{"id":"https://openalex.org/W7161123885","doi":"https://doi.org/10.1109/tnsm.2026.3693266","title":"Balancing Timeliness and Accuracy: A Hybrid Data-Control Plane Framework for Volumetric DDoS Defense in IoT","display_name":"Balancing Timeliness and Accuracy: A Hybrid Data-Control Plane Framework for Volumetric DDoS Defense in IoT","publication_year":2026,"publication_date":"2026-01-01","ids":{"openalex":"https://openalex.org/W7161123885","doi":"https://doi.org/10.1109/tnsm.2026.3693266"},"language":null,"primary_location":{"id":"doi:10.1109/tnsm.2026.3693266","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2026.3693266","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5136132536","display_name":"Jiahang Pu","orcid":"https://orcid.org/0009-0003-1699-7191"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiahang Pu","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0009-0003-1699-7191","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068634489","display_name":"Hongyu Ye","orcid":"https://orcid.org/0009-0008-0360-8974"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hongyu Ye","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113638084","display_name":"Jing Cheng","orcid":null},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jing Cheng","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5015700556","display_name":"Feng Shan","orcid":"https://orcid.org/0000-0002-9734-789X"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Feng Shan","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0001-7398-8265","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5065639839","display_name":"Runqun Xiong","orcid":"https://orcid.org/0000-0002-1941-5586"},"institutions":[{"id":"https://openalex.org/I76569877","display_name":"Southeast University","ror":"https://ror.org/04ct4d772","country_code":"CN","type":"education","lineage":["https://openalex.org/I76569877"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Runqun Xiong","raw_affiliation_strings":["School of Computer Science and Engineering, Southeast University, Nanjing, China"],"raw_orcid":"https://orcid.org/0000-0002-1941-5586","affiliations":[{"raw_affiliation_string":"School of Computer Science and Engineering, Southeast University, Nanjing, China","institution_ids":["https://openalex.org/I76569877"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I76569877"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.50818909,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":null,"first_page":"4647","last_page":"4662"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.2865999937057495,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.2865999937057495,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.1670999974012375,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11498","display_name":"Security in Wireless Sensor Networks","score":0.0640999972820282,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6381999850273132},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.5827999711036682},{"id":"https://openalex.org/keywords/forwarding-plane","display_name":"Forwarding plane","score":0.4916999936103821},{"id":"https://openalex.org/keywords/server","display_name":"Server","score":0.42579999566078186},{"id":"https://openalex.org/keywords/routing-control-plane","display_name":"Routing control plane","score":0.3714999854564667},{"id":"https://openalex.org/keywords/plane","display_name":"Plane (geometry)","score":0.3564999997615814}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8299999833106995},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6381999850273132},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.5827999711036682},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.5454999804496765},{"id":"https://openalex.org/C10597312","wikidata":"https://www.wikidata.org/wiki/Q5473302","display_name":"Forwarding plane","level":3,"score":0.4916999936103821},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.42579999566078186},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.39559999108314514},{"id":"https://openalex.org/C145595949","wikidata":"https://www.wikidata.org/wiki/Q7371619","display_name":"Routing control plane","level":2,"score":0.3714999854564667},{"id":"https://openalex.org/C17825722","wikidata":"https://www.wikidata.org/wiki/Q17285","display_name":"Plane (geometry)","level":2,"score":0.3564999997615814},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3163999915122986},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.30480000376701355},{"id":"https://openalex.org/C138959212","wikidata":"https://www.wikidata.org/wiki/Q1806783","display_name":"Load balancing (electrical