{"id":"https://openalex.org/W7140175103","doi":"https://doi.org/10.1186/s42400-026-00574-7","title":"Intrusion detection latency: the neglected metric","display_name":"Intrusion detection latency: the neglected metric","publication_year":2026,"publication_date":"2026-03-25","ids":{"openalex":"https://openalex.org/W7140175103","doi":"https://doi.org/10.1186/s42400-026-00574-7"},"language":"en","primary_location":{"id":"doi:10.1186/s42400-026-00574-7","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00574-7","pdf_url":null,"source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1186/s42400-026-00574-7","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028522907","display_name":"Sandhyarani Dash","orcid":null},"institutions":[],"countries":[],"is_corresponding":true,"raw_author_name":"Sandhyarani Dash","raw_affiliation_strings":[],"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5130464020","display_name":"John M. Acken","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"John M. Acken","raw_affiliation_strings":[],"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":2,"corresponding_author_ids":["https://openalex.org/A5028522907"],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.83835012,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"9","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8830000162124634,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8830000162124634,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.019999999552965164,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.015399999916553497,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7390999794006348},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.7161999940872192},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.524399995803833},{"id":"https://openalex.org/keywords/computation","display_name":"Computation","score":0.5131000280380249},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5091999769210815},{"id":"https://openalex.org/keywords/metric","display_name":"Metric (unit)","score":0.46790000796318054},{"id":"https://openalex.org/keywords/the-internet","display_name":"The Internet","score":0.4584999978542328},{"id":"https://openalex.org/keywords/internet-topology","display_name":"Internet topology","score":0.3513000011444092}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7738000154495239},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7390999794006348},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.7161999940872192},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.524399995803833},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.5131000280380249},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5091999769210815},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4860000014305115},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4729999899864197},{"id":"https://openalex.org/C176217482","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Metric (unit)","level":2,"score":0.46790000796318054},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.4584999978542328},{"id":"https://openalex.org/C99237066","wikidata":"https://www.wikidata.org/wiki/Q17092610","display_name":"Internet topology","level":3,"score":0.3513000011444092},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.3379000127315521},{"id":"https://openalex.org/C199845137","wikidata":"https://www.wikidata.org/wiki/Q145490","display_name":"Network topology","level":2,"score":0.32919999957084656},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3188000023365021},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.3091999888420105},{"id":"https://openalex.org/C46637626","wikidata":"https://www.wikidata.org/wiki/Q6693015","display_name":"Low latency (capital markets)","level":2,"score":0.30399999022483826},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.29809999465942383},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2800000011920929},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.27559998631477356},{"id":"https://openalex.org/C2780898871","wikidata":"https://www.wikidata.org/wiki/Q860554","display_name":"Performance metric","level":2,"score":0.2687999904155731},{"id":"https://openalex.org/C2778012447","wikidata":"https://www.wikidata.org/wiki/Q1034415","display_name":"Scope (computer science)","level":2,"score":0.2671999931335449},{"id":"https://openalex.org/C195780805","wikidata":"https://www.wikidata.org/wiki/Q1535986","display_name":"Metrics","level":5,"score":0.2606000006198883},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.2506999969482422}],"mesh":[],"locations_count":3,"locations":[{"id":"doi:10.1186/s42400-026-00574-7","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00574-7","pdf_url":null,"source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},{"id":"pmh:oai:pdxscholar.library.pdx.edu:ece_fac-1884","is_oa":true,"landing_page_url":"https://pdxscholar.library.pdx.edu/ece_fac/873","pdf_url":null,"source":{"id":"https://openalex.org/S4377196300","display_name":"PDXScholar  (Portland State University)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I126345244","host_organization_name":"Portland State University","host_organization_lineage":["https://openalex.org/I126345244"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Electrical and Computer Engineering Faculty Publications and Presentations","raw_type":"text"},{"id":"pmh:oai:doaj.org/article:1d3a033324cb426d8e2566ca1a46f5e3","is_oa":true,"landing_page_url":"https://doaj.org/article/1d3a033324cb426d8e2566ca1a46f5e3","pdf_url":null,"source":{"id":"https://openalex.org/S112646816","display_name":"SHILAP Revista de lepidopterolog\u00eda","issn_l":"0300-5267","issn":["0300-5267","2340-4078"],"is_oa":true,"is_in_doaj":true,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Cybersecurity, Vol 9, Iss 1 