{"id":"https://openalex.org/W4414856581","doi":"https://doi.org/10.1109/tnsm.2025.3617765","title":"Adaptive NetFlow IIoT Intrusion Detection With Deep Transfer Learning, Genetic Optimization, and Ensemble Methods for Network Management","display_name":"Adaptive NetFlow IIoT Intrusion Detection With Deep Transfer Learning, Genetic Optimization, and Ensemble Methods for Network Management","publication_year":2025,"publication_date":"2025-10-06","ids":{"openalex":"https://openalex.org/W4414856581","doi":"https://doi.org/10.1109/tnsm.2025.3617765"},"language":"en","primary_location":{"id":"doi:10.1109/tnsm.2025.3617765","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3617765","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1109/tnsm.2025.3617765","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101828523","display_name":"Jing Li","orcid":"https://orcid.org/0000-0002-8235-9038"},"institutions":[{"id":"https://openalex.org/I4210089915","display_name":"Newcastle University Medicine Malaysia","ror":"https://ror.org/009e9eq52","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210089915"]},{"id":"https://openalex.org/I4576418","display_name":"University of Technology Malaysia","ror":"https://ror.org/026w31v75","country_code":"MY","type":"education","lineage":["https://openalex.org/I4576418"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Jing Li","raw_affiliation_strings":["Faculty of Computing, University of Technology Malaysia, Johor Bahru, Malaysia","Faculty of Computing, University of Technology Malaysia, Johor Bahru, Johor, Malaysia"],"raw_orcid":"https://orcid.org/0000-0002-8235-9038","affiliations":[{"raw_affiliation_string":"Faculty of Computing, University of Technology Malaysia, Johor Bahru, Malaysia","institution_ids":["https://openalex.org/I4210089915","https://openalex.org/I4576418"]},{"raw_affiliation_string":"Faculty of Computing, University of Technology Malaysia, Johor Bahru, Johor, Malaysia","institution_ids":["https://openalex.org/I4210089915"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086606810","display_name":"Mohd Shahizan Othman","orcid":"https://orcid.org/0000-0003-4261-1873"},"institutions":[{"id":"https://openalex.org/I4210089915","display_name":"Newcastle University Medicine Malaysia","ror":"https://ror.org/009e9eq52","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210089915"]},{"id":"https://openalex.org/I4576418","display_name":"University of Technology Malaysia","ror":"https://ror.org/026w31v75","country_code":"MY","type":"education","lineage":["https://openalex.org/I4576418"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Mohd Shahizan Othman","raw_affiliation_strings":["Faculty of Computing, University of Technology Malaysia, Johor Bahru, Malaysia","School of Computing, University of Technology Malaysia, Johor Bahru, Johor, Malaysia"],"raw_orcid":"https://orcid.org/0000-0003-4261-1873","affiliations":[{"raw_affiliation_string":"Faculty of Computing, University of Technology Malaysia, Johor Bahru, Malaysia","institution_ids":["https://openalex.org/I4210089915","https://openalex.org/I4576418"]},{"raw_affiliation_string":"School of Computing, University of Technology Malaysia, Johor Bahru, Johor, Malaysia","institution_ids":["https://openalex.org/I4210089915"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Xugang Ying","orcid":null},"institutions":[{"id":"https://openalex.org/I4210107102","display_name":"Shanghai Municipal Human Resources and Social Security Bureau","ror":"https://ror.org/00zp3kj13","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210107102","https://openalex.org/I4210165456"]},{"id":"https://openalex.org/I4210114441","display_name":"Zhejiang Provincial Public Security Department","ror":"https://ror.org/01z3tch16","country_code":"CN","type":"government","lineage":["https://openalex.org/I4210114441"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xugang Ying","raw_affiliation_strings":["Social Security System Section in Zhejiang Provincial Human Resources and Social Security Information Center, Provincial Human Resources and Social Security Information Center, Hangzhou, Zhejiang, China","Zhejiang Provincial Human Resources and Social Security