power)","level":3,"score":0.26980000734329224},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2612999975681305},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.25110000371932983}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tnsm.2026.3693266","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tnsm.2026.3693266","pdf_url":null,"source":{"id":"https://openalex.org/S173527311","display_name":"IEEE Transactions on Network and Service Management","issn_l":"1932-4537","issn":["1932-4537","2373-7379"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Network and Service Management","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G36496830","display_name":null,"funder_award_id":"62232004","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7952734181","display_name":null,"funder_award_id":"2021YFB2900100","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G935364076","display_name":null,"funder_award_id":"62572115","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":27,"referenced_works":["https://openalex.org/W2111542531","https://openalex.org/W2789828921","https://openalex.org/W2888505697","https://openalex.org/W2982682021","https://openalex.org/W3008207353","https://openalex.org/W3116910419","https://openalex.org/W3128341305","https://openalex.org/W3211494975","https://openalex.org/W3214071552","https://openalex.org/W4290991228","https://openalex.org/W4290991406","https://openalex.org/W4308424950","https://openalex.org/W4308632271","https://openalex.org/W4320015848","https://openalex.org/W4382281941","https://openalex.org/W4382518183","https://openalex.org/W4385080328","https://openalex.org/W4386260575","https://openalex.org/W4386275796","https://openalex.org/W4386349968","https://openalex.org/W4388867311","https://openalex.org/W4392909336","https://openalex.org/W4402265182","https://openalex.org/W4402288728","https://openalex.org/W4405440279","https://openalex.org/W4414802890","https://openalex.org/W4417451629"],"related_works":[],"abstract_inverted_index":{"Resource-constrained":[0],"IoT":[1],"devices":[2],"in":[3],"Industrial":[4],"Internet":[5],"environments":[6],"are":[7],"highly":[8],"vulnerable":[9],"to":[10,14,39,101,117,127,178],"DDoS":[11,189],"attacks":[12,190],"due":[13],"infrequent":[15],"security":[16],"updates":[17],"and":[18,46,134,151,169,188],"insufficient":[19],"built-in":[20],"protection":[21],"mechanisms.":[22],"Existing":[23],"defense":[24,62],"solutions":[25],"primarily":[26],"rely":[27],"on":[28,141,195],"external":[29],"filtering":[30],"servers":[31],"or":[32],"programmable":[33],"switches,":[34],"but":[35],"these":[36,55],"approaches":[37],"fail":[38],"simultaneously":[40],"meet":[41],"the":[42,66,75,102,124],"stringent":[43],"real-time":[44],"performance":[45],"high":[47],"accuracy":[48],"requirements":[49],"of":[50,70,138,164],"industrial":[51],"applications.":[52],"To":[53],"address":[54],"limitations,":[56],"we":[57],"propose":[58],"a":[59,90,136,142],"novel":[60],"cross-plane":[61],"framework":[63,140,160,182],"that":[64,112,158],"exploits":[65],"temporal":[67],"invariance":[68],"characteristics":[69],"attack":[71,120,149,165],"traffic":[72,87,153,166],"patterns.":[73,154],"In":[74],"data":[76,125],"plane,":[77],"an":[78],"adaptive":[79],"variance":[80],"threshold":[81],"mechanism":[82],"immediately":[83],"mitigates":[84,162],"high-volume,":[85],"low-variance":[86],"flows,":[88],"while":[89],"bidirectional":[91],"dual-hash":[92],"table":[93],"captures":[94],"low-collision":[95],"flow":[96,110],"features":[97],"for":[98],"efficient":[99],"export":[100],"control":[103,106],"plane.":[104],"The":[105],"plane":[107,126],"constructs":[108],"temporally-enhanced":[109],"sequences":[111],"enable":[113],"deep":[114],"learning":[115],"models":[116],"perform":[118],"accurate":[119],"detection,":[121],"subsequently":[122],"directing":[123],"block":[128],"identified":[129],"malicious":[130],"sources.":[131],"We":[132],"implemented":[133],"evaluated":[135],"prototype":[137],"this":[139],"software":[143],"switch":[144],"platform":[145],"using":[146],"both":[147,186],"real-world":[148],"datasets":[150],"custom-generated":[152],"Experimental":[155],"results":[156],"demonstrate":[157],"our":[159,181],"successfully":[161],"86%":[163],"within":[167,174],"milliseconds":[168],"achieves":[170],"complete":[171],"source":[172],"blocking":[173],"52":[175],"seconds.":[176],"Compared":[177],"baseline":[179],"methods,":[180],"can":[183],"effectively":[184],"counter":[185],"DoS":[187],"without":[191],"generating":[192],"false":[193],"positives":[194],"benign":[196],"traffic.":[197]},"counts_by_year":[],"updated_date":"2026-08-12T21:12:35.861297","created_date":"2026-05-15T00:00:00"}