{"id":"https://openalex.org/W7123433120","doi":"https://doi.org/10.1109/jiot.2026.3653672","title":"A Semi-Supervised Meta-Negative-Learning Approach to Few-Shot Network Intrusion Detection in Internet of Things","display_name":"A Semi-Supervised Meta-Negative-Learning Approach to Few-Shot Network Intrusion Detection in Internet of Things","publication_year":2026,"publication_date":"2026-01-13","ids":{"openalex":"https://openalex.org/W7123433120","doi":"https://doi.org/10.1109/jiot.2026.3653672"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2026.3653672","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3653672","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5009979487","display_name":"Minyue Wu","orcid":"https://orcid.org/0000-0003-1301-7285"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Minyue Wu","raw_affiliation_strings":["China-Belt and Road Joint Laboratory on Measurement and Control Technology, School of Artificial Intelligence and Automation, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0003-1301-7285","affiliations":[{"raw_affiliation_string":"China-Belt and Road Joint Laboratory on Measurement and Control Technology, School of Artificial Intelligence and Automation, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Ying Zheng","orcid":"https://orcid.org/0000-0002-9626-3360"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Ying Zheng","raw_affiliation_strings":["China-Belt and Road Joint Laboratory on Measurement and Control Technology, School of Artificial Intelligence and Automation, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0000-0002-9626-3360","affiliations":[{"raw_affiliation_string":"China-Belt and Road Joint Laboratory on Measurement and Control Technology, School of Artificial Intelligence and Automation, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5122912708","display_name":"Yin Yang","orcid":null},"institutions":[{"id":"https://openalex.org/I4210144839","display_name":"Hamad bin Khalifa University","ror":"https://ror.org/03eyq4y97","country_code":"QA","type":"education","lineage":["https://openalex.org/I4210144839"]}],"countries":["QA"],"is_corresponding":false,"raw_author_name":"Yin Yang","raw_affiliation_strings":["College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar"],"raw_orcid":"https://orcid.org/0000-0002-0549-3882","affiliations":[{"raw_affiliation_string":"College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar","institution_ids":["https://openalex.org/I4210144839"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Jiachao Luo","orcid":"https://orcid.org/0009-0007-6584-8108"},"institutions":[{"id":"https://openalex.org/I47720641","display_name":"Huazhong University of Science and Technology","ror":"https://ror.org/00p991c53","country_code":"CN","type":"education","lineage":["https://openalex.org/I47720641"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiachao Luo","raw_affiliation_strings":["China-Belt and Road Joint Laboratory on Measurement and Control Technology, School of Artificial Intelligence and Automation, Huazhong University of Science and Technology, Wuhan, China"],"raw_orcid":"https://orcid.org/0009-0007-6584-8108","affiliations":[{"raw_affiliation_string":"China-Belt and Road Joint Laboratory on Measurement and Control Technology, School of Artificial Intelligence and Automation, Huazhong University of Science and Technology, Wuhan, China","institution_ids":["https://openalex.org/I47720641"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5027197549","display_name":"D. Wong","orcid":null},"institutions":[{"id":"https://openalex.org/I25846049","display_name":"National Tsing Hua University","ror":"https://ror.org/00zdnkx70","country_code":"TW","type":"education","lineage":["https://openalex.org/I25846049"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"David Shan-Hill Wong","raw_affiliation_strings":["Department of Chemical Engineering, National Tsing-Hua University, Hsinchu, Taiwan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Chemical Engineering, National Tsing-Hua University, Hsinchu, Taiwan","institution_ids":["https://openalex.org/I25846049"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0461426,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"13","issue":"7","first_page":"12974","last_page":"12987"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9172999858856201,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9172999858856201,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.009800000116229057,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0066999997943639755,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.8054999709129333},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.5205000042915344},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4810999929904938},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.45089998841285706},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.42820000648498535},{"id":"https://openalex.org/keywords/baseline","display_name":"Baseline (sea)","score":0.34779998660087585},{"id":"https://openalex.org/keywords/data-modeling","display_name":"Data