{"id":"https://openalex.org/W4416965769","doi":"https://doi.org/10.1109/jiot.2025.3639716","title":"HybridGF: A Novel Data Augmentation Algorithm for Detecting the Extremely Imbalanced Malicious Traffic in Industrial Internet of Things","display_name":"HybridGF: A Novel Data Augmentation Algorithm for Detecting the Extremely Imbalanced Malicious Traffic in Industrial Internet of Things","publication_year":2025,"publication_date":"2025-12-03","ids":{"openalex":"https://openalex.org/W4416965769","doi":"https://doi.org/10.1109/jiot.2025.3639716"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2025.3639716","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3639716","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5085534511","display_name":"Nan Wei","orcid":"https://orcid.org/0000-0003-3477-9211"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Nan Wei","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Zhuangcheng Wu","orcid":"https://orcid.org/0009-0004-1183-6599"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhuangcheng Wu","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100411650","display_name":"Lihua Yin","orcid":"https://orcid.org/0000-0001-8829-4442"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Lihua Yin","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5057397257","display_name":"Xiao Cai","orcid":"https://orcid.org/0000-0003-3400-5566"},"institutions":[{"id":"https://openalex.org/I37987034","display_name":"Guangzhou University","ror":"https://ror.org/05ar8rn06","country_code":"CN","type":"education","lineage":["https://openalex.org/I37987034"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xiao Cai","raw_affiliation_strings":["Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China"],"affiliations":[{"raw_affiliation_string":"Cyberspace Institute of Advanced Technology, Guangzhou University, Guangzhou, Guangdong, China","institution_ids":["https://openalex.org/I37987034"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5085534511"],"corresponding_institution_ids":["https://openalex.org/I37987034"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.20065911,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"4","first_page":"7179","last_page":"7191"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.7803000211715698,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.7803000211715698,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.0746999979019165,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.016599999740719795,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.5454999804496765},{"id":"https://openalex.org/keywords/euclidean-distance","display_name":"Euclidean distance","score":0.43970000743865967},{"id":"https://openalex.org/keywords/interpolation","display_name":"Interpolation (computer graphics)","score":0.4146000146865845},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.3637000024318695},{"id":"https://openalex.org/keywords/internet-traffic","display_name":"Internet traffic","score":0.36250001192092896},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.328000009059906},{"id":"https://openalex.org/keywords/data-compression","display_name":"Data compression","score":0.326200008392334},{"id":"https://openalex.org/keywords/linear-interpolation","display_name":"Linear interpolation","score":0.3172000050544739}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7892000079154968},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.5454999804496765},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4666000008583069},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.4490000009536743},{"id":"https://openalex.org/C120174047","wikidata":"https://www.wikidata.org/wiki/Q847073","display_name":"Euclidean distance","level":2,"score":0.43970000743865967},{"id":"https://openalex.org/C137800194","wikidata":"https://www.wikidata.org/wiki/Q11713455","display_name":"Interpolation (computer graphics)","level":3,"score":0.4146000146865845},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.3637000024318695},{"id":"https://openalex.org/C63969886","wikidata":"https://www.wikidata.org/wiki/Q3536440","display_name":"Internet traffic","level":3,"score":0.36250001192092896},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.328000009059906},{"id":"https://openalex.org/C78548338","wikidata":"https://www.wikidata.org/wiki/Q2493","display_name":"Data compression","level":2,"score":0.326200008392334},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3179999887943268},{"id":"https://openalex.org/C171836373","wikidata":"https://www.wikidata.org/wiki/Q2266329","display_name":"Linear interpolation","level":3,"score":0.3172000050544739},{"id":"https://openalex.org/C176715033","wikidata":"https://www.wikidata.org/wiki/Q2080768","display_name":"Traffic generation model","level":2,"score":0.3052000105381012},{"id":"https://openalex.org/C62354387","wikidata":"https://www.wikidata.org/wiki/Q875399","display_name":"Boundary (topology)","level":2,"score":0.288100004196167},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.2865999937057495},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.28139999508857727},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27730000019073486},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2678999900817871},{"id":"https://openalex.org/C2780898871","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Performance