{"id":"https://openalex.org/W3028069824","doi":"https://doi.org/10.1109/jiot.2020.2996425","title":"An Ensemble of Deep Recurrent Neural Networks for Detecting IoT Cyber Attacks Using Network Traffic","display_name":"An Ensemble of Deep Recurrent Neural Networks for Detecting IoT Cyber Attacks Using Network Traffic","publication_year":2020,"publication_date":"2020-05-21","ids":{"openalex":"https://openalex.org/W3028069824","doi":"https://doi.org/10.1109/jiot.2020.2996425","mag":"3028069824"},"language":"en","primary_location":{"id":"doi:10.1109/jiot.2020.2996425","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2020.2996425","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5058361458","display_name":"Mahdis Saharkhizan","orcid":null},"institutions":[{"id":"https://openalex.org/I166459259","display_name":"Shiraz University","ror":"https://ror.org/028qtbk54","country_code":"IR","type":"education","lineage":["https://openalex.org/I166459259"]}],"countries":["IR"],"is_corresponding":false,"raw_author_name":"Mahdis Saharkhizan","raw_affiliation_strings":["School of Electrical and Computer Engineering, Shiraz University, Shiraz, Iran"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Computer Engineering, Shiraz University, Shiraz, Iran","institution_ids":["https://openalex.org/I166459259"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5046380826","display_name":"Amin Azmoodeh","orcid":"https://orcid.org/0000-0002-4109-4395"},"institutions":[{"id":"https://openalex.org/I79817857","display_name":"University of Guelph","ror":"https://ror.org/01r7awg59","country_code":"CA","type":"education","lineage":["https://openalex.org/I79817857"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Amin Azmoodeh","raw_affiliation_strings":["Cyber Science Lab, University of Guelph, Guelph, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Cyber Science Lab, University of Guelph, Guelph, Canada","institution_ids":["https://openalex.org/I79817857"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038019914","display_name":"Ali Dehghantanha","orcid":"https://orcid.org/0000-0002-9294-7554"},"institutions":[{"id":"https://openalex.org/I79817857","display_name":"University of Guelph","ror":"https://ror.org/01r7awg59","country_code":"CA","type":"education","lineage":["https://openalex.org/I79817857"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Ali Dehghantanha","raw_affiliation_strings":["Cyber Science Lab, University of Guelph, Guelph, Canada"],"raw_orcid":"https://orcid.org/0000-0002-9294-7554","affiliations":[{"raw_affiliation_string":"Cyber Science Lab, University of Guelph, Guelph, Canada","institution_ids":["https://openalex.org/I79817857"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5001746807","display_name":"Kim\u2010Kwang Raymond Choo","orcid":"https://orcid.org/0000-0001-9208-5336"},"institutions":[{"id":"https://openalex.org/I45438204","display_name":"The University of Texas at San Antonio","ror":"https://ror.org/01kd65564","country_code":"US","type":"education","lineage":["https://openalex.org/I45438204"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kim-Kwang Raymond Choo","raw_affiliation_strings":["Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, USA"],"raw_orcid":"https://orcid.org/0000-0001-9208-5336","affiliations":[{"raw_affiliation_string":"Department of Information Systems and Cyber Security, University of Texas at San Antonio, San Antonio, USA","institution_ids":["https://openalex.org/I45438204"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087589295","display_name":"Reza M. Parizi","orcid":"https://orcid.org/0000-0002-0049-4296"},"institutions":[{"id":"https://openalex.org/I172980758","display_name":"Kennesaw State University","ror":"https://ror.org/00jeqjx33","country_code":"US","type":"education","lineage":["https://openalex.org/I172980758"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Reza M. Parizi","raw_affiliation_strings":["College of Computing and Software Engineering, Kennesaw State University, Marietta, USA"],"raw_orcid":"https://orcid.org/0000-0002-0049-4296","affiliations":[{"raw_affiliation_string":"College of Computing and Software Engineering, Kennesaw State University, Marietta, USA","institution_ids":["https://openalex.org/I172980758"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":17.0331,"has_fulltext":false,"cited_by_count":210,"citation_normalized_percentile":{"value":0.99402943,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":97,"max":100},"biblio":{"volume":"7","issue":"9","first_page":"8852","last_page":"8859"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":1.0,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9995999932289124,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8571677207946777},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.6531050801277161},{"id":"https://openalex.org/keywords/modbus","display_name":"Modbus","score":0.617514431476593},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5286429524421692},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.4958589971065521},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4522247910499573},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.4272307753562927},{"id":"https://openalex.org/keywords/big-data","display_name":"Big data","score":0.42456620931625366},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.42072439193725586},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.391822874546051},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.3706686496734619},{"id":"https://openalex.org/keywords/distributed-computing","display_name":"Distributed computing","score":0.35901951789855957},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3336217403411865},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.29655158519744873},{"id":"https://openalex.org/keywords/communications-protocol","display_name":"Communications