{"id":"https://openalex.org/W7148701914","doi":"https://doi.org/10.1109/jiot.2026.3680712","title":"From Sensor to Server: Deployable Lightweight ML for IoT Intrusion Detection Across Network Layers","display_name":"From Sensor to Server: Deployable Lightweight ML for IoT Intrusion Detection Across Network Layers","publication_year":2026,"publication_date":"2026-04-03","ids":{"openalex":"https://openalex.org/W7148701914","doi":"https://doi.org/10.1109/jiot.2026.3680712"},"language":null,"primary_location":{"id":"doi:10.1109/jiot.2026.3680712","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3680712","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5130764885","display_name":"Ariel Justine N. Panopio","orcid":null},"institutions":[{"id":"https://openalex.org/I199440890","display_name":"American University of Sharjah","ror":"https://ror.org/001g2fj96","country_code":"AE","type":"education","lineage":["https://openalex.org/I199440890"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Ariel Justine N. Panopio","raw_affiliation_strings":["Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates"],"raw_orcid":"https://orcid.org/0009-0000-8168-6478","affiliations":[{"raw_affiliation_string":"Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates","institution_ids":["https://openalex.org/I199440890"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5117813350","display_name":"Hamza A. Abushahla","orcid":null},"institutions":[{"id":"https://openalex.org/I199440890","display_name":"American University of Sharjah","ror":"https://ror.org/001g2fj96","country_code":"AE","type":"education","lineage":["https://openalex.org/I199440890"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Hamza A. Abushahla","raw_affiliation_strings":["Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates"],"raw_orcid":"https://orcid.org/0009-0003-6247-6776","affiliations":[{"raw_affiliation_string":"Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates","institution_ids":["https://openalex.org/I199440890"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066329186","display_name":"Ali Reza Sajun","orcid":"https://orcid.org/0000-0003-1270-3005"},"institutions":[{"id":"https://openalex.org/I199440890","display_name":"American University of Sharjah","ror":"https://ror.org/001g2fj96","country_code":"AE","type":"education","lineage":["https://openalex.org/I199440890"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Ali Reza Sajun","raw_affiliation_strings":["Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0003-1270-3005","affiliations":[{"raw_affiliation_string":"Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates","institution_ids":["https://openalex.org/I199440890"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065318343","display_name":"Sameer Alawnah","orcid":"https://orcid.org/0000-0003-3647-9167"},"institutions":[{"id":"https://openalex.org/I199440890","display_name":"American University of Sharjah","ror":"https://ror.org/001g2fj96","country_code":"AE","type":"education","lineage":["https://openalex.org/I199440890"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Sameer Alawnah","raw_affiliation_strings":["Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0003-3647-9167","affiliations":[{"raw_affiliation_string":"Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates","institution_ids":["https://openalex.org/I199440890"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5066105108","display_name":"Fadi Aloul","orcid":"https://orcid.org/0000-0001-5129-7789"},"institutions":[{"id":"https://openalex.org/I199440890","display_name":"American University of Sharjah","ror":"https://ror.org/001g2fj96","country_code":"AE","type":"education","lineage":["https://openalex.org/I199440890"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Fadi Aloul","raw_affiliation_strings":["Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0001-5129-7789","affiliations":[{"raw_affiliation_string":"Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates","institution_ids":["https://openalex.org/I199440890"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035716630","display_name":"Imran Zualkernan","orcid":"https://orcid.org/0000-0002-1048-5633"},"institutions":[{"id":"https://openalex.org/I199440890","display_name":"American University of Sharjah","ror":"https://ror.org/001g2fj96","country_code":"AE","type":"education","lineage":["https://openalex.org/I199440890"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Imran Zualkernan","raw_affiliation_strings":["Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates"],"raw_orcid":"https://orcid.org/0000-0002-1048-5633","affiliations":[{"raw_affiliation_string":"Department of Computer Science ansd Engineering, American University of Sharjah, Sharjah, United Arab Emirates","institution_ids":["https://openalex.org/I199440890"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I199440890"],"apc_list":null,"apc_paid":null,"fwci":12.6106,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.98103566,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"13","issue":"14","first_page":"30483","last_page":"30517"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.12860000133514404,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.12860000133514404,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11896","display_name":"Opportunistic and Delay-Tolerant Networks","score":0.0731000006198883,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10080","display_name":"Energy