{"id":"https://openalex.org/W7117162334","doi":"https://doi.org/10.1109/commnet68224.2025.11288887","title":"Lightweight Intrusion Detection in IoT via SHAP-Guided Feature Pruning and Knowledge-Distilled Kronecker Networks","display_name":"Lightweight Intrusion Detection in IoT via SHAP-Guided Feature Pruning and Knowledge-Distilled Kronecker Networks","publication_year":2025,"publication_date":"2025-12-03","ids":{"openalex":"https://openalex.org/W7117162334","doi":"https://doi.org/10.1109/commnet68224.2025.11288887"},"language":null,"primary_location":{"id":"doi:10.1109/commnet68224.2025.11288887","is_oa":false,"landing_page_url":"https://doi.org/10.1109/commnet68224.2025.11288887","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 8th International Conference on Advanced Communication Technologies and Networking (CommNet)","raw_type":"proceedings-article"},"type":"article","indexed_in":["arxiv","crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2512.19488","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050123066","display_name":"Hafsa Benaddi","orcid":"https://orcid.org/0000-0003-2489-0637"},"institutions":[{"id":"https://openalex.org/I4210121440","display_name":"Moroccan Foundation for Advanced Science, Innovation and Research","ror":"https://ror.org/02gjqpv16","country_code":"MA","type":"nonprofit","lineage":["https://openalex.org/I4210121440"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Hafsa Benaddi","raw_affiliation_strings":["Moroccan School of Engineering Sciences (EMSI),LSIA Laboratory,Tanger,Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Moroccan School of Engineering Sciences (EMSI),LSIA Laboratory,Tanger,Morocco","institution_ids":["https://openalex.org/I4210121440"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065165118","display_name":"Mohammed Jouhari","orcid":"https://orcid.org/0000-0001-5406-8594"},"institutions":[{"id":"https://openalex.org/I3121676899","display_name":"Universit\u00e9 Ibn-Tofail","ror":"https://ror.org/02wj89n04","country_code":"MA","type":"education","lineage":["https://openalex.org/I3121676899"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Mohammed Jouhari","raw_affiliation_strings":["Ibn Tofail University,Laboratory of Research in Informatics (LaRI), Faculty of Sciences,Kenitra,Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ibn Tofail University,Laboratory of Research in Informatics (LaRI), Faculty of Sciences,Kenitra,Morocco","institution_ids":["https://openalex.org/I3121676899"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036594435","display_name":"Nouha Laamech","orcid":"https://orcid.org/0000-0002-8022-9897"},"institutions":[{"id":"https://openalex.org/I4210131560","display_name":"Universit\u00e9 Mohammed VI Polytechnique","ror":"https://ror.org/03xc55g68","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210131560"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Nouha Laamech","raw_affiliation_strings":["University Mohammed VI Polytechnic,College of Computing,Benguerir,Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Mohammed VI Polytechnic,College of Computing,Benguerir,Morocco","institution_ids":["https://openalex.org/I4210131560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5044950723","display_name":"Anas Motii","orcid":"https://orcid.org/0009-0005-4936-0028"},"institutions":[{"id":"https://openalex.org/I4210131560","display_name":"Universit\u00e9 Mohammed VI Polytechnique","ror":"https://ror.org/03xc55g68","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210131560"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Anas Motii","raw_affiliation_strings":["University Mohammed VI Polytechnic,College of Computing,Benguerir,Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University Mohammed VI Polytechnic,College of Computing,Benguerir,Morocco","institution_ids":["https://openalex.org/I4210131560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5036440733","display_name":"Khalil Ibrahimi","orcid":"https://orcid.org/0000-0002-9682-9555"},"institutions":[{"id":"https://openalex.org/I3121676899","display_name":"Universit\u00e9 Ibn-Tofail","ror":"https://ror.org/02wj89n04","country_code":"MA","type":"education","lineage":["https://openalex.org/I3121676899"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Khalil Ibrahimi","raw_affiliation_strings":["Ibn Tofail University,Laboratory of Research in Informatics (LaRI), Faculty of Sciences,Kenitra,Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Ibn Tofail University,Laboratory of Research in Informatics (LaRI), Faculty of Sciences,Kenitra,Morocco","institution_ids":["https://openalex.org/I3121676899"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.59624728,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5622000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5622000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.08489999920129776,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.06639999896287918,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/pruning","display_name":"Pruning","score":0.8048999905586243},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.7315999865531921},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6136999726295471},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.5985000133514404},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.524399995803833},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5141000151634216},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.5098000168800354},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.4964999854564667},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4867999851703644},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.4742000102996826}],"concepts":[{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.8048999905586243},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