{"id":"https://openalex.org/W4413639905","doi":"https://doi.org/10.1109/csr64739.2025.11130136","title":"NetPacketformer: Real-Time, Context-Aware Network Intrusion Detection with Transformers","display_name":"NetPacketformer: Real-Time, Context-Aware Network Intrusion Detection with Transformers","publication_year":2025,"publication_date":"2025-08-04","ids":{"openalex":"https://openalex.org/W4413639905","doi":"https://doi.org/10.1109/csr64739.2025.11130136"},"language":"en","primary_location":{"id":"doi:10.1109/csr64739.2025.11130136","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csr64739.2025.11130136","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050419371","display_name":"Armando Domi","orcid":null},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]},{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":true,"raw_author_name":"Armando Domi","raw_affiliation_strings":["Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece"],"affiliations":[{"raw_affiliation_string":"Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5073436351","display_name":"Christos Zonios","orcid":"https://orcid.org/0000-0003-4072-5842"},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]},{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Christos Zonios","raw_affiliation_strings":["Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece"],"affiliations":[{"raw_affiliation_string":"Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5060018285","display_name":"Giorgos Tatsis","orcid":"https://orcid.org/0000-0003-2113-0421"},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]},{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Giorgos Tatsis","raw_affiliation_strings":["Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece"],"affiliations":[{"raw_affiliation_string":"Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5109397355","display_name":"Anastasios Drosou","orcid":null},"institutions":[{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]},{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Anastasios Drosou","raw_affiliation_strings":["Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece"],"affiliations":[{"raw_affiliation_string":"Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5108913955","display_name":"Dimitrios Tzovaras","orcid":null},"institutions":[{"id":"https://openalex.org/I4210093649","display_name":"Information Technologies Institute","ror":"https://ror.org/0069akp70","country_code":"GR","type":"nonprofit","lineage":["https://openalex.org/I4210093649"]},{"id":"https://openalex.org/I4210134249","display_name":"Centre for Research and Technology Hellas","ror":"https://ror.org/03bndpq63","country_code":"GR","type":"facility","lineage":["https://openalex.org/I4210134249"]}],"countries":["GR"],"is_corresponding":false,"raw_author_name":"Dimitrios Tzovaras","raw_affiliation_strings":["Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece"],"affiliations":[{"raw_affiliation_string":"Information and Technologies Institute,Centre for Research and Technology Hellas,Thessaloniki,Greece","institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5050419371"],"corresponding_institution_ids":["https://openalex.org/I4210093649","https://openalex.org/I4210134249"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.2995578,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"687","last_page":"692"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9997000098228455,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9945999979972839,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.9886000156402588,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7199755907058716},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6377508640289307},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.44644638895988464},{"id":"https://openalex.org/keywords/transformer","display_name":"Transformer","score":0.44341376423835754},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.431885302066803},{"id":"https://openalex.org/keywords/intrusion-prevention-system","display_name":"Intrusion prevention system","score":0.417725145816803},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3288964629173279},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.25101372599601746},{"id":"https://openalex.org/keywords/electrical-engineering","display_name":"Electrical