{"id":"https://openalex.org/W7138942844","doi":"https://doi.org/10.1109/globecom59602.2025.11432265","title":"Rapid Few-Shot Learning for Resilient Multi-Domain Intrusion Detection","display_name":"Rapid Few-Shot Learning for Resilient Multi-Domain Intrusion Detection","publication_year":2025,"publication_date":"2025-12-08","ids":{"openalex":"https://openalex.org/W7138942844","doi":"https://doi.org/10.1109/globecom59602.2025.11432265"},"language":null,"primary_location":{"id":"doi:10.1109/globecom59602.2025.11432265","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom59602.2025.11432265","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2025 - 2025 IEEE Global Communications Conference","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5090871840","display_name":"Davide Di Monda","orcid":"https://orcid.org/0009-0000-3370-2226"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Davide Di Monda","raw_affiliation_strings":["University of Napoli Federico II,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Napoli Federico II,Italy","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5130198907","display_name":"Furquan Rustam","orcid":null},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Furquan Rustam","raw_affiliation_strings":["University College Dublin,Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin,Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022546955","display_name":"Anca Delia Jurcut","orcid":"https://orcid.org/0000-0002-2705-1823"},"institutions":[{"id":"https://openalex.org/I100930933","display_name":"University College Dublin","ror":"https://ror.org/05m7pjf47","country_code":"IE","type":"education","lineage":["https://openalex.org/I100930933"]}],"countries":["IE"],"is_corresponding":false,"raw_author_name":"Anca Delia Jurcut","raw_affiliation_strings":["University College Dublin,Ireland"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University College Dublin,Ireland","institution_ids":["https://openalex.org/I100930933"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5130190135","display_name":"Antonio Pescap\u00e8","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Antonio Pescap\u00e8","raw_affiliation_strings":["University of Napoli Federico II,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Napoli Federico II,Italy","institution_ids":[]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.71294839,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"3097","last_page":"3102"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.730400025844574,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.730400025844574,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.08980000019073486,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11307","display_name":"Domain Adaptation and Few-Shot Learning","score":0.03739999979734421,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7609999775886536},{"id":"https://openalex.org/keywords/adaptation","display_name":"Adaptation (eye)","score":0.6603000164031982},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.5630000233650208},{"id":"https://openalex.org/keywords/domain-adaptation","display_name":"Domain adaptation","score":0.5443999767303467},{"id":"https://openalex.org/keywords/ideal","display_name":"Ideal (ethics)","score":0.3986999988555908},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.3944999873638153},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection-system","display_name":"Anomaly-based intrusion detection system","score":0.3578999936580658}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8040000200271606},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7609999775886536},{"id":"https://openalex.org/C139807058","wikidata":"https://www.wikidata.org/wiki/Q352374","display_name":"Adaptation (eye)","level":2,"score":0.6603000164031982},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.5630000233650208},{"id":"https://openalex.org/C2776434776","wikidata":"https://www.wikidata.org/wiki/Q19246213","display_name":"Domain adaptation","level":3,"score":0.5443999767303467},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5149999856948853},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4846000075340271},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4302999973297119},{"id":"https://openalex.org/C2776639384","wikidata":"https://www.wikidata.org/wiki/Q840396","display_name":"Ideal (ethics)","level":2,"score":0.3986999988555908},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.3944999873638153},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.362199991941452},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.3578999936580658},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.33149999380111694},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3093999922275543},{"id":"https://openalex.org/C207685749","wikidata":"https://www.wikidata.org/wiki/Q2088941","display_name":"Domain