{"id":"https://openalex.org/W4416961967","doi":"https://doi.org/10.1109/pst65910.2025.11268886","title":"Exploring the Impact of Feature Selection on Non-Stationary Intrusion Detection Models in IoT Networks","display_name":"Exploring the Impact of Feature Selection on Non-Stationary Intrusion Detection Models in IoT Networks","publication_year":2025,"publication_date":"2025-08-26","ids":{"openalex":"https://openalex.org/W4416961967","doi":"https://doi.org/10.1109/pst65910.2025.11268886"},"language":null,"primary_location":{"id":"doi:10.1109/pst65910.2025.11268886","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst65910.2025.11268886","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 22nd Annual International Conference on Privacy, Security, and Trust (PST)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5048947387","display_name":"Muaan Ur Rehman","orcid":"https://orcid.org/0009-0000-2656-0127"},"institutions":[{"id":"https://openalex.org/I111112146","display_name":"Tallinn University of Technology","ror":"https://ror.org/0443cwa12","country_code":"EE","type":"education","lineage":["https://openalex.org/I111112146"]}],"countries":["EE"],"is_corresponding":true,"raw_author_name":"Muaan Ur Rehman","raw_affiliation_strings":["Tallinn University of Technology,Department of Software Science,Tallinn,Estonia"],"affiliations":[{"raw_affiliation_string":"Tallinn University of Technology,Department of Software Science,Tallinn,Estonia","institution_ids":["https://openalex.org/I111112146"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075157158","display_name":"Hayretdin Bah\u015fi","orcid":"https://orcid.org/0000-0001-8882-4095"},"institutions":[{"id":"https://openalex.org/I111112146","display_name":"Tallinn University of Technology","ror":"https://ror.org/0443cwa12","country_code":"EE","type":"education","lineage":["https://openalex.org/I111112146"]}],"countries":["EE"],"is_corresponding":false,"raw_author_name":"Hayretdin Bah\u015fi","raw_affiliation_strings":["Tallinn University of Technology,Department of Software Science,Tallinn,Estonia"],"affiliations":[{"raw_affiliation_string":"Tallinn University of Technology,Department of Software Science,Tallinn,Estonia","institution_ids":["https://openalex.org/I111112146"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101916839","display_name":"Rajesh Kalakoti","orcid":"https://orcid.org/0000-0001-7390-8034"},"institutions":[{"id":"https://openalex.org/I111112146","display_name":"Tallinn University of Technology","ror":"https://ror.org/0443cwa12","country_code":"EE","type":"education","lineage":["https://openalex.org/I111112146"]}],"countries":["EE"],"is_corresponding":false,"raw_author_name":"Rajesh Kalakoti","raw_affiliation_strings":["Tallinn University of Technology,Department of Software Science,Tallinn,Estonia"],"affiliations":[{"raw_affiliation_string":"Tallinn University of Technology,Department of Software Science,Tallinn,Estonia","institution_ids":["https://openalex.org/I111112146"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5048947387"],"corresponding_institution_ids":["https://openalex.org/I111112146"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.2131998,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"10"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.7006000280380249,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.7006000280380249,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.19979999959468842,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.017899999395012856,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7451000213623047},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.7372000217437744},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.6456999778747559},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.6437000036239624},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5748999714851379},{"id":"https://openalex.org/keywords/selection","display_name":"Selection (genetic