Efficient Wireless Sensor Networks","score":0.05900000035762787,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6362000107765198},{"id":"https://openalex.org/keywords/wireless-sensor-network","display_name":"Wireless sensor network","score":0.5274999737739563},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5139999985694885},{"id":"https://openalex.org/keywords/intelligent-sensor","display_name":"Intelligent sensor","score":0.3158000111579895},{"id":"https://openalex.org/keywords/intrusion-prevention-system","display_name":"Intrusion prevention system","score":0.3140999972820282},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.3066999912261963}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7656999826431274},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6362000107765198},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.5274999737739563},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5139999985694885},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.48420000076293945},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3993000090122223},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.34549999237060547},{"id":"https://openalex.org/C176563091","wikidata":"https://www.wikidata.org/wiki/Q669238","display_name":"Intelligent sensor","level":3,"score":0.3158000111579895},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.3140999972820282},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3066999912261963},{"id":"https://openalex.org/C51675839","wikidata":"https://www.wikidata.org/wiki/Q1665681","display_name":"Intelligent Network","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.295199990272522},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.25690001249313354}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/jiot.2026.3680712","is_oa":false,"landing_page_url":"https://doi.org/10.1109/jiot.2026.3680712","pdf_url":null,"source":{"id":"https://openalex.org/S2480266640","display_name":"IEEE Internet of Things Journal","issn_l":"2327-4662","issn":["2327-4662","2372-2541"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet of Things Journal","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Connection":[0],"and":[1,20,53,65,127,161,189,232,240],"convenience":[2],"come":[3],"at":[4],"a":[5,35,105,115,119,228],"cost,":[6],"particularly":[7],"in":[8,145,153,179],"the":[9,24,73,80,91,99,170,177,184,200],"Internet":[10],"of":[11,38,121,172],"Things":[12],"(IoT),":[13],"where":[14,159],"smart":[15],"devices":[16],"such":[17],"as":[18],"bulbs":[19],"surveillance":[21],"cameras":[22],"widen":[23],"attack":[25],"surface":[26],"for":[27,70,85,217],"malicious":[28],"actors.":[29],"Intrusion":[30],"Detection":[31],"Systems":[32],"(IDSs)":[33],"are":[34,164],"critical":[36],"line":[37],"defense,":[39],"but":[40],"their":[41],"effectiveness":[42],"must":[43],"be":[44],"balanced":[45],"with":[46,96,123],"strict":[47],"resource":[48],"constraints":[49],"across":[50,72,132,186],"edge,":[51],"fog,":[52],"cloud":[54],"layers.":[55],"In":[56],"this":[57],"work,":[58],"we":[59,88,226],"propose":[60],"lightweight":[61],"machine":[62],"learning":[63,67],"(ML)":[64],"deep":[66],"(DL)":[68],"models":[69,78,93,144,174],"deployment":[71,185,235],"edge\u2013fog\u2013cloud":[74],"continuum,":[75],"evaluating":[76],"eight":[77],"on":[79],"RT-IoT2022":[81],"dataset.":[82],"Using":[83],"Optuna":[84],"hyperparameter":[86],"tuning,":[87],"find":[89],"that":[90,205],"ensemble":[92,143,173],"perform":[94],"best,":[95],"LightGBM":[97],"achieving":[98],"highest":[100],"macro-F1":[101,120],"score":[102],"(98.07%).":[103],"However,":[104],"compact":[106],"28.8":[107],"KB":[108],"Fully":[109],"Connected":[110],"Neural":[111],"Network":[112],"(FCNN)":[113],"offers":[114],"favorable":[116],"trade-off,":[117],"attaining":[118],"94.80%":[122],"consistent":[124],"sub-millisecond":[125],"inference":[126,154],"relatively":[128],"low":[129],"power":[130,215],"usage":[131],"all":[133],"devices.":[134],"Notably,":[135],"while":[136,175,206],"neural":[137],"networks":[138],"may":[139],"not":[140],"always":[141],"match":[142],"classification":[146],"performance,":[147],"they":[148],"exhibit":[149],"comparatively":[150],"lower":[151],"variability":[152],"times,":[155],"making":[156],"them":[157],"attractive":[158],"predictability":[160],"throughput":[162],"stability":[163],"crucial.":[165],"Our":[166],"statistical":[167],"testing":[168],"confirms":[169],"superiority":[171],"quantifying":[176],"gaps":[178],"performance.":[180],"We":[181,203],"further":[182],"analyze":[183],"diverse":[187],"hardware":[188],"compare":[190],"ONNX":[191],"runtimes":[192],"against":[193,221],"native":[194],"C/C++":[195],"code":[196],"generation":[197],"to":[198,237],"illustrate":[199],"convenience\u2013performance":[201],"trade-offs.":[202],"note":[204],"quantization":[207],"preserves":[208],"accuracy,":[209],"it":[210],"can":[211],"increase":[212],"latency":[213],"or":[214],"consumption":[216],"already-small":[218],"models,":[219],"cautioning":[220],"its":[222],"blanket":[223],"adoption.":[224],"Finally,":[225],"release":[227],"reproducible":[229],"end-to-end":[230],"pipeline":[231],"provide":[233],"practical":[234],"guidelines":[236],"support":[238],"model":[239],"device":[241],"selection":[242],"under":[243],"heterogeneous":[244],"IoT":[245],"constraints.":[246]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-07-09T05:49:46.723101","created_date":"2026-04-04T00:00:00"}
