{"id":"https://openalex.org/W4410086655","doi":"https://doi.org/10.1109/les.2025.3567025","title":"A Sample-Based, Multistage Machine Learning Pipeline for Scalable IoT Threat Detection","display_name":"A Sample-Based, Multistage Machine Learning Pipeline for Scalable IoT Threat Detection","publication_year":2025,"publication_date":"2025-05-05","ids":{"openalex":"https://openalex.org/W4410086655","doi":"https://doi.org/10.1109/les.2025.3567025"},"language":"en","primary_location":{"id":"doi:10.1109/les.2025.3567025","is_oa":true,"landing_page_url":"https://doi.org/10.1109/les.2025.3567025","pdf_url":null,"source":{"id":"https://openalex.org/S22443479","display_name":"IEEE Embedded Systems Letters","issn_l":"1943-0663","issn":["1943-0663","1943-0671"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Embedded Systems Letters","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/les.2025.3567025","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5053705864","display_name":"Marcelo Vin\u00edcius Cysneiros Arag\u00e3o","orcid":"https://orcid.org/0000-0001-8999-8169"},"institutions":[{"id":"https://openalex.org/I71346753","display_name":"National Institute of Telecommunications","ror":"https://ror.org/0378w3a30","country_code":"BR","type":"facility","lineage":["https://openalex.org/I71346753"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Marcelo V. C. Arag\u00e3o","raw_affiliation_strings":["National Institute of Telecommunications –Inatel, Santa Rita do Sapucaí, Brazil","National Institute of Telecommunications – Inatel, Av. João de Camargo, 510, Santa Rita do Sapucaí, MG, Brazil"],"raw_orcid":"https://orcid.org/0000-0001-8999-8169","affiliations":[{"raw_affiliation_string":"National Institute of Telecommunications –Inatel, Santa Rita do Sapucaí, Brazil","institution_ids":["https://openalex.org/I71346753"]},{"raw_affiliation_string":"National Institute of Telecommunications – Inatel, Av. João de Camargo, 510, Santa Rita do Sapucaí, MG, Brazil","institution_ids":["https://openalex.org/I71346753"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113241488","display_name":"Tiago de M. Pereira","orcid":"https://orcid.org/0000-0001-7892-0980"},"institutions":[{"id":"https://openalex.org/I71346753","display_name":"National Institute of Telecommunications","ror":"https://ror.org/0378w3a30","country_code":"BR","type":"facility","lineage":["https://openalex.org/I71346753"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Tiago de M. Pereira","raw_affiliation_strings":["National Institute of Telecommunications –Inatel, Santa Rita do Sapucaí, Brazil","National Institute of Telecommunications – Inatel, Av. João de Camargo, 510, Santa Rita do Sapucaí, MG, Brazil"],"raw_orcid":"https://orcid.org/0000-0001-7892-0980","affiliations":[{"raw_affiliation_string":"National Institute of Telecommunications –Inatel, Santa Rita do Sapucaí, Brazil","institution_ids":["https://openalex.org/I71346753"]},{"raw_affiliation_string":"National Institute of Telecommunications – Inatel, Av. João de Camargo, 510, Santa Rita do Sapucaí, MG, Brazil","institution_ids":["https://openalex.org/I71346753"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5017715993","display_name":"Felipe A. P. de Figueiredo","orcid":"https://orcid.org/0000-0002-2167-7286"},"institutions":[{"id":"https://openalex.org/I71346753","display_name":"National Institute of Telecommunications","ror":"https://ror.org/0378w3a30","country_code":"BR","type":"facility","lineage":["https://openalex.org/I71346753"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Felipe A. P. de Figueiredo","raw_affiliation_strings":["National Institute of Telecommunications –Inatel, Santa Rita do Sapucaí, Brazil","National Institute of Telecommunications – Inatel, Av. João de Camargo, 510, Santa Rita do Sapucaí, MG, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-2167-7286","affiliations":[{"raw_affiliation_string":"National Institute of Telecommunications –Inatel, Santa Rita do Sapucaí, Brazil","institution_ids":["https://openalex.org/I71346753"]},{"raw_affiliation_string":"National Institute of Telecommunications – Inatel, Av. João de Camargo, 510, Santa Rita do Sapucaí, MG, Brazil","institution_ids":["https://openalex.org/I71346753"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5028331826","display_name":"Samuel Mafra","orcid":"https://orcid.org/0000-0002-5238-1795"},"institutions":[{"id":"https://openalex.org/I71346753","display_name":"National Institute of Telecommunications","ror":"https://ror.org/0378w3a30","country_code":"BR","type":"facility","lineage":["https://openalex.org/I71346753"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Samuel B. Mafra","raw_affiliation_strings":["National