metric","level":2,"score":0.26330000162124634},{"id":"https://openalex.org/C57869625","wikidata":"https://www.wikidata.org/wiki/Q1783502","display_name":"Rate of convergence","level":3,"score":0.26089999079704285},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.2581000030040741},{"id":"https://openalex.org/C129848803","wikidata":"https://www.wikidata.org/wiki/Q2564360","display_name":"Sample size determination","level":2,"score":0.25760000944137573},{"id":"https://openalex.org/C2781317605","wikidata":"https://www.wikidata.org/wiki/Q7832483","display_name":"Traffic analysis","level":2,"score":0.2551000118255615},{"id":"https://openalex.org/C167966045","wikidata":"https://www.wikidata.org/wiki/Q5532625","display_name":"Generative model","level":3,"score":0.2531999945640564}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2025.3639716","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2025.3639716","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G2935005168","display_name":null,"funder_award_id":"NO.62502107","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G2997352541","display_name":null,"funder_award_id":"No. 2022YFB3104100","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G4937362321","display_name":null,"funder_award_id":"2022YFB3104100","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":34,"referenced_works":["https://openalex.org/W2099940443","https://openalex.org/W2132791018","https://openalex.org/W2148143831","https://openalex.org/W2785678896","https://openalex.org/W2998696623","https://openalex.org/W3018495625","https://openalex.org/W3024905798","https://openalex.org/W3043320740","https://openalex.org/W3111180383","https://openalex.org/W3131088496","https://openalex.org/W3162956350","https://openalex.org/W3195631217","https://openalex.org/W4210743106","https://openalex.org/W4212847608","https://openalex.org/W4220770904","https://openalex.org/W4285199572","https://openalex.org/W4297984369","https://openalex.org/W4308194848","https://openalex.org/W4312384107","https://openalex.org/W4327750468","https://openalex.org/W4362705493","https://openalex.org/W4376619756","https://openalex.org/W4387245207","https://openalex.org/W4388505134","https://openalex.org/W4388758247","https://openalex.org/W4388948449","https://openalex.org/W4389664993","https://openalex.org/W4392029839","https://openalex.org/W4401213822","https://openalex.org/W4404610729","https://openalex.org/W4404622795","https://openalex.org/W4404726301","https://openalex.org/W4406858510","https://openalex.org/W4415774286"],"related_works":[],"abstract_inverted_index":{"Extreme":[0],"imbalance":[1,32],"in":[2,16,46,64,152,184,207],"sample":[3,37,66,150],"ratio":[4],"between":[5],"traffic":[6,14,34,76,117,141,172,189],"classes":[7],"is":[8,24],"an":[9,25,211],"important":[10],"factor":[11],"affecting":[12],"malicious":[13,33,171,188],"detection":[15,182],"Industrial":[17],"Internet":[18],"of":[19,73,94,116,126,139,149,214],"Things":[20],"(IIoT).":[21],"Sample":[22],"generation":[23,38,54,67,98,107],"effective":[26],"means":[27],"to":[28,70,113,136,167,191,217],"address":[29],"the":[30,71,114,124,147,197,200,218,226],"extreme":[31],"detection.":[35,173],"Traditional":[36],"methods":[39,55],"based":[40,56],"on":[41,57],"linear":[42],"interpolation":[43],"have":[44,62],"difficulty":[45,63],"generating":[47,74],"diverse":[48],"samples":[49,111,128],"for":[50,225],"scarce":[51],"traffic;":[52],"while":[53],"Generative":[58],"Adversarial":[59],"Networks":[60],"(GANs)":[61],"controlling":[65],"boundaries,":[68],"leading":[69],"problem":[72],"overlapping":[75,138],"samples.":[77,119,142],"To":[78],"solve":[79],"this":[80],"problem,":[81],"we":[82,158],"propose":[83],"a":[84,180,204],"novel":[85],"data":[86,193],"enhancement":[87,194],"algorithm":[88],"called":[89],"HybridGF.":[90],"The":[91,105,120,143,174],"method":[92],"consists":[93],"three":[95,160],"modules:":[96],"hybrid":[97,106],"module,":[99,101],"filtering":[100,121],"and":[102,133,165],"explosion":[103,144],"module.":[104],"module":[108,122,145],"generates":[109],"diversity":[110],"adapted":[112],"number":[115],"category":[118,228],"controls":[123],"boundary":[125],"generated":[127,140],"by":[129,230],"combining":[130],"cluster":[131],"analysis":[132],"Euclidean":[134],"distance":[135],"avoid":[137],"regulates":[146],"distribution":[148],"density":[151],"different":[153],"clusters.":[154],"In":[155,196],"our":[156],"experiments,":[157],"use":[159],"classical":[161],"datasets":[162],"(NSL-KDD,":[163],"IoT-23,":[164],"TON-IoT)":[166],"simulate":[168],"extremely":[169,186],"unbalanced":[170],"results":[175],"show":[176],"that":[177],"HybridGF":[178,201],"has":[179],"higher":[181],"rate":[183,224],"detecting":[185],"imbalanced":[187],"compared":[190,216],"other":[192],"algorithms.":[195],"NSL-KDD":[198],"dataset,":[199],"model":[202],"demonstrates":[203],"significant":[205],"advantage":[206],"recall":[208,223],"rate,":[209],"with":[210],"overall":[212],"improvement":[213],"14.03%":[215],"baseline":[219],"model.":[220],"Specifically,":[221],"its":[222],"DoS":[227],"increased":[229],"4.6%.":[231]},"counts_by_year":[],"updated_date":"2026-04-09T08:11:56.329763","created_date":"2025-12-03T00:00:00"}