Information Center, Xihu District, Hangzhou, Zhejiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Social Security System Section in Zhejiang Provincial Human Resources and Social Security Information Center, Provincial Human Resources and Social Security Information Center, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I4210107102","https://openalex.org/I4210114441"]},{"raw_affiliation_string":"Zhejiang Provincial Human Resources and Social Security Information Center, Xihu District, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I4210114441"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036349596","display_name":"Dina S. M. Hassan","orcid":"https://orcid.org/0000-0002-2186-6052"},"institutions":[{"id":"https://openalex.org/I106778892","display_name":"Princess Nourah bint Abdulrahman University","ror":"https://ror.org/05b0cyh02","country_code":"SA","type":"education","lineage":["https://openalex.org/I106778892"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Dina S. M. Hassan","raw_affiliation_strings":["Department of Information Technology, College of Computer and Information Sciences, Princess Nourah bint Abdulrahman University, Riyadh, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-2186-6052","affiliations":[{"raw_affiliation_string":"Department of Information Technology, College of Computer and Information Sciences, Princess Nourah bint Abdulrahman University, Riyadh, Saudi Arabia","institution_ids":["https://openalex.org/I106778892"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089927436","display_name":"Hewan Chen","orcid":"https://orcid.org/0009-0003-6259-3817"},"institutions":[{"id":"https://openalex.org/I55538621","display_name":"China Jiliang University","ror":"https://ror.org/05v1y0t93","country_code":"CN","type":"education","lineage":["https://openalex.org/I55538621"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hewan Chen","raw_affiliation_strings":["College of Information Engineering, China Jiliang University, Hangzhou, Zhejiang, China","College of Information Engineering, China Jiliang University, Qiantang District, Hangzhou, Zhejiang, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Information Engineering, China Jiliang University, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I55538621"]},{"raw_affiliation_string":"College of Information Engineering, China Jiliang University, Qiantang District, Hangzhou, Zhejiang, China","institution_ids":["https://openalex.org/I55538621"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5079146277","display_name":"Lizawati Mi Yusuf","orcid":"https://orcid.org/0000-0003-4171-3253"},"institutions":[{"id":"https://openalex.org/I4210089915","display_name":"Newcastle University Medicine Malaysia","ror":"https://ror.org/009e9eq52","country_code":"MY","type":"education","lineage":["https://openalex.org/I4210089915"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Lizawati Mi Yusuf","raw_affiliation_strings":["School of Computing, University of Technology Malaysia, Johor Bahru, Malaysia","School of Computing, University of Technology Malaysia, Johor Bahru, Johor, Malaysia"],"raw_orcid":"https://orcid.org/0000-0003-4171-3253","affiliations":[{"raw_affiliation_string":"School of Computing, University of Technology Malaysia, Johor Bahru, Malaysia","institution_ids":["https://openalex.org/I4210089915"]},{"raw_affiliation_string":"School of Computing, University of Technology Malaysia, Johor Bahru, Johor, Malaysia","institution_ids":["https://openalex.org/I4210089915"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":2.7465,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.91482926,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"23","issue":null,"first_page":"681","last_page":"698"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9955000281333923,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/netflow","display_name":"NetFlow","score":0.7918999791145325},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6093000173568726},{"id":"https://openalex.org/keywords/scalability","display_name":"Scalability","score":0.5139999985694885},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.454800009727478},{"id":"https://openalex.org/keywords/network-management","display_name":"Network