Institute of Telecommunications –Inatel, Santa Rita do Sapucaí, Brazil","National Institute of Telecommunications – Inatel, Av. João de Camargo, 510, Santa Rita do Sapucaí, MG, Brazil"],"raw_orcid":"https://orcid.org/0000-0002-5238-1795","affiliations":[{"raw_affiliation_string":"National Institute of Telecommunications –Inatel, Santa Rita do Sapucaí, Brazil","institution_ids":["https://openalex.org/I71346753"]},{"raw_affiliation_string":"National Institute of Telecommunications – Inatel, Av. João de Camargo, 510, Santa Rita do Sapucaí, MG, Brazil","institution_ids":["https://openalex.org/I71346753"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I71346753"],"apc_list":null,"apc_paid":null,"fwci":1.3733,"has_fulltext":false,"cited_by_count":2,"citation_normalized_percentile":{"value":0.81348354,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":95,"max":96},"biblio":{"volume":"18","issue":"1","first_page":"36","last_page":"39"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9681000113487244,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9681000113487244,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9174000024795532,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.916100025177002,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8784173727035522},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.6992182731628418},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.6707925796508789},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.6107981204986572},{"id":"https://openalex.org/keywords/sample","display_name":"Sample (material)","score":0.5319402813911438},{"id":"https://openalex.org/keywords/embedded-system","display_name":"Embedded system","score":0.4333907663822174},{"id":"https://openalex.org/keywords/stage","display_name":"Stage (stratigraphy)","score":0.41978174448013306},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3932330310344696},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.3589927554130554},{"id":"https://openalex.org/keywords/real-time-computing","display_name":"Real-time computing","score":0.3332204818725586},{"id":"https://openalex.org/keywords/operating-system","display_name":"Operating system","score":0.16284078359603882}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8784173727035522},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.6992182731628418},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.6707925796508789},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.6107981204986572},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.5319402813911438},{"id":"https://openalex.org/C149635348","wikidata":"https://www.wikidata.org/wiki/Q193040","display_name":"Embedded system","level":1,"score":0.4333907663822174},{"id":"https://openalex.org/C146357865","wikidata":"https://www.wikidata.org/wiki/Q1123245","display_name":"Stage (stratigraphy)","level":2,"score":0.41978174448013306},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3932330310344696},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3589927554130554},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3332204818725586},{"id":"https://openalex.org/C111919701","wikidata":"https://www.wikidata.org/wiki/Q9135","display_name":"Operating system","level":1,"score":0.16284078359603882},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C43617362","wikidata":"https://www.wikidata.org/wiki/Q170050","display_name":"Chromatography","level":1,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/les.2025.3567025","is_oa":true,"landing_page_url":"https://doi.org/10.1109/les.2025.3567025","pdf_url":null,"source":{"id":"https://openalex.org/S22443479","display_name":"IEEE Embedded Systems Letters","issn_l":"1943-0663","issn":["1943-0663","1943-0671"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Embedded Systems Letters","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/les.2025.3567025","is_oa":true,"landing_page_url":"https://doi.org/10.1109/les.2025.3567025","pdf_url":null,"source":{"id":"https://openalex.org/S22443479","display_name":"IEEE Embedded Systems Letters","issn_l":"1943-0663","issn":["1943-0663","1943-0671"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Embedded Systems Letters","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1277437854","display_name":null,"funder_award_id":"APQ-04523-23","funder_id":"https://openalex.org/F4320322980","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de Minas Gerais"},{"id":"https://openalex.org/G1516301096","display_name":null,"funder_award_id":"APQ-03162-24","funder_id":"https://openalex.org/F4320322980","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de Minas