{"id":"https://openalex.org/W4416222934","doi":"https://doi.org/10.1109/wcnc65185.2026.11555541","title":"Toward an Intrusion Detection System for a Virtualization Framework in Edge Computing","display_name":"Toward an Intrusion Detection System for a Virtualization Framework in Edge Computing","publication_year":2026,"publication_date":"2026-04-13","ids":{"openalex":"https://openalex.org/W4416222934","doi":"https://doi.org/10.1109/wcnc65185.2026.11555541"},"language":null,"primary_location":{"id":"doi:10.1109/wcnc65185.2026.11555541","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wcnc65185.2026.11555541","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Wireless Communications and Networking Conference (WCNC)","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["arxiv","crossref","datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://arxiv.org/pdf/2511.09068","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5049251780","display_name":"\u00c9verton de Matos","orcid":"https://orcid.org/0000-0001-5888-0969"},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Everton De Matos","raw_affiliation_strings":["Technology Innovation Institute (TII),Secure Systems Research Center,Abu Dhabi,Unied Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technology Innovation Institute (TII),Secure Systems Research Center,Abu Dhabi,Unied Arab Emirates","institution_ids":["https://openalex.org/I4210087059"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120352450","display_name":"Hazaa Alameri","orcid":null},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Hazaa Alameri","raw_affiliation_strings":["Technology Innovation Institute (TII),Secure Systems Research Center,Abu Dhabi,Unied Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technology Innovation Institute (TII),Secure Systems Research Center,Abu Dhabi,Unied Arab Emirates","institution_ids":["https://openalex.org/I4210087059"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054363087","display_name":"Willian T. Lunardi","orcid":"https://orcid.org/0000-0003-0718-0019"},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Willian Tessaro Lunardi","raw_affiliation_strings":["Technology Innovation Institute (TII),Secure Systems Research Center,Abu Dhabi,Unied Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technology Innovation Institute (TII),Secure Systems Research Center,Abu Dhabi,Unied Arab Emirates","institution_ids":["https://openalex.org/I4210087059"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Martin Andreoni","orcid":null},"institutions":[{"id":"https://openalex.org/I4210087059","display_name":"Technology Innovation Institute","ror":"https://ror.org/001kv2y39","country_code":"AE","type":"facility","lineage":["https://openalex.org/I4210087059"]}],"countries":["AE"],"is_corresponding":false,"raw_author_name":"Martin Andreoni","raw_affiliation_strings":["Technology Innovation Institute (TII),Secure Systems Research Center,Abu Dhabi,Unied Arab Emirates"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Technology Innovation Institute (TII),Secure Systems Research Center,Abu Dhabi,Unied Arab Emirates","institution_ids":["https://openalex.org/I4210087059"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5061101324","display_name":"Eduardo K. Viegas","orcid":"https://orcid.org/0000-0002-5050-6363"},"institutions":[{"id":"https://openalex.org/I176838256","display_name":"Pontif\u00edcia Universidade Cat\u00f3lica do Paran\u00e1","ror":"https://ror.org/02x1vjk79","country_code":"BR","type":"education","lineage":["https://openalex.org/I176838256"]}],"countries":["BR"],"is_corresponding":false,"raw_author_name":"Eduardo Viegas","raw_affiliation_strings":["Pontifical Catholic University of Paraná,Graduate Program in Computer Science,Curitiba,Brazil"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Pontifical Catholic University of Paraná,Graduate Program in Computer Science,Curitiba,Brazil","institution_ids":["https://openalex.org/I176838256"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"7"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5669000148773193,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.5669000148773193,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.2296999990940094,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.047600001096725464,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/virtualization","display_name":"Virtualization","score":0.6848999857902527},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5947999954223633},{"id":"https://openalex.org/keywords/edge-computing","display_name":"Edge computing","score":0.5540000200271606},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5098000168800354},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.492000013589859},{"id":"https://openalex.org/keywords/enhanced-data-rates-for-gsm-evolution","display_name":"Enhanced Data Rates for GSM Evolution","score":0.4763999879360199},{"id":"https://openalex.org/keywords/overhead","display_name":"Overhead (engineering)","score":0.46560001373291016},{"id":"https://openalex.org/keywords/node","display_name":"Node (physics)","score":0.4632999897003174},{"id":"https://openalex.org/keywords/edge-device","display_name":"Edge device","score":0.4381999969482422}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7060999870300293},{"id":"https://openalex.org/C513985346","wikidata":"https://www.wikidata.org/wiki/Q270471","display_name":"Virtualization","level":3,"score":0.6848999857902527},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5947999954223633},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.5540000200271606},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5098000168800354},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.492000013589859},{"id":"https://openalex.org/C162307627","wikidata":"https://www.wikidata.org/wiki/Q204833","display_name":"Enhanced