{"id":"https://openalex.org/W4386260388","doi":"https://doi.org/10.1109/infocomwkshps57453.2023.10225834","title":"A Two-Tier Anomaly-based Intrusion Detection Approach for IoT-Enabled Smart Cities","display_name":"A Two-Tier Anomaly-based Intrusion Detection Approach for IoT-Enabled Smart Cities","publication_year":2023,"publication_date":"2023-05-20","ids":{"openalex":"https://openalex.org/W4386260388","doi":"https://doi.org/10.1109/infocomwkshps57453.2023.10225834"},"language":"en","primary_location":{"id":"doi:10.1109/infocomwkshps57453.2023.10225834","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocomwkshps57453.2023.10225834","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2023 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010803372","display_name":"Mosab Hamdan","orcid":"https://orcid.org/0000-0002-1008-3028"},"institutions":[{"id":"https://openalex.org/I17974374","display_name":"Universidade de S\u00e3o Paulo","ror":"https://ror.org/036rp1748","country_code":"BR","type":"education","lineage":["https://openalex.org/I17974374"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Mosab Hamdan","raw_affiliation_strings":["University of Sao Paulo (USP),Department of Computer Science,Brazil","Department of Computer Science, University of Sao Paulo (USP), Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sao Paulo (USP),Department of Computer Science,Brazil","institution_ids":["https://openalex.org/I17974374"]},{"raw_affiliation_string":"Department of Computer Science, University of Sao Paulo (USP), Brazil","institution_ids":["https://openalex.org/I17974374"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5081937470","display_name":"Arwa M. Eldhai","orcid":"https://orcid.org/0000-0002-0633-1017"},"institutions":[{"id":"https://openalex.org/I9353105","display_name":"Sudan University of Science and Technology","ror":"https://ror.org/02fwtg066","country_code":"SD","type":"education","lineage":["https://openalex.org/I9353105"]}],"countries":["SD"],"is_corresponding":false,"raw_author_name":"Arwa M. Eldhai","raw_affiliation_strings":["University of Science and Technology,Faculty of Engineering,Sudan","Faculty of Engineering, University of Science and Technology, Sudan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Science and Technology,Faculty of Engineering,Sudan","institution_ids":["https://openalex.org/I9353105"]},{"raw_affiliation_string":"Faculty of Engineering, University of Science and Technology, Sudan","institution_ids":["https://openalex.org/I9353105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5023376042","display_name":"Samah Abdelsalam","orcid":null},"institutions":[{"id":"https://openalex.org/I150406212","display_name":"University of Khartoum","ror":"https://ror.org/02jbayz55","country_code":"SD","type":"education","lineage":["https://openalex.org/I150406212"]}],"countries":["SD"],"is_corresponding":false,"raw_author_name":"Samah Abdelsalam","raw_affiliation_strings":["Khartoum University,Faculty of Mathematical Sciences and Informatics,Sudan","Faculty of Mathematical Sciences and Informatics, Khartoum University, Sudan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Khartoum University,Faculty of Mathematical Sciences and Informatics,Sudan","institution_ids":["https://openalex.org/I150406212"]},{"raw_affiliation_string":"Faculty of Mathematical Sciences and Informatics, Khartoum University, Sudan","institution_ids":["https://openalex.org/I150406212"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100743329","display_name":"Kifayat Ullah","orcid":"https://orcid.org/0000-0002-6991-4287"},"institutions":[{"id":"https://openalex.org/I17974374","display_name":"Universidade de S\u00e3o Paulo","ror":"https://ror.org/036rp1748","country_code":"BR","type":"education","lineage":["https://openalex.org/I17974374"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Kifayat Ullah","raw_affiliation_strings":["University of Sao Paulo (USP),Department of Computer Science,Brazil","Department of Computer Science, University of Sao Paulo (USP), Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sao Paulo (USP),Department of Computer Science,Brazil","institution_ids":["https://openalex.org/I17974374"]},{"raw_affiliation_string":"Department of Computer Science, University of Sao Paulo (USP), Brazil","institution_ids":["https://openalex.org/I17974374"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088617561","display_name":"Ali Kashif Bashir","orcid":"https://orcid.org/0000-0003-2601-9327"},"institutions":[{"id":"https://openalex.org/I11983389","display_name":"Manchester Metropolitan University","ror":"https://ror.org/02hstj355","country_code":"GB","type":"education","lineage":["https://openalex.org/I11983389"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Ali Kashif Bashir","raw_affiliation_strings":["Manchester Metropolitan University,Department of Computing and Mathematics,UK","Department of Computing and Mathematics, Manchester Metropolitan University, UK"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Manchester