{"id":"https://openalex.org/W4416925180","doi":"https://doi.org/10.1109/wimob66857.2025.11257442","title":"A Feature-Aware Adaptive Ensemble Framework for IoT Intrusion Detection Systems","display_name":"A Feature-Aware Adaptive Ensemble Framework for IoT Intrusion Detection Systems","publication_year":2025,"publication_date":"2025-10-20","ids":{"openalex":"https://openalex.org/W4416925180","doi":"https://doi.org/10.1109/wimob66857.2025.11257442"},"language":null,"primary_location":{"id":"doi:10.1109/wimob66857.2025.11257442","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wimob66857.2025.11257442","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob)","raw_type":"proceedings-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116904151","display_name":"Youssef Laraig","orcid":null},"institutions":[{"id":"https://openalex.org/I4210153527","display_name":"Institut National des Postes et T\u00e9l\u00e9communications","ror":"https://ror.org/052bnvt46","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210153527","https://openalex.org/I4210167103"]}],"countries":["MA"],"is_corresponding":true,"raw_author_name":"Youssef Laraig","raw_affiliation_strings":["National Institute of Posts and Telecommunications (INPT),STRS Laboratory,Rabat,Morocco"],"affiliations":[{"raw_affiliation_string":"National Institute of Posts and Telecommunications (INPT),STRS Laboratory,Rabat,Morocco","institution_ids":["https://openalex.org/I4210153527"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091428974","display_name":"Yann Ben Maissa","orcid":"https://orcid.org/0000-0001-9620-9519"},"institutions":[{"id":"https://openalex.org/I4210153527","display_name":"Institut National des Postes et T\u00e9l\u00e9communications","ror":"https://ror.org/052bnvt46","country_code":"MA","type":"education","lineage":["https://openalex.org/I4210153527","https://openalex.org/I4210167103"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Yann Ben Maissa","raw_affiliation_strings":["National Institute of Posts and Telecommunications (INPT),STRS Laboratory,Rabat,Morocco"],"affiliations":[{"raw_affiliation_string":"National Institute of Posts and Telecommunications (INPT),STRS Laboratory,Rabat,Morocco","institution_ids":["https://openalex.org/I4210153527"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5062938524","display_name":"S\u00e9bastien Roy","orcid":"https://orcid.org/0000-0002-1262-9485"},"institutions":[{"id":"https://openalex.org/I135117807","display_name":"Universit\u00e9 de Sherbrooke","ror":"https://ror.org/00kybxq39","country_code":"CA","type":"education","lineage":["https://openalex.org/I135117807"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"S\u00e9bastien Roy","raw_affiliation_strings":["University of Sherbrooke,Sherbrooke QC,Canada"],"affiliations":[{"raw_affiliation_string":"University of Sherbrooke,Sherbrooke QC,Canada","institution_ids":["https://openalex.org/I135117807"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5042688733","display_name":"Pierre-Martin Tardif","orcid":"https://orcid.org/0000-0002-7413-6897"},"institutions":[{"id":"https://openalex.org/I135117807","display_name":"Universit\u00e9 de Sherbrooke","ror":"https://ror.org/00kybxq39","country_code":"CA","type":"education","lineage":["https://openalex.org/I135117807"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Pierre-Martin Tardif","raw_affiliation_strings":["University of Sherbrooke,Sherbrooke QC,Canada"],"affiliations":[{"raw_affiliation_string":"University of Sherbrooke,Sherbrooke QC,Canada","institution_ids":["https://openalex.org/I135117807"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5032138906","display_name":"Brahim El Bhiri","orcid":"https://orcid.org/0000-0001-8119-3243"},"institutions":[{"id":"https://openalex.org/I4210146806","display_name":"Harmonic Drive (Germany)","ror":"https://ror.org/04kwq4x05","country_code":"DE","type":"company","lineage":["https://openalex.org/I4210146806"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Brahim El bhiri","raw_affiliation_strings":["Harmony Technology,Morocco"],"affiliations":[{"raw_affiliation_string":"Harmony Technology,Morocco","institution_ids":["https://openalex.org/I4210146806"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":["https://openalex.org/A5116904151"],"corresponding_institution_ids":["https://openalex.org/I4210153527"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.45513032,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"1","last_page":"6"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.847100019454956,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.847100019454956,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.051500000059604645,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.006599999964237213,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/weighting","display_name":"Weighting","score":0.5899999737739563},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5577999949455261},{"id":"https://openalex.org/keywords/random-forest","display_name":"Random forest","score":0.47200000286102295},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.451200008392334},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.44760000705718994},{"id":"https://openalex.org/keywords/reduction","display_name":"Reduction (mathematics)","score":0.43290001153945923},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.39719998836517334},{"id":"https://openalex.org/keywords/initialization","display_name":"Initialization","score":0.3709999918937683},{"id":"https://openalex.org/keywords/false-positive-paradox","display_name":"False positive