{"id":"https://openalex.org/W4403937349","doi":"https://doi.org/10.1109/iscc61673.2024.10733733","title":"Enhancing IoT Network Security with Concept Drift-Aware Unsupervised Threat Detection","display_name":"Enhancing IoT Network Security with Concept Drift-Aware Unsupervised Threat Detection","publication_year":2024,"publication_date":"2024-06-26","ids":{"openalex":"https://openalex.org/W4403937349","doi":"https://doi.org/10.1109/iscc61673.2024.10733733"},"language":"en","primary_location":{"id":"doi:10.1109/iscc61673.2024.10733733","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc61673.2024.10733733","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://iris.unipa.it/bitstream/10447/664065/4/0237.pdf","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5038511121","display_name":"Vincenzo Agate","orcid":"https://orcid.org/0000-0002-3326-8500"},"institutions":[{"id":"https://openalex.org/I900890020","display_name":"University of Palermo","ror":"https://ror.org/044k9ta02","country_code":"IT","type":"education","lineage":["https://openalex.org/I900890020"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Vincenzo Agate","raw_affiliation_strings":["University of Palermo,Department of Engineering,Palermo,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Palermo,Department of Engineering,Palermo,Italy","institution_ids":["https://openalex.org/I900890020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016811183","display_name":"Alessandra De Paola","orcid":"https://orcid.org/0000-0002-7340-1847"},"institutions":[{"id":"https://openalex.org/I900890020","display_name":"University of Palermo","ror":"https://ror.org/044k9ta02","country_code":"IT","type":"education","lineage":["https://openalex.org/I900890020"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Alessandra De Paola","raw_affiliation_strings":["University of Palermo,Department of Engineering,Palermo,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Palermo,Department of Engineering,Palermo,Italy","institution_ids":["https://openalex.org/I900890020"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5009378175","display_name":"Salvatore Drago","orcid":null},"institutions":[{"id":"https://openalex.org/I127077003","display_name":"IMT School for Advanced Studies Lucca","ror":"https://ror.org/035gh3a49","country_code":"IT","type":"education","lineage":["https://openalex.org/I127077003"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Salvatore Drago","raw_affiliation_strings":["IMT School for Advanced Studies Lucca,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"IMT School for Advanced Studies Lucca,Italy","institution_ids":["https://openalex.org/I127077003"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5025014332","display_name":"Pierluca Ferraro","orcid":"https://orcid.org/0000-0003-1574-1111"},"institutions":[{"id":"https://openalex.org/I900890020","display_name":"University of Palermo","ror":"https://ror.org/044k9ta02","country_code":"IT","type":"education","lineage":["https://openalex.org/I900890020"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Pierluca Ferraro","raw_affiliation_strings":["University of Palermo,Department of Engineering,Palermo,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Palermo,Department of Engineering,Palermo,Italy","institution_ids":["https://openalex.org/I900890020"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035697089","display_name":"Giuseppe Lo Re","orcid":"https://orcid.org/0000-0002-8217-2230"},"institutions":[{"id":"https://openalex.org/I900890020","display_name":"University of Palermo","ror":"https://ror.org/044k9ta02","country_code":"IT","type":"education","lineage":["https://openalex.org/I900890020"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giuseppe Lo Re","raw_affiliation_strings":["University of Palermo,Department of Engineering,Palermo,Italy"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Palermo,Department of Engineering,Palermo,Italy","institution_ids":["https://openalex.org/I900890020"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":1.2219,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.83391253,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":98},"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.9980999827384949,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9965999722480774,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9796000123023987,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7384361028671265},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6588480472564697},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5092076659202576},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4432167708873749}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7384361028671265},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6588480472564697},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5092076659202576},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4432167708873749}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/iscc61673.2024.10733733","is_oa":false,"landing_page_url":"https://doi.org/10.1109/iscc61673.2024.10733733","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2024 IEEE Symposium on Computers and Communications (ISCC)","raw_type":"proceedings-article"},{"id":"pmh:oai:iris.unipa.it:10447/664065","is_oa":true,"landing_page_url":"https://hdl.handle.net/10447/664065","pdf_url":"https://iris.unipa.it/bitstream/10447/664065/4/0237.pdf","source":{"id":"https://openalex.org/S4306401065","display_name":"Nova Science Publishers (Nova Science Publishers, Inc.)