engineering","score":0.10733217000961304},{"id":"https://openalex.org/keywords/engineering","display_name":"Engineering","score":0.09267401695251465},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.08073624968528748},{"id":"https://openalex.org/keywords/voltage","display_name":"Voltage","score":0.05160370469093323}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7199755907058716},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6377508640289307},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.44644638895988464},{"id":"https://openalex.org/C66322947","wikidata":"https://www.wikidata.org/wiki/Q11658","display_name":"Transformer","level":3,"score":0.44341376423835754},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.431885302066803},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.417725145816803},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3288964629173279},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25101372599601746},{"id":"https://openalex.org/C119599485","wikidata":"https://www.wikidata.org/wiki/Q43035","display_name":"Electrical engineering","level":1,"score":0.10733217000961304},{"id":"https://openalex.org/C127413603","wikidata":"https://www.wikidata.org/wiki/Q11023","display_name":"Engineering","level":0,"score":0.09267401695251465},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.08073624968528748},{"id":"https://openalex.org/C165801399","wikidata":"https://www.wikidata.org/wiki/Q25428","display_name":"Voltage","level":2,"score":0.05160370469093323},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/csr64739.2025.11130136","is_oa":false,"landing_page_url":"https://doi.org/10.1109/csr64739.2025.11130136","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 IEEE International Conference on Cyber Security and Resilience (CSR)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W2392603527","https://openalex.org/W2390009783","https://openalex.org/W2348767155","https://openalex.org/W2388497169","https://openalex.org/W3120393658","https://openalex.org/W4283700121","https://openalex.org/W1496376327","https://openalex.org/W2357468538","https://openalex.org/W1513478798","https://openalex.org/W2133389611"],"abstract_inverted_index":{"Current":[0],"Intrusion":[1],"Detection":[2],"Systems":[3],"(IDS)":[4],"often":[5],"employ":[6],"preprocessing":[7],"steps":[8],"to":[9,21,26,91,147,214],"extract":[10],"contextual":[11],"information":[12],"from":[13],"raw":[14,42,72,77,149],"traffic":[15,78],"data,":[16],"which":[17],"require":[18],"the":[19,24,41,210],"system":[20],"wait":[22],"for":[23,31,88,207],"communication":[25],"end,":[27],"making":[28],"them":[29,137,156],"unsuitable":[30],"realtime":[32],"use.":[33],"Additionally,":[34],"network":[35,64],"intrusion":[36,65,151,200,217],"detection":[37,66,143,152],"models":[38,125],"that":[39,68,133],"utilize":[40],"packets":[43],"consider":[44],"only":[45],"single":[46],"packets,":[47],"and":[48,79,98,117,129,131,141,160],"do":[49],"not":[50],"work":[51],"on":[52,71,107,127,183],"sequences":[53],"of":[54,82,170,180],"packets.":[55],"In":[56],"this":[57],"paper,":[58],"we":[59,175],"introduce":[60,121],"NetPacketformer,":[61],"a":[62,83,177,184,204],"real-time":[63,178,216],"model":[67,182],"works":[69],"directly":[70],"packet":[73,150],"sequences.":[74],"NetPacketformer":[75,134,154,202],"leverages":[76],"takes":[80],"advantage":[81],"Conformer":[84],"encoder,":[85],"originally":[86],"designed":[87],"speech":[89],"processing,":[90],"capture":[92],"both":[93,139],"local":[94],"details":[95],"(through":[96,101],"convolution)":[97],"global":[99],"patterns":[100],"multi-head":[102],"attention).":[103],"We":[104],"perform":[105],"experiments":[106],"five":[108],"publicly":[109],"available":[110],"datasets":[111],"covering":[112],"IoT,":[113],"IIoT,":[114],"IoMT,":[115],"5G,":[116],"standard":[118],"IP":[119],"networks,":[120],"two":[122],"baseline":[123],"sequence":[124,194],"based":[126],"LSTMs":[128],"Transformers,":[130],"show":[132],"consistently":[135],"outperforms":[136,155],"in":[138,157,163,209],"binary":[140,164],"multiclass":[142,158],"tasks.":[144],"When":[145],"compared":[146],"state-of-the-art":[148],"methods,":[153],"classification":[159],"is":[161,203],"competitive":[162],"classification,":[165],"while":[166],"exhibiting":[167],"an":[168],"order":[169],"magnitude":[171],"lower":[172],"time-toclassification.":[173],"Finally,":[174],"present":[176],"application":[179],"our":[181],"Arm64":[185],"IoT":[186],"device.":[187],"Overall,":[188],"these":[189],"findings":[190],"highlight":[191],"how":[192],"utilizing":[193],"modelling":[195],"architectures":[196],"can":[197],"significantly":[198],"improve":[199],"detection.":[201,218],"flexible":[205],"tool":[206],"researchers":[208],"cybersecurity":[211],"field":[212],"aiming":[213],"implement":[215]},"counts_by_year":[],"updated_date":"2025-11-06T03:46:38.306776","created_date":"2025-10-10T00:00:00"}