{"id":"https://openalex.org/W7138130065","doi":"https://doi.org/10.1109/tnsm.2026.3675031","title":"A Federated and Incremental Network Intrusion Detection System for IoT Emerging Threats","display_name":"A Federated and Incremental Network Intrusion Detection System for IoT Emerging Threats","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7138130065","doi":"https://doi.org/10.1109/tnsm.2026.3675031"},"language":null,"primary_location":{"id":"doi:10.1109/tnsm.2026.3675031","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2026.3675031","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5106525713","display_name":"Raffaele Carillo","orcid":null},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Raffaele Carillo","raw_affiliation_strings":["Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy"],"raw_orcid":"https://orcid.org/0009-0004-3907-0441","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5055529057","display_name":"Francesco Cerasuolo","orcid":"https://orcid.org/0009-0000-6476-8092"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Francesco Cerasuolo","raw_affiliation_strings":["Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy"],"raw_orcid":"https://orcid.org/0009-0000-6476-8092","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062538316","display_name":"Giampaolo Bovenzi","orcid":"https://orcid.org/0000-0002-0997-9724"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Giampaolo Bovenzi","raw_affiliation_strings":["Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy"],"raw_orcid":"https://orcid.org/0000-0002-0997-9724","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068466049","display_name":"Domenico Ciuonzo","orcid":"https://orcid.org/0000-0002-6230-2958"},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Domenico Ciuonzo","raw_affiliation_strings":["Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy"],"raw_orcid":"https://orcid.org/0000-0002-6230-2958","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy","institution_ids":["https://openalex.org/I71267560"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5029728204","display_name":"A Pescape","orcid":null},"institutions":[{"id":"https://openalex.org/I71267560","display_name":"University of Naples Federico II","ror":"https://ror.org/05290cv24","country_code":"IT","type":"education","lineage":["https://openalex.org/I71267560"]}],"countries":["IT"],"is_corresponding":false,"raw_author_name":"Antonio Pescap\u00e9","raw_affiliation_strings":["Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy"],"raw_orcid":"https://orcid.org/0000-0002-0221-7444","affiliations":[{"raw_affiliation_string":"Department of Electrical Engineering and Information Technologies (DIETI), University of Naples Federico II, Italy","institution_ids":["https://openalex.org/I71267560"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I71267560"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.28257959,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"1"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6438999772071838,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.6438999772071838,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.03060000017285347,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.01899999938905239,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6581000089645386},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5141000151634216},{"id":"https://openalex.org/keywords/intrusion-prevention-system","display_name":"Intrusion prevention system","score":0.5041000247001648},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.3560999929904938},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.35420000553131104},{"id":"https://openalex.org/keywords/wireless-sensor-network","display_name":"Wireless sensor network","score":0.29319998621940613}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8123000264167786},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6581000089645386},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5389000177383423},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5141000151634216},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.5041000247001648},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4521999955177307},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3560999929904938},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.35420000553131104},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.29319998621940613},{"id":"https://openalex.org/C90936777","wikidata":"https://www.wikidata.org/wiki/Q917189","display_name":"Host-based intrusion detection system","level":4,"score":0.29249998927116394},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.28870001435279846},{"id":"https://openalex.org/C51675839","wikidata":"https://www.wikidata.org/wiki/Q1665681","display_name":"Intelligent Network","level":2,"score":0.2849000096321106},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.2563999891281128},{"id":"https://openalex.org/C178489894","wikidata":"https://www.wikidata.org/wiki/Q8789","display_name":"Cryptography","level":2,"score":0.2502000033855438}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2026.3675031","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2026.3675031","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Ensuring":[0],"network":[1,36],"security":[2],"is":[3],"increasingly":[4],"challenging,":[5],"especially":[6],"in":[7,39,132,165],"the":[8,45,117],"Internet":[9],"of":[10,120],"Things":[11],"(IoT)":[12],"domain,":[13],"where":[14],"threats":[15,55,154],"are":[16],"diverse,":[17],"rapidly":[18],"evolving,":[19],"and":[20,59,92,112,155,167,170,176],"often":[21],"device-specific.":[22],"Hence,":[23],"Network":[24],"Intrusion":[25],"Detection":[26],"Systems":[27],"(NIDSs)":[28],"require":[29],"<italic":[30,49,60],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[31,50,61],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">(i)</i>":[32],"being":[33],"trained":[34],"on":[35,139],"traffic":[37,47],"gathered":[38],"different":[40,144],"collection":[41],"points":[42],"to":[43,65,78,127,147,151,174],"cover":[44],"attack":[46,67],"heterogeneity,":[48],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">(ii)</i>":[51],"continuously":[52],"learning":[53],"emerging":[54],"(viz.,":[56],"0-day":[57],"attacks),":[58],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">(iii)</i>":[62],"be":[63],"able":[64],"take":[66],"countermeasures":[68],"as":[69,71],"soon":[70],"possible.":[72],"In":[73],"this":[74],"work,":[75],"we":[76,98],"aim":[77],"improve":[79],"Artificial":[80],"Intelligence":[81],"(AI)-based":[82],"NIDS":[83,172],"design":[84],"&":[85],"maintenance":[86],"by":[87],"integrating":[88],"Federated":[89,101],"Learning":[90,95,104],"(FL)":[91],"Class":[93,102],"Incremental":[94,103],"(CIL).":[96],"Specifically,":[97],"devise":[99],"a":[100],"(FCIL)":[105],"framework\u2013suited":[106],"for":[107],"early-detection":[108],"settings\u2014that":[109],"supports":[110],"decentralized":[111],"continual":[113],"model":[114],"updates,":[115],"investigating":[116],"non-trivial":[118],"intersection":[119],"FL":[121],"algorithms":[122],"with":[123],"state-of-the-art":[124],"CIL":[125],"techniques":[126],"enable":[128],"scalable,":[129],"privacy-preserving":[130],"training":[131],"highly":[133],"non-IID":[134],"environments.":[135],"We":[136],"evaluate":[137],"FCIL":[138],"three":[140],"IoT":[141],"datasets":[142],"across":[143],"client":[145],"scenarios":[146],"assess":[148,161],"its":[149],"ability":[150],"learn":[152],"new":[153],"retain":[156],"prior":[157],"knowledge.":[158],"The":[159],"experiments":[160],"potential":[162],"key":[163],"challenges":[164],"generalization":[166],"few-sample":[168],"training,":[169],"compare":[171],"performance":[173],"monolithic":[175],"centralized":[177],"baselines.":[178]},"counts_by_year":[],"updated_date":"2026-03-20T20:47:17.329874","created_date":"2026-03-18T00:00:00"}