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/bookPart"}],"best_oa_location":{"id":"pmh:oai:iris.unipa.it:10447/664065","is_oa":true,"landing_page_url":"https://hdl.handle.net/10447/664065","pdf_url":"https://iris.unipa.it/bitstream/10447/664065/4/0237.pdf","source":{"id":"https://openalex.org/S4306401065","display_name":"Nova Science Publishers (Nova Science Publishers, Inc.)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"info:eu-repo/semantics/bookPart"},"sustainable_development_goals":[{"display_name":"Climate action","score":0.5699999928474426,"id":"https://metadata.un.org/sdg/13"}],"awards":[{"id":"https://openalex.org/G1585674959","display_name":null,"funder_award_id":"1551.11-10-2022","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G1733109337","display_name":null,"funder_award_id":"1062/2021","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G2352013729","display_name":null,"funder_award_id":"DM 1062/2021","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G4154697042","display_name":null,"funder_award_id":"PE00000004","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G4508289328","display_name":null,"funder_award_id":"PE00000013","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G6051190257","display_name":null,"funder_award_id":"DM 1062","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"},{"id":"https://openalex.org/G6870533126","display_name":null,"funder_award_id":"2014-2020","funder_id":"https://openalex.org/F4320320300","funder_display_name":"European Commission"}],"funders":[{"id":"https://openalex.org/F4320320300","display_name":"European Commission","ror":"https://ror.org/00k4n6c32"}],"has_content":{"grobid_xml":false,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4403937349.pdf"},"referenced_works_count":27,"referenced_works":["https://openalex.org/W1964357740","https://openalex.org/W1970978220","https://openalex.org/W1980262437","https://openalex.org/W2099419573","https://openalex.org/W2296719434","https://openalex.org/W2611741873","https://openalex.org/W2885277525","https://openalex.org/W2898017895","https://openalex.org/W2908736334","https://openalex.org/W2926525016","https://openalex.org/W2962684045","https://openalex.org/W2966043754","https://openalex.org/W2994700598","https://openalex.org/W2998074434","https://openalex.org/W3015791395","https://openalex.org/W3123859009","https://openalex.org/W3130041243","https://openalex.org/W3159711257","https://openalex.org/W4220851938","https://openalex.org/W4254182148","https://openalex.org/W4255375128","https://openalex.org/W4361278397","https://openalex.org/W4361858935","https://openalex.org/W4389941938","https://openalex.org/W4392910427","https://openalex.org/W6766468631","https://openalex.org/W7064433692"],"related_works":["https://openalex.org/W4391375266","https://openalex.org/W2899084033","https://openalex.org/W2748952813","https://openalex.org/W4245926026","https://openalex.org/W4311097251","https://openalex.org/W2586548817","https://openalex.org/W2390279801","https://openalex.org/W2625093826","https://openalex.org/W4391913857","https://openalex.org/W2360633292"],"abstract_inverted_index":{"The":[0,83],"dynamic":[1],"characteristics":[2],"of":[3,5,29,75,134],"Internet":[4],"Things":[6],"(IoT)":[7],"systems":[8,15,50],"create":[9],"major":[10],"challenges":[11],"for":[12,72,89],"threat":[13],"detection":[14,74],"that":[16],"rely":[17],"on":[18],"machine":[19],"learning":[20],"models.":[21],"Over":[22],"time,":[23],"shifts":[24],"in":[25,61],"the":[26,58,62,100,109,146,149,154],"statistical":[27],"distribution":[28],"data":[30],"can":[31],"lead":[32],"to":[33,54],"drastic":[34],"performance":[35,151],"degradation.":[36],"This":[37],"phenomenon":[38],"is":[39],"known":[40],"as":[41,121,123,160],"concept":[42,90],"drift.":[43],"When":[44],"this":[45,65],"problem":[46],"occurs,":[47],"traditional":[48],"static":[49],"require":[51],"human":[52],"intervention":[53],"manually":[55],"retrain,":[56],"leaving":[57],"network":[59,115,125],"vulnerable":[60],"meantime.":[63],"In":[64],"paper,":[66],"we":[67],"propose":[68],"an":[69,104],"unsupervised":[70],"system":[71,86,101,155],"online":[73],"anomalous":[76],"traffic":[77,116,126],"generated":[78,117,127],"by":[79,102,118,128,153],"malware-infected":[80],"IoT":[81,119],"devices.":[82],"proposed":[84],"multi-tier":[85],"explicitly":[87],"accounts":[88],"drift,":[91],"automatically":[92],"retraining":[93],"only":[94],"when":[95],"necessary.":[96],"We":[97,136],"thoroughly":[98],"tested":[99],"performing":[103],"extensive":[105],"experimental":[106],"evaluation":[107],"using":[108,156],"real-world":[110],"IoT-23":[111],"dataset,":[112],"which":[113],"includes":[114],"devices":[120,129],"well":[122],"malicious":[124],"infected":[130],"with":[131,141],"different":[132],"types":[133],"malware.":[135],"also":[137],"compared":[138],"our":[139],"approach":[140],"other":[142],"state-of-the-art":[143],"work,":[144],"and":[145,167],"results":[147],"showed":[148],"remarkable":[150],"achieved":[152],"key":[157],"metrics":[158],"such":[159],"F1":[161],"score,":[162],"accuracy,":[163],"false":[164,168],"positive":[165],"rate":[166],"negative":[169],"rate.":[170]},"counts_by_year":[{"year":2026,"cited_by_count":1},{"year":2025,"cited_by_count":3}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2024-11-01T00:00:00"}