Metropolitan University,Department of Computing and Mathematics,UK","institution_ids":["https://openalex.org/I11983389"]},{"raw_affiliation_string":"Department of Computing and Mathematics, Manchester Metropolitan University, UK","institution_ids":["https://openalex.org/I11983389"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5011389229","display_name":"Muhammad Nadzir Marsono","orcid":"https://orcid.org/0000-0002-7468-7461"},"institutions":[{"id":"https://openalex.org/I4576418","display_name":"University of Technology Malaysia","ror":"https://ror.org/026w31v75","country_code":"MY","type":"education","lineage":["https://openalex.org/I4576418"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"MN Marsono","raw_affiliation_strings":["Universiti Teknologi Malaysia,Faculty of Electrical Engineering,Malaysia","Faculty of Electrical Engineering, Universiti Teknologi Malaysia, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Universiti Teknologi Malaysia,Faculty of Electrical Engineering,Malaysia","institution_ids":["https://openalex.org/I4576418"]},{"raw_affiliation_string":"Faculty of Electrical Engineering, Universiti Teknologi Malaysia, Malaysia","institution_ids":["https://openalex.org/I4576418"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5069259459","display_name":"F\u00e1bio Kon","orcid":"https://orcid.org/0000-0003-3888-7340"},"institutions":[{"id":"https://openalex.org/I17974374","display_name":"Universidade de S\u00e3o Paulo","ror":"https://ror.org/036rp1748","country_code":"BR","type":"education","lineage":["https://openalex.org/I17974374"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Fabio Kon","raw_affiliation_strings":["University of Sao Paulo (USP),Department of Computer Science,Brazil","Department of Computer Science, University of Sao Paulo (USP), Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sao Paulo (USP),Department of Computer Science,Brazil","institution_ids":["https://openalex.org/I17974374"]},{"raw_affiliation_string":"Department of Computer Science, University of Sao Paulo (USP), Brazil","institution_ids":["https://openalex.org/I17974374"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5067928085","display_name":"Daniel Mac\u00eado Batista","orcid":"https://orcid.org/0000-0002-4865-5896"},"institutions":[{"id":"https://openalex.org/I17974374","display_name":"Universidade de S\u00e3o Paulo","ror":"https://ror.org/036rp1748","country_code":"BR","type":"education","lineage":["https://openalex.org/I17974374"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Daniel Mac\u00eado Batista","raw_affiliation_strings":["University of Sao Paulo (USP),Department of Computer Science,Brazil","Department of Computer Science, University of Sao Paulo (USP), Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Sao Paulo (USP),Department of Computer Science,Brazil","institution_ids":["https://openalex.org/I17974374"]},{"raw_affiliation_string":"Department of Computer Science, University of Sao Paulo (USP), Brazil","institution_ids":["https://openalex.org/I17974374"]}]}],"institutions":[],"countries_distinct_count":4,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":7,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9991000294685364,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9977999925613403,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8192561864852905},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.584071934223175},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5663912296295166},{"id":"https://openalex.org/keywords/boosting","display_name":"Boosting (machine learning)","score":0.5501604080200195},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5399333238601685},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.532741367816925},{"id":"https://openalex.org/keywords/edge-computing","display_name":"Edge computing","score":0.5096757411956787},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.5071377754211426},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.481579065322876},{"id":"https://openalex.org/keywords/gradient-boosting","display_name":"Gradient boosting","score":0.46882718801498413},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.444672167301178},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.421234667301178},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.4150926470756531},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.34151408076286316},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.21535572409629822},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.09568831324577332}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8192561864852905},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.584071934223175},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5663912296295166},{"id":"https://openalex.org/C46686674","wikidata":"https://www.wikidata.org/wiki/Q466303","display_name":"Boosting (machine