management","score":0.3856000006198883},{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.35089999437332153},{"id":"https://openalex.org/keywords/network-monitoring","display_name":"Network monitoring","score":0.3463999927043915},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.34450000524520874}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8813999891281128},{"id":"https://openalex.org/C188067584","wikidata":"https://www.wikidata.org/wiki/Q219363","display_name":"NetFlow","level":2,"score":0.7918999791145325},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6093000173568726},{"id":"https://openalex.org/C48044578","wikidata":"https://www.wikidata.org/wiki/Q727490","display_name":"Scalability","level":2,"score":0.5139999985694885},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4551999866962433},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.454800009727478},{"id":"https://openalex.org/C129763632","wikidata":"https://www.wikidata.org/wiki/Q1454667","display_name":"Network management","level":2,"score":0.3856000006198883},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3537999987602234},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.35089999437332153},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.3463999927043915},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.34450000524520874},{"id":"https://openalex.org/C2780598303","wikidata":"https://www.wikidata.org/wiki/Q65921492","display_name":"Flexibility (engineering)","level":2,"score":0.3353999853134155},{"id":"https://openalex.org/C2779585090","wikidata":"https://www.wikidata.org/wiki/Q3457762","display_name":"Resilience (materials science)","level":2,"score":0.33230000734329224},{"id":"https://openalex.org/C8880873","wikidata":"https://www.wikidata.org/wiki/Q187787","display_name":"Genetic algorithm","level":2,"score":0.32919999957084656},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3151000142097473},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.31459999084472656},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.30469998717308044},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2939999997615814},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.2842000126838684},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.27489998936653137},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.26649999618530273},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.26579999923706055},{"id":"https://openalex.org/C108074857","wikidata":"https://www.wikidata.org/wiki/Q3067360","display_name":"Fault management","level":3,"score":0.2623000144958496},{"id":"https://openalex.org/C69527307","wikidata":"https://www.wikidata.org/wiki/Q184230","display_name":"Simple Network Management Protocol","level":3,"score":0.25859999656677246},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.25440001487731934},{"id":"https://openalex.org/C2776384856","wikidata":"https://www.wikidata.org/wiki/Q17145767","display_name":"Trust management (information system)","level":2,"score":0.2542000114917755}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2025.3617765","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3617765","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1109/tnsm.2025.3617765","is_oa":true,"landing_page_url":"https://doi.org/10.1109/tnsm.2025.3617765","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":49,"referenced_works":["https://openalex.org/W2108598243","https://openalex.org/W2183341477","https://openalex.org/W2799758613","https://openalex.org/W2887782657","https://openalex.org/W2933860896","https://openalex.org/W2963748489","https://openalex.org/W2970289707","https://openalex.org/W2990495794","https://openalex.org/W3006624784","https://openalex.org/W3022550689","https://openalex.org/W3028852288","https://openalex.org/W3042715689","https://openalex.org/W3086419524","https://openalex.org/W3102359135","https://openalex.org/W3123920941","https://openalex.org/W3129661430","https://openalex.org/W3141567114","https://openalex.org/W3162956350","https://openalex.org/W3164964481","https://openalex.org/W3177318507","https://openalex.org