Data Rates for GSM Evolution","level":2,"score":0.4763999879360199},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.46560001373291016},{"id":"https://openalex.org/C62611344","wikidata":"https://www.wikidata.org/wiki/Q1062658","display_name":"Node (physics)","level":2,"score":0.4632999897003174},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.4381999969482422},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.42590001225471497},{"id":"https://openalex.org/C186594467","wikidata":"https://www.wikidata.org/wiki/Q1429176","display_name":"Flooding (psychology)","level":2,"score":0.41200000047683716},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.38600000739097595},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.37389999628067017},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.37229999899864197},{"id":"https://openalex.org/C2780378061","wikidata":"https://www.wikidata.org/wiki/Q25351891","display_name":"Service (business)","level":2,"score":0.35830000042915344},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.3569999933242798},{"id":"https://openalex.org/C93996380","wikidata":"https://www.wikidata.org/wiki/Q44127","display_name":"Server","level":2,"score":0.3490000069141388},{"id":"https://openalex.org/C2776061582","wikidata":"https://www.wikidata.org/wiki/Q25325231","display_name":"Mobile edge computing","level":3,"score":0.3296999931335449},{"id":"https://openalex.org/C90936777","wikidata":"https://www.wikidata.org/wiki/Q917189","display_name":"Host-based intrusion detection system","level":4,"score":0.32820001244544983},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.322299987077713},{"id":"https://openalex.org/C25344961","wikidata":"https://www.wikidata.org/wiki/Q192726","display_name":"Virtual machine","level":2,"score":0.31769999861717224},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3037000000476837},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.3012999892234802},{"id":"https://openalex.org/C2779898492","wikidata":"https://www.wikidata.org/wiki/Q4112081","display_name":"Network virtualization","level":4,"score":0.2888999879360199},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.27570000290870667},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.2745000123977661},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.2696000039577484},{"id":"https://openalex.org/C2776874963","wikidata":"https://www.wikidata.org/wiki/Q4112081","display_name":"Virtual network","level":2,"score":0.25369998812675476},{"id":"https://openalex.org/C27061796","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion prevention system","level":3,"score":0.2513999938964844}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1109/wcnc65185.2026.11555541","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wcnc65185.2026.11555541","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2026 IEEE Wireless Communications and Networking Conference (WCNC)","raw_type":"proceedings-article"},{"id":"pmh:oai:arXiv.org:2511.09068","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2511.09068","pdf_url":"https://arxiv.org/pdf/2511.09068","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},{"id":"doi:10.48550/arxiv.2511.09068","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2511.09068","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"pmh:oai:arXiv.org:2511.09068","is_oa":true,"landing_page_url":"http://arxiv.org/abs/2511.09068","pdf_url":"https://arxiv.org/pdf/2511.09068","source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"text"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":false},"content_urls":{"pdf":"https://content.openalex.org/works/W4416222934.pdf"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Edge":[0],"computing":[1],"pushes":[2],"computation":[3],"closer":[4],"to":[5],"data":[6],"sources,":[7],"but":[8],"it":[9,95],"also":[10],"expands":[11],"the":[12,21,24,63,105],"attack":[13],"surface":[14],"on":[15,79,104],"resource-constrained":[16],"devices.":[17],"This":[18],"work":[19],"explores":[20],"deployment":[22],"of":[23],"Lightweight":[25],"Deep":[26,50],"Anomaly":[27],"Detection":[28],"for":[29],"Network":[30],"Traffic":[31],"(LDPI)":[32],"integrated":[33],"as":[34],"an":[35],"isolated":[36],"service":[37],"within":[38],"a":[39,49,80],"virtualization":[40],"framework":[41,107],"that":[42],"provides":[43],"security":[44],"by":[45],"separation.":[46],"LDPI,":[47],"adopting":[48],"Learning":[51],"approach,":[52],"achieved":[53],"strong":[54],"training":[55],"performance,":[56],"reaching":[57],"AUC":[58],"0.999":[59],"(5-fold":[60],"mean)":[61],"across":[62],"evaluated":[64],"packet-window":[65],"settings":[66],"(n,":[67],"l),":[68],"with":[69,96],"high":[70],"F1":[71],"at":[72],"conservative":[73],"operating":[74],"points.":[75],"We":[76],"deploy":[77],"LDPI":[78],"laptop-class":[81],"edge":[82],"node":[83],"and":[84,88,101,111],"evaluate":[85],"its":[86],"overhead":[87],"performance":[89],"in":[90],"two":[91],"scenarios:":[92],"(i)":[93],"comparing":[94],"representative":[97],"signature-based":[98],"IDSes":[99],"(Suricata":[100],"Snort)":[102],"deployed":[103],"same":[106],"under":[108],"identical":[109],"workloads,":[110],"(ii)":[112],"while":[113],"detecting":[114],"network":[115],"flooding":[116],"attacks.":[117]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2025-11-14T00:00:00"}