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1186/s42400-026-00574-7","is_oa":true,"landing_page_url":"https://doi.org/10.1186/s42400-026-00574-7","pdf_url":null,"source":{"id":"https://openalex.org/S3035238565","display_name":"Cybersecurity","issn_l":"2523-3246","issn":["2523-3246"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cybersecurity","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":92,"referenced_works":["https://openalex.org/W1952056635","https://openalex.org/W1985987493","https://openalex.org/W2167578468","https://openalex.org/W2293583529","https://openalex.org/W2397340457","https://openalex.org/W2612104483","https://openalex.org/W2771179281","https://openalex.org/W2951278513","https://openalex.org/W2971076825","https://openalex.org/W2980329246","https://openalex.org/W3015460945","https://openalex.org/W3092272602","https://openalex.org/W3127059019","https://openalex.org/W3162672097","https://openalex.org/W3177307336","https://openalex.org/W3183886395","https://openalex.org/W3187417346","https://openalex.org/W3193350240","https://openalex.org/W3196020550","https://openalex.org/W3197226817","https://openalex.org/W3198160199","https://openalex.org/W3201617817","https://openalex.org/W3210961427","https://openalex.org/W3215170803","https://openalex.org/W3217253123","https://openalex.org/W3217318162","https://openalex.org/W4205388580","https://openalex.org/W4206586673","https://openalex.org/W4210541099","https://openalex.org/W4210960727","https://openalex.org/W4214823156","https://openalex.org/W4220692398","https://openalex.org/W4220810976","https://openalex.org/W4220937612","https://openalex.org/W4224880013","https://openalex.org/W4226164615","https://openalex.org/W4285061313","https://openalex.org/W4285181607","https://openalex.org/W4285214552","https://openalex.org/W4285233421","https://openalex.org/W4285274733","https://openalex.org/W4285292519","https://openalex.org/W4290717392","https://openalex.org/W4293198140","https://openalex.org/W4296501357","https://openalex.org/W4311897822","https://openalex.org/W4312576847","https://openalex.org/W4312650548","https://openalex.org/W4312870798","https://openalex.org/W4313477864","https://openalex.org/W4361802926","https://openalex.org/W4375852305","https://openalex.org/W4377079722","https://openalex.org/W4378697089","https://openalex.org/W4379928182","https://openalex.org/W4385756633","https://openalex.org/W4386025700","https://openalex.org/W4386869719","https://openalex.org/W4386917647","https://openalex.org/W4386918758","https://openalex.org/W4387146071","https://openalex.org/W4387247693","https://openalex.org/W4387761032","https://openalex.org/W4388642342","https://openalex.org/W4389041700","https://openalex.org/W4390968749","https://openalex.org/W4391582627","https://openalex.org/W4391788104","https://openalex.org/W4394711286","https://openalex.org/W4394911774","https://openalex.org/W4396813102","https://openalex.org/W4398205886","https://openalex.org/W4399425692","https://openalex.org/W4399908572","https://openalex.org/W4400449158","https://openalex.org/W4401109663","https://openalex.org/W4401567266","https://openalex.org/W4402159133","https://openalex.org/W4402351625","https://openalex.org/W4403445937","https://openalex.org/W4404612232","https://openalex.org/W4404953669","https://openalex.org/W4407638382","https://openalex.org/W4407760312","https://openalex.org/W4407937671","https://openalex.org/W4409223191","https://openalex.org/W4410086716","https://openalex.org/W4410614001","https://openalex.org/W4411798929","https://openalex.org/W4411936737","https://openalex.org/W4412170861","https://openalex.org/W4412718821"],"related_works":[],"abstract_inverted_index":{"Abstract":[0],"Accuracy":[1],"remains":[2],"the":[3,37,43,49,55,109,167,185],"dominant":[4],"evaluation":[5],"metric":[6],"in":[7,28],"Intrusion":[8],"Detection":[9],"System":[10],"(IDS)":[11],"research,":[12],"yet":[13],"an":[14,174],"IDS":[15,77,203],"that":[16,26,80],"detects":[17],"attacks":[18],"too":[19],"late":[20],"is":[21,82],"functionally":[22],"equivalent":[23],"to":[24,86,95,139,148,173,181,190],"one":[25],"fails\u2014particularly":[27],"Internet":[29],"of":[30,39,45,51,57,75,93,111,169],"Things":[31],"(IoT)":[32],"environments.":[33],"In":[34],"operational":[35],"settings,":[36],"timing":[38],"detection":[40,137,183],"shapes":[41],"both":[42],"scope":[44],"adversarial":[46],"activity":[47],"and":[48,121,136,150,198],"feasibility":[50],"effective":[52],"response.":[53],"To":[54,99],"best":[56],"our":[58,170],"knowledge,":[59],"latency":[60,81,107,171,200],"(the":[61],"speed":[62],"at":[63],"which":[64],"intrusions":[65],"are":[66],"identified)":[67],"has":[68],"received":[69],"no":[70],"systematic":[71,146],"attention.":[72],"Our":[73],"analysis":[74],"published":[76],"papers":[78],"reveals":[79],"defined":[83],"inconsistently\u2014often":[84],"referring":[85],"inference,":[87],"communication,":[88],"computation":[89],"time,":[90,194],"or":[91],"combinations":[92],"these-leading":[94],"incomparable":[96],"performance":[97],"claims.":[98],"close":[100],"this":[101],"gap,":[102],"we":[103,165],"formally":[104],"define":[105],"end-to-end":[106],"as":[108],"sum":[110],"three":[112],"measurable":[113],"components:":[114],"Attacker-Controlled":[115],"Latency":[116,119,123],"(ACL),":[117],"IDS-Determined":[118],"(IDL),":[120],"Post-Detection":[122],"(PDL).":[124],"The":[125,142],"framework":[126,143,172,187],"further":[127],"decomposes":[128],"IDL":[129],"into":[130],"environment-specific":[131],"sub-components,":[132],"linking":[133],"network":[134],"topology":[135],"methodology":[138],"overall":[140],"responsiveness.":[141],"provides":[144],"a":[145,162,179],"mechanism":[147,180],"parameterize":[149],"vary":[151],"these":[152],"components":[153],"across":[154,202],"deployment":[155],"environments":[156],"(edge,":[157],"cloud,":[158],"federated":[159],"learning).":[160],"Using":[161],"Cyber-Physical":[163],"dataset,":[164],"demonstrate":[166],"applicability":[168],"existing":[175],"dataset.":[176],"By":[177],"providing":[178],"quantify":[182],"timeliness,":[184],"proposed":[186],"enables":[188],"analysts":[189],"estimate":[191],"attacker":[192],"dwell":[193],"benchmark":[195],"real-time":[196],"responsiveness,":[197],"standardize":[199],"reporting":[201],"studies.":[204]},"counts_by_year":[],"updated_date":"2026-04-02T15:55:50.835912","created_date":"2026-03-25T00:00:00"}