algorithm)","score":0.5045999884605408},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.35749998688697815},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3458000123500824}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7451000213623047},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7444999814033508},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.7372000217437744},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.6456999778747559},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.6437000036239624},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5748999714851379},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.5045999884605408},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4945000112056732},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.46000000834465027},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4481000006198883},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.35749998688697815},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3458000123500824},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.33709999918937683},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3336000144481659},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.30970001220703125},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.29670000076293945},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2854999899864197},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.28189998865127563},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.26589998602867126},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.26109999418258667}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/pst65910.2025.11268886","is_oa":false,"landing_page_url":"https://doi.org/10.1109/pst65910.2025.11268886","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 22nd Annual International Conference on Privacy, Security, and Trust (PST)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W1487321909","https://openalex.org/W2156483112","https://openalex.org/W2799758613","https://openalex.org/W2898017895","https://openalex.org/W2907516583","https://openalex.org/W3013100408","https://openalex.org/W3047236105","https://openalex.org/W3158599423","https://openalex.org/W4224288244","https://openalex.org/W4226125749","https://openalex.org/W4280507621","https://openalex.org/W4294691673","https://openalex.org/W4303449845","https://openalex.org/W4308038407","https://openalex.org/W4362014035","https://openalex.org/W4378800853","https://openalex.org/W4391407003","https://openalex.org/W4396558173","https://openalex.org/W4400491462","https://openalex.org/W4402035331","https://openalex.org/W4402130526","https://openalex.org/W4407938121","https://openalex.org/W4408146556"],"related_works":[],"abstract_inverted_index":{"The":[0,147],"proliferation":[1],"of":[2,4,13,33,59,67,124,170],"Internet":[3],"Things":[5],"(IoT)":[6],"devices":[7],"has":[8],"increased":[9],"the":[10,31,57,64,103,153,168],"attack":[11,109,145],"surface":[12],"networks,":[14],"necessitating":[15],"robust":[16],"and":[17,98,138,158],"adaptive":[18],"security":[19,125],"mechanisms":[20],"such":[21],"as":[22,49],"machine":[23],"learning":[24,92],"(ML)-based":[25],"intrusion":[26],"detection":[27],"systems":[28,35],"(IDS).":[29],"However,":[30],"effectiveness":[32],"these":[34],"can":[36],"degrade":[37],"over":[38],"time":[39],"due":[40],"to":[41,89,119,166],"concept":[42],"drift,":[43],"where":[44],"patterns":[45],"in":[46,62,71,84,161],"data":[47],"evolve":[48],"attackers":[50],"develop":[51],"new":[52,150],"techniques.":[53],"This":[54],"study":[55,148],"investigates":[56],"role":[58],"feature":[60,79,156],"selection":[61,157],"enhancing":[63],"long-term":[65],"performance":[66],"non-stationary":[68],"IDS":[69,173],"models":[70],"IoT":[72,163],"networks.":[73],"Specifically,":[74],"we":[75,115],"apply":[76],"a":[77,121],"filter-based":[78],"reduction":[80],"technique,":[81],"Mutual":[82],"Information,":[83],"conjunction":[85],"with":[86],"XGBoost":[87],"models,":[88],"evaluate":[90],"two":[91],"paradigms":[93],"i.e.":[94],"static":[95],"(trained":[96],"once)":[97],"dynamic":[99,162],"(periodically":[100],"retrained).":[101],"Using":[102],"CICIoMT2024":[104],"dataset,":[105],"which":[106],"includes":[107],"18":[108],"variants":[110],"across":[111],"five":[112],"major":[113],"categories,":[114],"conduct":[116],"multiclass":[117],"classification":[118],"provide":[120],"granular":[122],"analysis":[123],"threats.":[126],"Our":[127],"results":[128],"demonstrate":[129],"how":[130],"selected":[131],"features":[132,142],"perform":[133],"under":[134],"different":[135],"drift":[136],"conditions":[137],"highlight":[139],"critical":[140],"network":[141],"for":[143],"evolving":[144],"detection.":[146],"offers":[149],"insights":[151],"into":[152],"interplay":[154],"between":[155],"model":[159],"adaptability":[160],"environments,":[164],"aiming":[165],"inform":[167],"development":[169],"more":[171],"resilient":[172],"solutions.":[174]},"counts_by_year":[],"updated_date":"2026-03-07T16:01:11.037858","created_date":"2025-12-03T00:00:00"}