knowledge","level":2,"score":0.30250000953674316},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2948000133037567},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.28700000047683716},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.2743000090122223},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27399998903274536},{"id":"https://openalex.org/C2780735816","wikidata":"https://www.wikidata.org/wiki/Q28324931","display_name":"Incremental learning","level":2,"score":0.2630000114440918},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.2574000060558319}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/globecom59602.2025.11432265","is_oa":false,"landing_page_url":"https://doi.org/10.1109/globecom59602.2025.11432265","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"GLOBECOM 2025 - 2025 IEEE Global Communications Conference","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.6436708569526672,"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2560647685","https://openalex.org/W2593768305","https://openalex.org/W2750674396","https://openalex.org/W2789828921","https://openalex.org/W3021740526","https://openalex.org/W3034942609","https://openalex.org/W3080795476","https://openalex.org/W3084346886","https://openalex.org/W3092093850","https://openalex.org/W3197914403","https://openalex.org/W4376130364","https://openalex.org/W4379659755","https://openalex.org/W4385488530","https://openalex.org/W4387953240","https://openalex.org/W4391305996","https://openalex.org/W4395108879","https://openalex.org/W4399245404","https://openalex.org/W4402159181","https://openalex.org/W4403445983","https://openalex.org/W4408324688"],"related_works":[],"abstract_inverted_index":{"Modern":[0],"networking":[1],"infrastructures\u2014composed":[2],"of":[3,98,136,179],"heterogeneous":[4,118],"architectures":[5],"and":[6,19,34,124,131,198],"configurations,":[7],"i.e.":[8],"domains\u2014introduce":[9],"complexity":[10],"that":[11,82],"significantly":[12,172],"amplifies":[13],"the":[14,66,109,134,148,167],"potential":[15],"attack":[16],"surface.":[17],"Machine":[18],"deep":[20],"learning-based":[21],"Network":[22],"Intrusion":[23],"Detection":[24],"Systems":[25],"(NIDS),":[26],"though":[27],"promising,":[28],"(i)":[29],"require":[30],"extensive":[31,114],"labeled":[32,99],"datasets":[33],"(ii)":[35],"must":[36],"undergo":[37],"complete":[38],"re-training":[39],"when":[40],"adapting":[41],"to":[42,89,166,195],"novel":[43],"network":[44,74],"domains,":[45],"making":[46],"them":[47],"impractical":[48],"in":[49],"dynamic":[50],"multi-domain":[51],"environments.":[52],"To":[53],"address":[54],"these":[55],"challenges,":[56],"we":[57],"propose":[58],"MD-RFS,":[59],"a":[60,78,86,90,95,129,157],"Few-Shot":[61,68],"Learning":[62],"NIDS":[63],"based":[64],"on":[65,108,147],"Rethinking":[67],"approach,":[69],"specifically":[70],"designed":[71],"for":[72],"multiple":[73],"domains.":[75],"MD-RFS":[76,141,161],"employs":[77],"2-step":[79],"learning":[80],"procedure":[81],"quickly":[83],"adapts":[84],"from":[85],"source":[87,111,149],"domain":[88,92,150],"target":[91],"using":[93],"only":[94],"limited":[96],"number":[97],"traffic":[100],"data,":[101],"while":[102,151],"crucially":[103],"preserving":[104],"its":[105],"detection":[106,145],"capabilities":[107],"original":[110],"domain.":[112],"An":[113],"experimental":[115],"evaluation\u2014spanning":[116],"three":[117],"domains":[119],"(viz.":[120],"traditional":[121],"IP,":[122],"IoT,":[123],"SDN),":[125],"each":[126],"represented":[127],"by":[128,176],"recent":[130],"publicly-available":[132],"dataset\u2014demonstrates":[133],"efficacy":[135],"MD-RFS.":[137],"In":[138,156],"ideal":[139],"conditions,":[140],"maintains":[142],"near":[143],"upper-bound":[144],"performance":[146],"having":[152],"good":[153],"adaptation":[154,163,174],"performance.":[155],"realistic":[158],"few-shot":[159],"scenarios,":[160],"achieves":[162],"results":[164],"comparable":[165],"best":[168],"baseline":[169],"competitor,":[170],"yet":[171],"reduces":[173],"time":[175],"2":[177],"orders":[178],"magnitude.":[180],"These":[181],"findings":[182],"are":[183],"further":[184,199],"validated":[185],"through":[186],"visual":[187],"explainability":[188],"analysis.":[189],"The":[190],"implementation":[191],"is":[192],"publicly":[193],"available":[194],"foster":[196],"reproducibility":[197],"research.":[200]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-03-20T00:00:00"}