learning)","level":2,"score":0.5501604080200195},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5399333238601685},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.532741367816925},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.5096757411956787},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.5071377754211426},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.481579065322876},{"id":"https://openalex.org/C70153297","wikidata":"https://www.wikidata.org/wiki/Q5591907","display_name":"Gradient boosting","level":3,"score":0.46882718801498413},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.444672167301178},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.421234667301178},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.4150926470756531},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.34151408076286316},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.21535572409629822},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.09568831324577332},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/infocomwkshps57453.2023.10225834","is_oa":false,"landing_page_url":"https://doi.org/10.1109/infocomwkshps57453.2023.10225834","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE INFOCOM 2023 - IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Industry, innovation and infrastructure","score":0.4699999988079071,"id":"https://metadata.un.org/sdg/9"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W1678356000","https://openalex.org/W1700449338","https://openalex.org/W1772700132","https://openalex.org/W1975415766","https://openalex.org/W2036695131","https://openalex.org/W2099111195","https://openalex.org/W2107867209","https://openalex.org/W2296509296","https://openalex.org/W2334853001","https://openalex.org/W2521011602","https://openalex.org/W2569174917","https://openalex.org/W2786075294","https://openalex.org/W2829366072","https://openalex.org/W2890645737","https://openalex.org/W2902106343","https://openalex.org/W2914521857","https://openalex.org/W2948490758","https://openalex.org/W2958489519","https://openalex.org/W2962949934","https://openalex.org/W2963324729","https://openalex.org/W2963683434","https://openalex.org/W3005805195","https://openalex.org/W3010529744","https://openalex.org/W3035366189","https://openalex.org/W3164796711","https://openalex.org/W3195161028","https://openalex.org/W4210628263","https://openalex.org/W4212986808","https://openalex.org/W4213315944","https://openalex.org/W4313525960","https://openalex.org/W6697252871","https://openalex.org/W6745976546","https://openalex.org/W6756555459","https://openalex.org/W6800459847"],"related_works":["https://openalex.org/W2967733078","https://openalex.org/W3204430031","https://openalex.org/W3137904399","https://openalex.org/W4310492845","https://openalex.org/W2885778889","https://openalex.org/W2766514146","https://openalex.org/W2885516856","https://openalex.org/W4289703016","https://openalex.org/W4310224730","https://openalex.org/W1985505753"],"abstract_inverted_index":{"The":[0],"Internet":[1],"of":[2,50,153],"Things":[3],"(IoT),":[4],"like":[5],"other":[6],"network":[7,148],"infrastructures,":[8],"requires":[9],"Intrusion":[10],"Detection":[11],"Systems":[12],"(IDSs)":[13],"to":[14,132,156],"be":[15,36,157],"protected":[16],"against":[17],"attacks.":[18],"When":[19],"deploying":[20],"an":[21,129],"IDS":[22,42,109],"in":[23,79,95,116],"IoT-based":[24],"smart":[25],"city":[26],"environments,":[27],"the":[28,48,51,80,85,96,101,107,126,135,145,154],"balance":[29],"between":[30],"latency":[31],"and":[32,69,159],"node":[33],"capacity":[34],"must":[35],"considered,":[37],"which":[38],"justifies":[39],"a":[40,58,88],"distributed":[41],"with":[43,123],"specific":[44],"classifiers":[45],"based":[46],"on":[47,67],"location":[49],"system":[52],"processing":[53],"nodes.":[54,71],"This":[55],"paper":[56],"proposes":[57],"two-level":[59],"classification":[60],"technique":[61],"for":[62],"collaborative":[63],"anomaly-based":[64],"IDSs":[65],"deployed":[66],"fog":[68],"edge":[70],"A":[72],"Gradient":[73],"Boosting":[74],"Classifier":[75],"(GBC)":[76],"is":[77,93],"used":[78,94],"lower":[81],"layer":[82,98],"classifier":[83,99],"at":[84,100],"edge,":[86],"while":[87,134],"Convolutional":[89],"Neural":[90],"Network":[91],"(CNN)":[92],"upper":[97],"fog.":[102],"Experimentation":[103],"has":[104],"demonstrated":[105],"that":[106],"suggested":[108],"architecture":[110],"outperforms":[111],"previous":[112],"solutions.":[113],"For":[114],"instance,":[115],"some":[117],"scenarios,":[118],"when":[119],"comparing":[120],"our":[121,140],"proposal":[122,141],"Random":[124],"Forest,":[125],"former":[127],"obtained":[128,137],"accuracy":[130],"equal":[131],"99.1%,":[133],"latter":[136],"95.3%.":[138],"Furthermore,":[139],"can":[142],"better":[143],"select":[144],"most":[146],"important":[147],"traffic":[149],"features,":[150],"reducing":[151],"76%":[152],"data":[155],"analyzed":[158],"improving":[160],"privacy.":[161]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":1},{"year":2024,"cited_by_count":5}],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-10-10T00:00:00"}