protocol","score":0.10198318958282471}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8571677207946777},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.6531050801277161},{"id":"https://openalex.org/C2776666747","wikidata":"https://www.wikidata.org/wiki/Q1135322","display_name":"Modbus","level":3,"score":0.617514431476593},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5286429524421692},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4958589971065521},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4522247910499573},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.4272307753562927},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.42456620931625366},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.42072439193725586},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.391822874546051},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3706686496734619},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.35901951789855957},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3336217403411865},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.29655158519744873},{"id":"https://openalex.org/C12269588","wikidata":"https://www.wikidata.org/wiki/Q132364","display_name":"Communications protocol","level":2,"score":0.10198318958282471},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2020.2996425","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2020.2996425","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6200000047683716,"id":"https://metadata.un.org/sdg/16"}],"awards":[{"id":"https://openalex.org/G4799779668","display_name":"CCRI: Planning: Collaborative Research: A Software-defined Wireless Communications Network Research Infrastructure for the Industrial Internet of Things(IIoT)Research Community","funder_award_id":"1925723","funder_id":"https://openalex.org/F4320306076","funder_display_name":"National Science Foundation"}],"funders":[{"id":"https://openalex.org/F4320306076","display_name":"National Science Foundation","ror":"https://ror.org/021nxhr62"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1489073918","https://openalex.org/W2064675550","https://openalex.org/W2089944128","https://openalex.org/W2102976278","https://openalex.org/W2107867209","https://openalex.org/W2107878631","https://openalex.org/W2479819951","https://openalex.org/W2554861503","https://openalex.org/W2561368438","https://openalex.org/W2591712613","https://openalex.org/W2604105233","https://openalex.org/W2732916693","https://openalex.org/W2745390745","https://openalex.org/W2760313715","https://openalex.org/W2763978449","https://openalex.org/W2783810000","https://openalex.org/W2791879367","https://openalex.org/W2792450155","https://openalex.org/W2887434122","https://openalex.org/W2889885925","https://openalex.org/W2892556724","https://openalex.org/W2908140179","https://openalex.org/W2908530935","https://openalex.org/W2913497771","https://openalex.org/W2921573932","https://openalex.org/W2924196523","https://openalex.org/W2946893466","https://openalex.org/W2955014922","https://openalex.org/W2955810727","https://openalex.org/W2986458967","https://openalex.org/W2991150929","https://openalex.org/W3008195342","https://openalex.org/W3105915408","https://openalex.org/W4250664506","https://openalex.org/W4398786193","https://openalex.org/W6730045385","https://openalex.org/W6770900481"],"related_works":["https://openalex.org/W3015293401","https://openalex.org/W2394363056","https://openalex.org/W2362216025","https://openalex.org/W2371014880","https://openalex.org/W2357768347","https://openalex.org/W4223430807","https://openalex.org/W2379048028","https://openalex.org/W2371067528","https://openalex.org/W2389411834","https://openalex.org/W2379052219"],"abstract_inverted_index":{"Internet-of-Things":[0],"(IoT)":[1],"devices":[2,36],"and":[3,28,37,44,53,128],"systems":[4,38],"will":[5],"be":[6],"increasingly":[7],"targeted":[8],"by":[9,41],"cybercriminals":[10],"(including":[11],"nation":[12],"state-sponsored":[13],"or":[14],"affiliated":[15],"threat":[16,51],"actors)":[17],"as":[18],"they":[19],"become":[20],"an":[21,63,89,105,130],"integral":[22],"part":[23],"of":[24,46,82,91,116,124,133,139],"our":[25,77,117],"connected":[26],"society":[27],"ecosystem.":[29],"However,":[30],"the":[31,42,48,109,114,137],"challenges":[32],"in":[33,58,136],"securing":[34],"these":[35],"are":[39,95],"compounded":[40],"scale":[43],"diversity":[45],"deployment,":[47],"fast-paced":[49],"cyber":[50,71,140],"landscape,":[52],"many":[54],"other":[55],"factors.":[56],"Thus,":[57],"this":[59],"article,":[60],"we":[61],"design":[62],"approach":[64,78,118],"using":[65,98,119],"advanced":[66],"deep":[67],"learning":[68],"to":[69,102],"detect":[70],"attacks":[72,141],"against":[73,142],"IoT":[74,143],"systems.":[75],"Specifically,":[76],"integrates":[79],"a":[80,99,120],"set":[81,123],"long":[83],"short-term":[84],"memory":[85],"(LSTM)":[86],"modules":[87,94],"into":[88],"ensemble":[90],"detectors.":[92],"These":[93],"then":[96],"merged":[97],"decision":[100],"tree":[101],"arrive":[103],"at":[104,108],"aggregated":[106],"output":[107],"final":[110],"stage.":[111],"We":[112],"evaluate":[113],"effectiveness":[115],"real-world":[121],"data":[122],"Modbus":[125],"network":[126],"traffic":[127],"obtain":[129],"accuracy":[131],"rate":[132],"over":[134],"99%":[135],"detection":[138],"devices.":[144]},"counts_by_year":[{"year":2026,"cited_by_count":8},{"year":2025,"cited_by_count":36},{"year":2024,"cited_by_count":39},{"year":2023,"cited_by_count":51},{"year":2022,"cited_by_count":37},{"year":2021,"cited_by_count":34},{"year":2020,"cited_by_count":5}],"updated_date":"2026-07-21T08:15:58.654021","created_date":"2025-10-10T00:00:00"}