3321000039577484},{"id":"https://openalex.org/keywords/malware-analysis","display_name":"Malware analysis","score":0.323199987411499},{"id":"https://openalex.org/keywords/training-set","display_name":"Training set","score":0.31119999289512634}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7598999738693237},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.7560999989509583},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7287999987602234},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6610999703407288},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6514000296592712},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5651000142097473},{"id":"https://openalex.org/C86251818","wikidata":"https://www.wikidata.org/wiki/Q816754","display_name":"Benchmarking","level":2,"score":0.47510001063346863},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.38839998841285706},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34310001134872437},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.3321000039577484},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.323199987411499},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.31119999289512634},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.298799991607666},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.2921000123023987},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2721000015735626},{"id":"https://openalex.org/C115901376","wikidata":"https://www.wikidata.org/wiki/Q184199","display_name":"Automation","level":2,"score":0.27149999141693115},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.26489999890327454},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26190000772476196},{"id":"https://openalex.org/C10511746","wikidata":"https://www.wikidata.org/wiki/Q899388","display_name":"Data security","level":3,"score":0.2572999894618988},{"id":"https://openalex.org/C45804977","wikidata":"https://www.wikidata.org/wiki/Q7239673","display_name":"Predictive modelling","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.25360000133514404}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/ccnc65079.2026.11366512","is_oa":false,"landing_page_url":"https://doi.org/10.1109/ccnc65079.2026.11366512","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE 23rd Consumer Communications &amp;amp; Networking Conference (CCNC)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":10,"referenced_works":["https://openalex.org/W2548398461","https://openalex.org/W2969468102","https://openalex.org/W3216442403","https://openalex.org/W4210988783","https://openalex.org/W4367395368","https://openalex.org/W4378647253","https://openalex.org/W4387005683","https://openalex.org/W4393175755","https://openalex.org/W4407518214","https://openalex.org/W4409653774"],"related_works":[],"abstract_inverted_index":{"The":[0,81],"rapid":[1],"expansion":[2],"of":[3,6,23,83,91,172],"the":[4,21,89,111,170],"Internet":[5],"Things":[7],"(IoT)":[8],"in":[9,43,118,138,181],"domains":[10],"such":[11],"as":[12,163],"smart":[13],"cities,":[14],"transportation,":[15],"and":[16,40,45,54,68,79,101,108,121,131,151],"industrial":[17],"systems":[18,180],"has":[19],"heightened":[20],"urgency":[22],"addressing":[24],"their":[25],"security":[26],"vulnerabilities.":[27],"IoT":[28,179],"devices":[29],"often":[30],"operate":[31],"under":[32],"limited":[33,155],"computational":[34],"resources,":[35],"lack":[36],"robust":[37],"physical":[38],"safeguards,":[39],"are":[41,76],"deployed":[42],"heterogeneous":[44],"dynamic":[46],"networks,":[47],"making":[48],"them":[49],"prime":[50],"targets":[51],"for":[52,105,177],"cyberattacks":[53],"malware":[55,66,106,164],"applications.":[56],"Machine":[57],"learning":[58,94],"(ML)":[59],"offers":[60],"a":[61,102],"promising":[62],"approach":[63],"to":[64,87,127,135],"automated":[65],"detection":[67,107],"classification,":[69],"but":[70],"practical":[71],"deployment":[72,137],"requires":[73],"models":[74,95,147,176],"that":[75,145],"both":[77,119],"effective":[78],"lightweight.":[80],"goal":[82],"this":[84],"study":[85],"is":[86],"investigate":[88],"effectiveness":[90],"four":[92],"supervised":[93],"(Random":[96],"Forest,":[97],"LightGBM,":[98],"Logistic":[99],"Regression,":[100],"Multi-Layer":[103],"Perceptron)":[104],"classification":[109,123],"using":[110],"IoT-23":[112],"dataset.":[113],"We":[114],"evaluate":[115],"model":[116],"performance":[117,159],"binary":[120],"multiclass":[122],"tasks,":[124],"assess":[125],"sensitivity":[126],"training":[128,156],"data":[129],"volume,":[130],"analyze":[132],"temporal":[133],"robustness":[134],"simulate":[136],"evolving":[139],"threat":[140],"landscapes.":[141],"Our":[142],"results":[143],"show":[144],"tree-based":[146],"achieve":[148],"high":[149],"accuracy":[150],"generalization,":[152],"even":[153],"with":[154],"data,":[157],"while":[158],"deteriorates":[160],"over":[161],"time":[162],"diversity":[165],"increases.":[166],"These":[167],"findings":[168],"underscore":[169],"importance":[171],"adaptive,":[173],"resource-efficient":[174],"ML":[175],"securing":[178],"real-world":[182],"environments.":[183]},"counts_by_year":[],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2026-02-06T00:00:00"}