/W3183137097","https://openalex.org/W3184668263","https://openalex.org/W3185228694","https://openalex.org/W3191884578","https://openalex.org/W3196631891","https://openalex.org/W3211805421","https://openalex.org/W3214829575","https://openalex.org/W4213219213","https://openalex.org/W4224331011","https://openalex.org/W4284700239","https://openalex.org/W4286511238","https://openalex.org/W4296744019","https://openalex.org/W4313225168","https://openalex.org/W4313378981","https://openalex.org/W4313654696","https://openalex.org/W4323313312","https://openalex.org/W4327719847","https://openalex.org/W4375861199","https://openalex.org/W4387108014","https://openalex.org/W4388626146","https://openalex.org/W4389193662","https://openalex.org/W4389951018","https://openalex.org/W4390238465","https://openalex.org/W4391809428","https://openalex.org/W4393864808","https://openalex.org/W4396967417","https://openalex.org/W4399337024","https://openalex.org/W4406264644","https://openalex.org/W4408439988"],"related_works":[],"abstract_inverted_index":{"The":[0,107],"growing":[1],"demands":[2],"of":[3,9,35,105,122,167,177,214],"Industry":[4],"5.0":[5],"necessitate":[6],"resilient":[7],"Internet":[8],"Things":[10],"(IoT)":[11],"networks,":[12],"which":[13,171],"are":[14],"increasingly":[15],"susceptible":[16],"to":[17,80,91],"sophisticated":[18],"cyber":[19],"threats.":[20],"While":[21],"advancements":[22],"in":[23,146,158,195,212,234],"intrusion":[24,232],"detection":[25,233],"systems":[26],"(IDS)":[27],"have":[28],"improved":[29],"attack":[30,37,120],"detection,":[31],"addressing":[32],"the":[33,165,168,173,196,199],"complexity":[34],"multi-class":[36],"scenarios":[38],"and":[39,59,67,95,117,131,133,144,155,184,192,228],"managing":[40],"minority":[41],"threats":[42,139],"remains":[43],"challenging.":[44],"This":[45,217],"study":[46],"proposes":[47],"NFIIoT-DTL-IDS,":[48],"an":[49],"adaptive":[50,220],"IoT":[51,124,148,160,224],"IDS":[52,109],"for":[53,223,231],"smart":[54],"network":[55,236],"management":[56,221],"using":[57],"NetFlow":[58,128],"IIoT":[60],"data,":[61],"driven":[62],"by":[63,187],"deep":[64],"transfer":[65],"learning":[66],"enhanced":[68],"with":[69],"genetic":[70],"algorithm":[71],"(GA)":[72],"optimization.":[73],"Our":[74],"framework":[75],"leverages":[76],"pre-trained":[77],"CNN":[78],"models":[79],"convert":[81],"data":[82],"into":[83],"images,":[84],"enabling":[85],"effective":[86],"classification.":[87],"GA":[88],"optimizes":[89],"hyperparameters":[90],"improve":[92],"model":[93],"flexibility":[94],"performance,":[96],"while":[97],"a":[98],"soft":[99],"voting":[100],"ensemble":[101],"ensures":[102],"robust":[103],"aggregation":[104],"predictions.":[106],"proposed":[108,169],"achieves":[110],"100":[111],"classification":[112,174],"accuracy":[113],"among":[114,198],"5,":[115],"10,":[116],"19":[118],"distinct":[119],"classes":[121],"three":[123,178,200],"datasets,":[125],"including":[126,181],"two":[127],"datasets":[129],"(NF-TONIoTv2":[130],"NF-BoT-IoTv2)":[132],"one":[134],"industrial-based":[135],"dataset":[136],"(XIIoTID),":[137],"detecting":[138],"such":[140],"as":[141,150,152],"DDoS,":[142],"ransomware,":[143],"theft":[145],"common":[147],"cyberattacks,":[149],"well":[151],"MQTT":[153],"subscription":[154],"crypto-ransomware":[156],"attacks":[157],"industrial":[159],"scenarios.":[161],"Additional":[162],"experiments":[163],"demonstrate":[164,205],"effectiveness":[166],"method,":[170],"exceeds":[172],"performance":[175],"results":[176,204],"baseline":[179],"models,":[180],"LSTM,":[182],"Transformer,":[183],"3D":[185],"CNN,":[186],"more":[188],"than":[189],"37.2%,":[190],"0.25%,":[191],"1.25%,":[193],"respectively,":[194],"maximum":[197],"datasets.":[201],"Finally,":[202],"experimental":[203],"that":[206],"NFIIoT-DTL-IDS":[207],"outperforms":[208],"recent":[209],"state-ofthe-art":[210],"solutions":[211,230],"terms":[213],"multiclassification":[215],"accuracy.":[216],"contribution":[218],"advances":[219],"frameworks":[222],"security,":[225],"offering":[226],"scalable":[227],"high-performance":[229],"modern":[235],"management.":[237]},"counts_by_year":[{"year":2026,"cited_by_count":4}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}