{"id":"https://openalex.org/W7160928923","doi":"https://doi.org/10.1109/mic.2026.3692726","title":"Real-Time eBPF/XDP-Based Deep Learning Framework for Anomaly Traffic Detection in Internet of Things Networks","display_name":"Real-Time eBPF/XDP-Based Deep Learning Framework for Anomaly Traffic Detection in Internet of Things Networks","publication_year":2026,"publication_date":"2026-05-01","ids":{"openalex":"https://openalex.org/W7160928923","doi":"https://doi.org/10.1109/mic.2026.3692726"},"language":null,"primary_location":{"id":"doi:10.1109/mic.2026.3692726","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mic.2026.3692726","pdf_url":null,"source":{"id":"https://openalex.org/S205899252","display_name":"IEEE Internet Computing","issn_l":"1089-7801","issn":["1089-7801","1941-0131"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135913547","display_name":"Shuangxing Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Shuangxing Liu","raw_affiliation_strings":["Faculty of Applied Sciences, Macao Polytechnic University, Macao, China"],"raw_orcid":"https://orcid.org/0009-0007-2359-2132","affiliations":[{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macao, China","institution_ids":["https://openalex.org/I49835588"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123308039","display_name":"K L Eddie Law","orcid":null},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"K. L. Eddie Law","raw_affiliation_strings":["Faculty of Applied Sciences, Macao Polytechnic University, Macao, China"],"raw_orcid":"https://orcid.org/0000-0003-0377-3810","affiliations":[{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macao, China","institution_ids":["https://openalex.org/I49835588"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135933528","display_name":"Zien Zhang","orcid":null},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Zien Zhang","raw_affiliation_strings":["Faculty of Applied Sciences, Macao Polytechnic University, Macao, China"],"raw_orcid":"https://orcid.org/0009-0007-9181-9968","affiliations":[{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macao, China","institution_ids":["https://openalex.org/I49835588"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135916841","display_name":"Chan-Tong Lam","orcid":null},"institutions":[{"id":"https://openalex.org/I49835588","display_name":"Macao Polytechnic University","ror":"https://ror.org/02sf5td35","country_code":"MO","type":"education","lineage":["https://openalex.org/I49835588"]}],"countries":["MO"],"is_corresponding":false,"raw_author_name":"Chan-Tong Lam","raw_affiliation_strings":["Faculty of Applied Sciences, Macao Polytechnic University, Macao, China"],"raw_orcid":"https://orcid.org/0000-0002-8022-7744","affiliations":[{"raw_affiliation_string":"Faculty of Applied Sciences, Macao Polytechnic University, Macao, China","institution_ids":["https://openalex.org/I49835588"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I49835588"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.60149171,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"30","issue":"3","first_page":"17","last_page":"28"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.5232999920845032,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.5232999920845032,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.21690000593662262,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.06719999760389328,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.7488999962806702},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6790000200271606},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.546500027179718},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.3255000114440918},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.3237999975681305},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.31049999594688416}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7867000102996826},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7488999962806702},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6790000200271606},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.546500027179718},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5340999960899353},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3569999933242798},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.3255000114440918},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3253999948501587},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3237999975681305},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.31450000405311584},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.31049999594688416},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.30169999599456787},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.290800005197525},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.28349998593330383},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2761000096797943},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.27250000834465027},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.2671000063419342},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2651999890804291},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2565999925136566}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/mic.2026.3692726","is_oa":false,"landing_page_url":"https://doi.org/10.1109/mic.2026.3692726","pdf_url":null,"source":{"id":"https://openalex.org/S205899252","display_name":"IEEE Internet Computing","issn_l":"1089-7801","issn":["1089-7801","1941-0131"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Internet Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"IoT":[0,21,116],"networks":[1,117],"face":[2],"resource":[3],"constraints":[4],"yet":[5],"require":[6],"real-time":[7],"anomaly":[8],"detection":[9],"across":[10],"diverse":[11],"protocols.":[12],"We":[13,58],"propose":[14],"a":[15,31,89],"dynamic,":[16],"feature-selective":[17,46],"framework":[18],"for":[19],"heterogeneous":[20],"networks.":[22],"It":[23],"integrates":[24],"eBPF/XDP":[25],"in":[26,37,115],"the":[27,50],"driver":[28],"path":[29],"with":[30,102],"pre-trained":[32],"lightweight":[33],"deep":[34],"learning":[35],"model":[36,72],"user":[38],"space,":[39],"enabling":[40],"two-stage":[41],"adaptive":[42],"feature":[43],"selection.":[44],"The":[45],"engine":[47],"dynamically":[48],"identifies":[49],"most":[51],"discriminative":[52],"traffic":[53],"characteristics":[54],"under":[55],"evolving":[56],"attacks.":[57],"validate":[59],"generalizability":[60],"using":[61],"CICDDoS2019,":[62,70],"IoT-23,":[63],"and":[64,98,110,118],"TON_IoT":[65],"datasets.":[66],"For":[67],"example,":[68],"on":[69],"our":[71],"trims":[73],"77":[74],"features":[75],"down":[76],"to":[77],"only":[78],"5":[79],"while":[80],"maintaining":[81],"nearly":[82],"identical":[83],"accuracy":[84],"(93.30%":[85],"versus":[86],"92.73%).":[87],"On":[88],"Raspberry":[90],"Pi":[91],"4B,":[92],"packet":[93],"interception":[94],"averages":[95],"1.85":[96],"\u03bcs":[97],"inference":[99],"10.38":[100],"ms,":[101],"negligible":[103],"CPU":[104],"overhead.":[105],"Results":[106],"confirm":[107],"both":[108],"responsiveness":[109],"accuracy,":[111],"addressing":[112],"security":[113],"challenges":[114],"edge":[119],"computing":[120],"systems.":[121]},"counts_by_year":[],"updated_date":"2026-07-16T05:54:29.318815","created_date":"2026-05-13T00:00:00"}