modeling","score":0.33889999985694885}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8671000003814697},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.8054999709129333},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.5205000042915344},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4810999929904938},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4803999960422516},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.45089998841285706},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.42820000648498535},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4074999988079071},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4018000066280365},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.34779998660087585},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.33889999985694885},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.33820000290870667},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.30379998683929443},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.2987000048160553},{"id":"https://openalex.org/C90936777","wikidata":"https://www.wikidata.org/wiki/Q917189","display_name":"Host-based intrusion detection system","level":4,"score":0.2831999957561493},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.27000001072883606},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2628999948501587},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2563000023365021},{"id":"https://openalex.org/C13540734","wikidata":"https://www.wikidata.org/wiki/Q5318996","display_name":"Dynamic network analysis","level":2,"score":0.25119999051094055},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2026.3653672","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3653672","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G4368837627","display_name":null,"funder_award_id":"2024EHA033","funder_id":"https://openalex.org/F4320335830","funder_display_name":"International Science and Technology Cooperation Programme"},{"id":"https://openalex.org/G6836654465","display_name":null,"funder_award_id":"2024JCYJ031","funder_id":"https://openalex.org/F4320311058","funder_display_name":"Botswana International University of Science and Technology"},{"id":"https://openalex.org/G740618710","display_name":null,"funder_award_id":"2025A1515010134","funder_id":"https://openalex.org/F4320337111","funder_display_name":"Basic and Applied Basic Research Foundation of Guangdong Province"}],"funders":[{"id":"https://openalex.org/F4320311058","display_name":"Botswana International University of Science and Technology","ror":"https://ror.org/04cr2sq58"},{"id":"https://openalex.org/F4320335830","display_name":"International Science and Technology Cooperation Programme","ror":null},{"id":"https://openalex.org/F4320337111","display_name":"Basic and Applied Basic Research Foundation of Guangdong Province","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0],"dynamic":[1],"evolution":[2],"of":[3,5,167,180,187],"Internet":[4],"Things":[6],"(IoT)":[7],"threats":[8],"necessitates":[9],"reliable":[10],"network":[11,78,82],"intrusion":[12,79],"detection":[13,80,149],"(NID)":[14],"systems.":[15],"Such":[16],"systems":[17],"should":[18],"not":[19],"only":[20,49],"respond":[21],"to":[22,30,61,114,123,134],"known":[23],"security":[24],"risks":[25],"but":[26],"also":[27],"adapt":[28],"effectively":[29],"emerging":[31],"threats.":[32],"However,":[33],"practical":[34],"deployments":[35],"in":[36,157],"novel":[37],"IoT":[38],"environments":[39],"often":[40],"suffer":[41],"from":[42,131],"significant":[43],"data":[44,118],"scarcity.":[45],"In":[46],"these":[47],"cases,":[48],"a":[50,70,90,164],"few":[51],"labeled":[52],"samples":[53],"are":[54],"available":[55],"for":[56,76],"training,":[57],"which":[58],"typically":[59],"leads":[60],"poor":[62],"performance.":[63],"To":[64],"address":[65],"this":[66],"challenge,":[67],"we":[68],"introduce":[69],"Semi-supervised":[71],"Meta-negatIve-LEarning":[72],"approach,":[73],"termed":[74],"SMILE,":[75],"few-shot":[77,135],"using":[81],"traffic":[83,136],"data.":[84],"Our":[85],"approach":[86],"begins":[87],"by":[88,99,151],"pretraining":[89],"baseline":[91],"NID":[92],"model":[93],"with":[94,105],"historical":[95,132],"attack":[96],"data,":[97],"followed":[98],"an":[100],"improved":[101],"negative":[102],"learning":[103],"strategy":[104],"uncertainty-aware":[106],"pseudo-negative":[107],"labels.":[108],"Bagging":[109],"sampling":[110],"is":[111],"further":[112],"incorporated":[113],"dynamically":[115],"balance":[116],"pseudo-labeled":[117],"distributions":[119],"and":[120,160,174,182,189],"enhance":[121],"tolerance":[122],"labeling":[124],"errors.":[125],"SMILE":[126,146],"enables":[127],"effective":[128],"knowledge":[129],"transfer":[130],"attacks":[133],"streams.":[137],"Experimental":[138],"results":[139],"on":[140,171],"the":[141,172],"CICIDS-2017":[142],"dataset":[143],"demonstrate":[144],"that":[145],"significantly":[147],"improves":[148],"accuracy":[150,166],"7.30%\u201316.65%":[152],"across":[153],"diverse":[154],"classifier":[155],"architectures":[156],"both":[158],"5-shot":[159],"10-shot":[161,192],"scenarios,":[162],"achieving":[163],"peak":[165],"81.91%.":[168],"Additional":[169],"validation":[170],"Edge-IIoT":[173],"IoT-23":[175],"datasets":[176],"shows":[177],"consistent":[178],"improvements":[179],"9.38%":[181],"4.78%,":[183],"reaching":[184],"respective":[185],"accuracies":[186],"96.25%":[188],"84.08%":[190],"under":[191],"detection.":[193]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-01-14T00:00:00"}