Gerais"},{"id":"https://openalex.org/G1725971247","display_name":null,"funder_award_id":"311470/2021-1","funder_id":"https://openalex.org/F4320322025","funder_display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico"},{"id":"https://openalex.org/G4266494009","display_name":null,"funder_award_id":"PPE-00124-23","funder_id":"https://openalex.org/F4320322980","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de Minas Gerais"},{"id":"https://openalex.org/G4436199579","display_name":null,"funder_award_id":"052/2023","funder_id":"https://openalex.org/F4320321992","funder_display_name":"Minist\u00e9rio da Ci\u00eancia, Tecnologia e Inova\u00e7\u00e3o"},{"id":"https://openalex.org/G5295016843","display_name":null,"funder_award_id":"2021/06946-0","funder_id":"https://openalex.org/F4320320997","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo"},{"id":"https://openalex.org/G639837492","display_name":null,"funder_award_id":"403612/2020-9","funder_id":"https://openalex.org/F4320322025","funder_display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico"},{"id":"https://openalex.org/G6434565599","display_name":null,"funder_award_id":"403827/2021-3","funder_id":"https://openalex.org/F4320322025","funder_display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico"},{"id":"https://openalex.org/G7997372242","display_name":null,"funder_award_id":"APQ-05305-23","funder_id":"https://openalex.org/F4320322980","funder_display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de Minas Gerais"}],"funders":[{"id":"https://openalex.org/F4320320997","display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de S\u00e3o Paulo","ror":"https://ror.org/02ddkpn78"},{"id":"https://openalex.org/F4320321992","display_name":"Minist\u00e9rio da Ci\u00eancia, Tecnologia e Inova\u00e7\u00e3o","ror":"https://ror.org/050zdnc69"},{"id":"https://openalex.org/F4320322025","display_name":"Conselho Nacional de Desenvolvimento Cient\u00edfico e Tecnol\u00f3gico","ror":"https://ror.org/03swz6y49"},{"id":"https://openalex.org/F4320322980","display_name":"Funda\u00e7\u00e3o de Amparo \u00e0 Pesquisa do Estado de Minas Gerais","ror":"https://ror.org/00nc55f03"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2143426320","https://openalex.org/W2156665896","https://openalex.org/W2949676527","https://openalex.org/W4382281941","https://openalex.org/W4392694748","https://openalex.org/W4400366714"],"related_works":["https://openalex.org/W4245926026","https://openalex.org/W4311097251","https://openalex.org/W2586548817","https://openalex.org/W2625093826","https://openalex.org/W4200598720","https://openalex.org/W2921026492","https://openalex.org/W4247463117","https://openalex.org/W4361251261","https://openalex.org/W2389214306","https://openalex.org/W3031181660"],"abstract_inverted_index":{"The":[0,110],"rapid":[1],"growth":[2],"of":[3],"IoT":[4,24,133],"devices":[5],"demands":[6],"scalable":[7,91],"and":[8,36,53,57,71,85,107],"efficient":[9],"threat":[10,25,121],"detection":[11,26,41,122],"solutions.":[12],"This":[13],"paper":[14],"introduces":[15],"a":[16,116],"sample-based,":[17],"multi-stage":[18],"machine":[19],"learning":[20],"(ML)":[21],"pipeline":[22],"for":[23,93],"using":[27],"the":[28,45,66],"CICIoT2023":[29],"dataset,":[30],"integrating":[31],"feature":[32],"selection,":[33],"data":[34],"balancing,":[35],"hyperparameter":[37],"optimization":[38],"to":[39,74,131],"improve":[40],"accuracy":[42,70],"while":[43,89],"reducing":[44],"computational":[46,108],"overhead":[47],"associated":[48],"with":[49,62,115],"training.":[50],"We":[51],"evaluate,":[52],"across":[54],"binary,":[55],"multiclass,":[56],"fine-grained":[58],"tasks,":[59],"showing":[60],"that":[61,113,128],"10%":[63],"sampling":[64],"achieves":[65],"best":[67],"trade-off":[68],"between":[69],"efficiency.":[72],"Compared":[73],"prior":[75],"methods,":[76],"our":[77],"approach":[78,118],"eliminates":[79],"GPU":[80],"dependence,":[81],"maintains":[82],"low":[83],"latency,":[84],"preserves":[86],"state-of-the-art":[87],"performance":[88],"enabling":[90],"training":[92,114],"high":[94],"generalization":[95],"capacity.":[96],"Additionally,":[97],"we":[98],"provide":[99],"model":[100],"selection":[101],"guidelines":[102],"based":[103],"on":[104,123],"dataset":[105],"complexity":[106],"constraints.":[109],"results":[111],"show":[112],"sample-based":[117],"enables":[119],"effective":[120],"large":[124],"datasets,":[125],"producing":[126],"models":[127],"generalize":[129],"well":[130],"diverse":[132],"attack":[134],"scenarios,":[135],"thus":[136],"ensuring":[137],"practical":[138],"applicability":[139],"in":[140],"real-world":[141],"deployments.":[142]},"counts_by_year":[{"year":2025,"cited_by_count":2}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}