{"id":"https://openalex.org/W7106611182","doi":"https://doi.org/10.1109/jiot.2025.3637028","title":"An Online Adaptive Anomaly Detection Framework for Fog Environments","display_name":"An Online Adaptive Anomaly Detection Framework for Fog Environments","publication_year":2025,"publication_date":"2025-11-25","ids":{"openalex":"https://openalex.org/W7106611182","doi":"https://doi.org/10.1109/jiot.2025.3637028"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2025.3637028","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3637028","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Yingqing Wang","orcid":"https://orcid.org/0009-0000-0462-6789"},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yingqing Wang","raw_affiliation_strings":["Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, College of Computer Science and Technology, Jilin University, Changchun, Jilin, China"],"affiliations":[{"raw_affiliation_string":"Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, College of Computer Science and Technology, Jilin University, Changchun, Jilin, China","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Guihe Qin","orcid":"https://orcid.org/0000-0002-2472-4324"},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guihe Qin","raw_affiliation_strings":["Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, College of Computer Science and Technology, Jilin University, Changchun, Jilin, China"],"affiliations":[{"raw_affiliation_string":"Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, College of Computer Science and Technology, Jilin University, Changchun, Jilin, China","institution_ids":["https://openalex.org/I194450716"]}]},{"author_position":"last","author":{"id":null,"display_name":"Gaoxiang Lan","orcid":null},"institutions":[{"id":"https://openalex.org/I194450716","display_name":"Jilin University","ror":"https://ror.org/00js3aw79","country_code":"CN","type":"education","lineage":["https://openalex.org/I194450716"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Gaoxiang Lan","raw_affiliation_strings":["Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, College of Computer Science and Technology, Jilin University, Changchun, Jilin, China"],"affiliations":[{"raw_affiliation_string":"Key Laboratory of Symbolic Computation and Knowledge Engineering of Ministry of Education, College of Computer Science and Technology, Jilin University, Changchun, Jilin, China","institution_ids":["https://openalex.org/I194450716"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I194450716"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.77586994,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"3","first_page":"4857","last_page":"4870"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.7190999984741211,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.7190999984741211,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.05530000105500221,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.04010000079870224,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7901999950408936},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.578000009059906},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.5436999797821045},{"id":"https://openalex.org/keywords/concept-drift","display_name":"Concept drift","score":0.504800021648407},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.44510000944137573},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.4065000116825104},{"id":"https://openalex.org/keywords/edge-computing","display_name":"Edge computing","score":0.38269999623298645},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.3806999921798706},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.357699990272522},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.35679998993873596}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8377000093460083},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7901999950408936},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.578000009059906},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.5436999797821045},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.504800021648407},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.45179998874664307},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.44510000944137573},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.43650001287460327},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.4065000116825104},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.38269999623298645},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.3806999921798706},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3727000057697296},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.357699990272522},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.35679998993873596},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.35499998927116394},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.3391000032424927},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.3237999975681305},{"id":"https://openalex.org/C3739613","wikidata":"https://www.wikidata.org/wiki/Q679003","display_name":"Distributed Computing Environment","level":2,"score":0.32359999418258667},{"id":"https://openalex.org/C70061542","wikidata":"https://www.wikidata.org/wiki/Q989016","display_name":"Distributed database","level":2,"score":0.31450000405311584},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.3052999973297119},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.30399999022483826},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2994000017642975},{"id":"https://openalex.org/C2776151529","wikidata":"https://www.wikidata.org/wiki/Q3045304","display_name":"Object