7828999757766724},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.7315999865531921},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6136999726295471},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5985000133514404},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.524399995803833},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5238000154495239},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5141000151634216},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5139999985694885},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.5098000168800354},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4964999854564667},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4867999851703644},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.4742000102996826},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4560000002384186},{"id":"https://openalex.org/C39482219","wikidata":"https://www.wikidata.org/wiki/Q192826","display_name":"Kronecker delta","level":2,"score":0.4203000068664551},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.4007999897003174},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.34940001368522644},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.3456999957561493},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.34139999747276306},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.33739998936653137},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.3264999985694885},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.319599986076355},{"id":"https://openalex.org/C206345919","wikidata":"https://www.wikidata.org/wiki/Q20380951","display_name":"Resource (disambiguation)","level":2,"score":0.3188000023365021},{"id":"https://openalex.org/C60908668","wikidata":"https://www.wikidata.org/wiki/Q690207","display_name":"Perceptron","level":3,"score":0.30799999833106995},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.2969000041484833},{"id":"https://openalex.org/C106131492","wikidata":"https://www.wikidata.org/wiki/Q3072260","display_name":"Filter (signal processing)","level":2,"score":0.28529998660087585},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.27959999442100525},{"id":"https://openalex.org/C46743427","wikidata":"https://www.wikidata.org/wiki/Q1341685","display_name":"Inference engine","level":3,"score":0.274399995803833},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.26899999380111694},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C3017813396","wikidata":"https://www.wikidata.org/wiki/Q17078173","display_name":"Resource constraints","level":2,"score":0.26570001244544983},{"id":"https://openalex.org/C2779696439","wikidata":"https://www.wikidata.org/wiki/Q7512811","display_name":"Signature (topology)","level":2,"score":0.2563999891281128},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.25360000133514404},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.251800000667572}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/commnet68224.2025.11288887","is_oa":false,"landing_page_url":"https://doi.org/10.1109/commnet68224.2025.11288887","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 8th International Conference on Advanced Communication Technologies and Networking (CommNet)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2512.19488","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2512.19488","pdf_url":"https://arxiv.org/pdf/2512.19488","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2512.19488","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2512.19488","pdf_url":"https://arxiv.org/pdf/2512.19488","source":{"id":"https://openalex.org/S4393918464","display_name":"ArXiv.org","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/10","score":0.532708466053009,"display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7117162334.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,120],"widespread":[1],"deployment":[2],"of":[3,5,105],"Internet":[4],"Things":[6],"(IoT)":[7],"devices":[8],"requires":[9],"intrusion":[10],"detection":[11],"systems":[12],"(IDS)":[13],"with":[14,47,116],"high":[15],"accuracy":[16],"while":[17,73],"operating":[18],"under":[19,89],"strict":[20],"resource":[21],"constraints.":[22],"Conventional":[23],"deep":[24],"learning":[25],"IDS":[26,41,136],"are":[27],"often":[28],"too":[29],"large":[30],"and":[31,63,126,134],"computationally":[32],"intensive":[33],"for":[34,137],"edge":[35],"deployment.":[36],"We":[37],"propose":[38],"a":[39,64],"lightweight":[40],"that":[42,98,123],"combines":[43],"SHAP-guided":[44],"feature":[45],"pruning":[46,125],"knowledge-distilled":[48],"Kronecker":[49],"networks.":[50],"A":[51],"high-capacity":[52],"teacher":[53,84,110],"model":[54],"identifies":[55],"the":[56,93,99,109],"most":[57],"relevant":[58],"features":[59],"through":[60],"SHAP":[61],"explanations,":[62],"compressed":[65],"student":[66,100],"leverages":[67],"Kronecker-structured":[68],"layers":[69],"to":[70,85],"minimize":[71],"parameters":[72],"preserving":[74],"discriminative":[75],"inputs.":[76],"Knowledge":[77],"distillation":[78],"transfers":[79],"softened":[80],"decision":[81],"boundaries":[82],"from":[83],"student,":[86],"improving":[87],"generalization":[88],"compression.":[90],"Experiments":[91],"on":[92],"TON":[94],"IOT":[95],"dataset":[96],"show":[97],"is":[101],"nearly":[102],"three":[103],"orders":[104],"magnitude":[106],"smaller":[107],"than":[108],"yet":[111],"sustains":[112],"macro-F1":[113],"above":[114],"0.986":[115],"millisecond-level":[117],"inference":[118],"latency.":[119],"results":[121],"demonstrate":[122],"explainability-driven":[124],"structured":[127],"compression":[128],"can":[129],"jointly":[130],"enable":[131],"scalable,":[132],"low-latency,":[133],"energy-efficient":[135],"heterogeneous":[138],"IoT":[139],"environments.":[140]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-12-24T00:00:00"}