paradox","score":0.34850001335144043}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7426999807357788},{"id":"https://openalex.org/C183115368","wikidata":"https://www.wikidata.org/wiki/Q856577","display_name":"Weighting","level":2,"score":0.5899999737739563},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5577999949455261},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5440000295639038},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.47279998660087585},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.47200000286102295},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.460999995470047},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.451200008392334},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.44760000705718994},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.43290001153945923},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.39719998836517334},{"id":"https://openalex.org/C114466953","wikidata":"https://www.wikidata.org/wiki/Q6034165","display_name":"Initialization","level":2,"score":0.3709999918937683},{"id":"https://openalex.org/C64869954","wikidata":"https://www.wikidata.org/wiki/Q1859747","display_name":"False positive paradox","level":2,"score":0.34850001335144043},{"id":"https://openalex.org/C47702885","wikidata":"https://www.wikidata.org/wiki/Q5441227","display_name":"Feedforward neural network","level":3,"score":0.34130001068115234},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.3391999900341034},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.33000001311302185},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3098999857902527},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.3000999987125397},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.28029999136924744},{"id":"https://openalex.org/C108010975","wikidata":"https://www.wikidata.org/wiki/Q500094","display_name":"Pruning","level":2,"score":0.27570000290870667},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.27129998803138733},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.26910001039505005},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2653999924659729},{"id":"https://openalex.org/C51632099","wikidata":"https://www.wikidata.org/wiki/Q3985153","display_name":"Training set","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C132778050","wikidata":"https://www.wikidata.org/wiki/Q2065430","display_name":"Weighted voting","level":4,"score":0.2619999945163727},{"id":"https://openalex.org/C2778067643","wikidata":"https://www.wikidata.org/wiki/Q166507","display_name":"Interval (graph theory)","level":2,"score":0.2572999894618988},{"id":"https://openalex.org/C119898033","wikidata":"https://www.wikidata.org/wiki/Q3433888","display_name":"Ensemble forecasting","level":2,"score":0.2524999976158142},{"id":"https://openalex.org/C2777826928","wikidata":"https://www.wikidata.org/wiki/Q3745713","display_name":"Fingerprint (computing)","level":2,"score":0.25200000405311584},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.25060001015663147}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/wimob66857.2025.11257442","is_oa":false,"landing_page_url":"https://doi.org/10.1109/wimob66857.2025.11257442","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"2025 21th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob)","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":20,"referenced_works":["https://openalex.org/W2945884086","https://openalex.org/W2965552844","https://openalex.org/W2986455874","https://openalex.org/W3015246755","https://openalex.org/W3049204557","https://openalex.org/W3111288713","https://openalex.org/W3209622650","https://openalex.org/W4206709449","https://openalex.org/W4229012250","https://openalex.org/W4288038854","https://openalex.org/W4320919659","https://openalex.org/W4321020904","https://openalex.org/W4321325892","https://openalex.org/W4380995531","https://openalex.org/W4382281941","https://openalex.org/W4382793227","https://openalex.org/W4387007843","https://openalex.org/W4390231746","https://openalex.org/W4393065931","https://openalex.org/W4400919536"],"related_works":[],"abstract_inverted_index":{"Intrusion":[0],"Detection":[1],"Systems":[2],"(IDS)":[3],"are":[4],"essential":[5],"for":[6,64,135,139],"Internet":[7],"of":[8,78,121],"Things":[9],"(IoT)":[10],"security,":[11],"but":[12],"single":[13],"models":[14,81,127],"often":[15],"fail":[16],"due":[17],"to":[18,43,83,130,183],"IoT":[19,51,68],"data":[20],"heterogeneity.":[21],"While":[22],"machine":[23],"learning":[24],"ensembles":[25],"combine":[26],"complementary":[27,79,91],"strengths,":[28],"conventional":[29],"static":[30],"weighting":[31,73],"schemes,":[32],"such":[33],"as":[34],"majority":[35],"voting":[36],"and":[37,46,105,154,170],"temporal":[38],"stacking,":[39],"do":[40],"not":[41],"adapt":[42],"sample-specific":[44],"features":[45,120],"may":[47],"underperform":[48],"in":[49,67,158,166,178],"diverse":[50],"scenarios.":[52],"To":[53],"address":[54],"these":[55],"limitations,":[56],"we":[57],"propose":[58],"a":[59,75,159,171],"dynamic":[60],"feature-weighting":[61],"ensemble":[62],"framework":[63,150],"intrusion":[65],"detection":[66],"networks":[69],"that":[70],"combines":[71,89],"adaptive":[72],"with":[74],"selected":[76],"set":[77],"base":[80],"suited":[82,129],"different":[84],"traffic":[85,124],"patterns.":[86],"The":[87],"approach":[88],"four":[90],"models:":[92],"Gradient":[93],"Boosted":[94],"Trees":[95],"(LightGBM),":[96],"Bagging-based":[97],"Random":[98],"Forest":[99],"(RF),":[100],"Instance-based":[101],"k-Nearest":[102],"Neighbors":[103],"(kNN),":[104],"Deep":[106],"Feedforward":[107],"Neural":[108],"Networks":[109],"(FNN).":[110],"It":[111],"dynamically":[112],"adjusts":[113],"their":[114],"weights":[115],"based":[116],"on":[117,145],"the":[118,146,149],"active":[119],"each":[122],"incoming":[123],"flow,":[125],"emphasizing":[126],"best":[128],"specific":[131],"patterns":[132],"(e.g.,":[133],"LightGBM":[134],"packet-header":[136],"patterns,":[137],"FNN":[138],"nonlinear":[140],"TCP":[141],"flag":[142],"interactions).":[143],"Evaluated":[144],"CICIoT2023":[147],"dataset,":[148],"achieved":[151],"99.95%":[152],"precision":[153],"98.59%":[155],"recall,":[156],"resulting":[157],"<tex":[160,172],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[161,173],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$73":[162],"\\%-97":[163],"\\%$</tex>":[164,176],"reduction":[165,177],"false":[167,179],"positives":[168],"(FP)":[169],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">$9":[174],"\\%-30":[175],"negatives":[180],"(FN)":[181],"compared":[182],"individual":[184],"models.":[185]},"counts_by_year":[],"updated_date":"2026-03-07T16:01:11.037858","created_date":"2025-12-02T00:00:00"}