detection","level":3,"score":0.2980000078678131},{"id":"https://openalex.org/C46637626","wikidata":"https://www.wikidata.org/wiki/Q6693015","display_name":"Low latency (capital markets)","level":2,"score":0.28450000286102295},{"id":"https://openalex.org/C203595873","wikidata":"https://www.wikidata.org/wiki/Q25389927","display_name":"Change detection","level":2,"score":0.2782000005245209},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.27810001373291016},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.27300000190734863},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.26750001311302185},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.2669999897480011},{"id":"https://openalex.org/C2986652147","wikidata":"https://www.wikidata.org/wiki/Q21809931","display_name":"Fog computing","level":3,"score":0.2669000029563904},{"id":"https://openalex.org/C2777851325","wikidata":"https://www.wikidata.org/wiki/Q7094102","display_name":"Online model","level":2,"score":0.26089999079704285},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.2522999942302704}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2025.3637028","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3637028","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1972351357","display_name":null,"funder_award_id":"20210101166JC","funder_id":"https://openalex.org/F4320335953","funder_display_name":"Jilin Scientific and Technological Development Program"}],"funders":[{"id":"https://openalex.org/F4320335953","display_name":"Jilin Scientific and Technological Development Program","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":39,"referenced_works":["https://openalex.org/W2626498001","https://openalex.org/W2738226240","https://openalex.org/W2789828921","https://openalex.org/W2898017895","https://openalex.org/W2992362249","https://openalex.org/W3003804390","https://openalex.org/W3164541240","https://openalex.org/W3186191775","https://openalex.org/W3200219001","https://openalex.org/W4283316938","https://openalex.org/W4285199572","https://openalex.org/W4303449845","https://openalex.org/W4322102176","https://openalex.org/W4322730932","https://openalex.org/W4323055202","https://openalex.org/W4364322549","https://openalex.org/W4366378396","https://openalex.org/W4380607178","https://openalex.org/W4385834574","https://openalex.org/W4386196059","https://openalex.org/W4386913501","https://openalex.org/W4391229663","https://openalex.org/W4392028635","https://openalex.org/W4392405608","https://openalex.org/W4392746143","https://openalex.org/W4395680608","https://openalex.org/W4401047483","https://openalex.org/W4401508391","https://openalex.org/W4404645843","https://openalex.org/W4404931748","https://openalex.org/W4405232519","https://openalex.org/W4407893754","https://openalex.org/W4408094869","https://openalex.org/W4408145489","https://openalex.org/W4408878336","https://openalex.org/W4409042177","https://openalex.org/W4409153577","https://openalex.org/W4409466849","https://openalex.org/W7081972640"],"related_works":[],"abstract_inverted_index":{"As":[0],"an":[1,128],"extension":[2],"of":[3,15,34,56,112,119,137,191],"cloud":[4],"computing,":[5],"fog":[6,57,74,90,113],"computing":[7],"(FG)":[8],"deploys":[9],"storage":[10,110],"resources":[11],"to":[12,18,39,46,52,72,83],"the":[13,16,27,54,109,116,123,175,181,186,194],"edge":[14],"network":[17,32],"reduce":[19],"latency":[20],"and":[21,30,96,115,164,177,189],"improve":[22],"real-time":[23],"processing":[24],"capabilities.":[25],"However,":[26,76],"distributed":[28],"architecture":[29],"complex":[31],"environment":[33,184],"FG":[35],"make":[36,80],"it":[37,43,81],"vulnerable":[38],"abnormal":[40],"behaviors.":[41],"Therefore,":[42],"is":[44],"necessary":[45],"design":[47],"practical":[48],"anomaly":[49,65,131],"detection":[50,66,132,153],"methods":[51,79,105],"protect":[53,73],"security":[55],"nodes.":[58,75],"Previous":[59],"research":[60],"mainly":[61],"focuses":[62],"on":[63,156],"static":[64,78],"methods,":[67],"which":[68,135],"use":[69],"offline":[70],"training":[71],"these":[77],"difficult":[82],"cope":[84],"with":[85],"concept":[86,162],"drift":[87,152],"scenarios":[88],"in":[89,180],"environments":[91],"where":[92],"both":[93],"threat":[94],"situations":[95],"normal":[97],"behaviors":[98],"are":[99],"constantly":[100],"changing.":[101],"Furthermore,":[102],"existing":[103],"dynamic":[104,143],"do":[106],"not":[107],"consider":[108],"space":[111],"servers":[114],"labeling":[117],"limitations":[118],"experts.":[120],"To":[121],"address":[122],"above":[124],"challenges,":[125],"we":[126],"propose":[127],"online":[129],"adaptive":[130],"framework":[133],"(OAADF),":[134],"consists":[136],"three":[138],"key":[139],"modules:":[140],"a":[141,151,165],"statistics-based":[142],"feature":[144],"selection":[145],"module":[146,154,168],"for":[147,160,169],"removing":[148],"redundant":[149],"features,":[150],"based":[155],"block":[157],"similarity":[158],"changes":[159],"identifying":[161],"drift,":[163],"score-based":[166],"update":[167],"model":[170],"adaptation.":[171],"Experimental":[172],"validation":[173],"using":[174],"CICIDS2017":[176],"5G-NIDD":[178],"datasets":[179],"NS-3":[182],"simulation":[183],"demonstrates":[185],"superior":[187],"performance":[188],"practicality":[190],"OAADF,":[192],"surpassing":[193],"state-of-the-art":[195],"(SOTA)":[196],"solutions.":[197]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-11-25T00:00:00"}