{"id":"https://openalex.org/W7167597041","doi":"https://doi.org/10.15837/ijccc.2026.4.7480","title":"AMoE-IDS: An Adaptive Mixture-of-Experts Framework for Cross-Dataset Intrusion Detection","display_name":"AMoE-IDS: An Adaptive Mixture-of-Experts Framework for Cross-Dataset Intrusion Detection","publication_year":2026,"publication_date":"2026-07-07","ids":{"openalex":"https://openalex.org/W7167597041","doi":"https://doi.org/10.15837/ijccc.2026.4.7480"},"language":null,"primary_location":{"id":"doi:10.15837/ijccc.2026.4.7480","is_oa":true,"landing_page_url":"https://doi.org/10.15837/ijccc.2026.4.7480","pdf_url":"https://univagora.ro/jour/index.php/ijccc/article/download/7480/2531","source":{"id":"https://openalex.org/S147751515","display_name":"International Journal of Computers Communications & Control","issn_l":"1841-9836","issn":["1841-9836","1841-9844"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314650","host_organization_name":"Agora University","host_organization_lineage":["https://openalex.org/P4310314650"],"host_organization_lineage_names":["Agora University"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"INTERNATIONAL JOURNAL OF COMPUTERS COMMUNICATIONS & CONTROL","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://univagora.ro/jour/index.php/ijccc/article/download/7480/2531","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5027762934","display_name":"Ouail Mjahed","orcid":null},"institutions":[{"id":"https://openalex.org/I119856527","display_name":"Cadi Ayyad University","ror":"https://ror.org/04xf6nm78","country_code":"MA","type":"education","lineage":["https://openalex.org/I119856527"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Ouail Mjahed","raw_affiliation_strings":["Faculty of Sciences and Technology, Department of Computer Sciences, L2IS, Cadi Ayyad University, Marrakech, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Sciences and Technology, Department of Computer Sciences, L2IS, Cadi Ayyad University, Marrakech, Morocco","institution_ids":["https://openalex.org/I119856527"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017458334","display_name":"Soukaina Mjahed","orcid":null},"institutions":[{"id":"https://openalex.org/I119856527","display_name":"Cadi Ayyad University","ror":"https://ror.org/04xf6nm78","country_code":"MA","type":"education","lineage":["https://openalex.org/I119856527"]}],"countries":["MA"],"is_corresponding":false,"raw_author_name":"Soukaina Mjahed","raw_affiliation_strings":["Faculty of Sciences Semlalia, Department of Computer Sciences, LISI Laboratory, Cadi Ayyad University, Marrakech, Morocco"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Sciences Semlalia, Department of Computer Sciences, LISI Laboratory, Cadi Ayyad University, Marrakech, Morocco","institution_ids":["https://openalex.org/I119856527"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I119856527"],"apc_list":{"value":500,"currency":"EUR","value_usd":539},"apc_paid":{"value":500,"currency":"EUR","value_usd":539},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.88550431,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"21","issue":"4","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9398999810218811,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9398999810218811,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.009499999694526196,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.003100000089034438,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5925999879837036},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5773000121116638},{"id":"https://openalex.org/keywords/exploit","display_name":"Exploit","score":0.5652999877929688},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.510699987411499},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4560999870300293},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.4311999976634979},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.430400013923645},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.3262999951839447},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.32350000739097595}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8616999983787537},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5925999879837036},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5773000121116638},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.5652999877929688},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5202000141143799},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.510699987411499},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4977000057697296},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.48240000009536743},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4560999870300293},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.4311999976634979},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.430400013923645},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3262999951839447},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.32350000739097595},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.31859999895095825},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.31349998712539673},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.3111000061035156},{"id":"https://openalex.org/C118505674","wikidata":"https://www.wikidata.org/wiki/Q42586063","display_name":"Encoder","level":2,"score":0.3109999895095825},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.30379998683929443},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.3018999993801117},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.2985000014305115},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.29580000042915344},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.2946000099182129},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.28839999437332153},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.28619998693466187},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2768000066280365},{"id":"https://openalex.org/C166955791","wikidata":"https://www.wikidata.org/wiki/Q629579","display_name":"Macro","level":2,"score":0.26350000500679016}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.15837/ijccc.2026.4.7480","is_oa":true,"landing_page_url":"https://doi.org/10.15837/ijccc.2026.4.7480","pdf_url":"https://univagora.ro/jour/index.php/ijccc/article/download/7480/2531","source":{"id":"https://openalex.org/S147751515","display_name":"International Journal of Computers Communications & Control","issn_l":"1841-9836","issn":["1841-9836","1841-9844"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314650","host_organization_name":"Agora University","host_organization_lineage":["https://openalex.org/P4310314650"],"host_organization_lineage_names":["Agora University"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"INTERNATIONAL JOURNAL OF COMPUTERS COMMUNICATIONS & CONTROL","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.15837/ijccc.2026.4.7480","is_oa":true,"landing_page_url":"https://doi.org/10.15837/ijccc.2026.4.7480","pdf_url":"https://univagora.ro/jour/index.php/ijccc/article/download/7480/2531","source":{"id":"https://openalex.org/S147751515","display_name":"International Journal of Computers Communications & Control","issn_l":"1841-9836","issn":["1841-9836","1841-9844"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310314650","host_organization_name":"Agora University","host_organization_lineage":["https://openalex.org/P4310314650"],"host_organization_lineage_names":["Agora University"],"type":"journal"},"license":"cc-by-nc","license_id":"https://openalex.org/licenses/cc-by-nc","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"INTERNATIONAL JOURNAL OF COMPUTERS COMMUNICATIONS & CONTROL","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","score":0.6427691578865051,"display_name":"Industry, innovation and infrastructure"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7167597041.pdf","grobid_xml":"https://content.openalex.org/works/W7167597041.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Intrusion":[0,81],"Detection":[1,82],"Systems":[2],"(IDS)":[3],"are":[4],"essential":[5],"for":[6],"securing":[7],"modern":[8],"network":[9,120,204],"infrastructures":[10],"against":[11],"increasingly":[12],"sophisticated":[13],"cyber":[14],"threats.":[15],"While":[16],"deep":[17,87,156],"learning-based":[18],"IDS":[19,160],"have":[20],"shown":[21],"promising":[22],"performance,":[23,250],"most":[24,127],"existing":[25],"approaches":[26],"rely":[27],"on":[28,140,180],"static":[29],"and":[30,49,56,100,133,148,158,170,172,178,184,229,253],"monolithic":[31],"architectures":[32],"that":[33,90,151],"struggle":[34],"to":[35,37,67,125,200],"adapt":[36],"heterogeneous":[38,114],"environments":[39],"such":[40],"as":[41],"Internet":[42],"of":[43,167,175,214,226,240],"Things":[44],"(IoT)":[45],"systems,":[46],"enterprise":[47],"networks,":[48,99],"mixed":[50],"traffic":[51],"scenarios.":[52],"Moreover,":[53],"conventional":[54,155],"ensemble":[55],"hybrid":[57,86,159],"methods":[58],"typically":[59],"employ":[60],"fixed":[61],"fusion":[62],"strategies,":[63],"limiting":[64],"their":[65],"ability":[66],"exploit":[68],"input-dependent":[69],"specialization.":[70],"To":[71],"address":[72],"these":[73],"limitations,":[74],"this":[75],"paper":[76],"proposes":[77],"an":[78,101],"Adaptive":[79],"Mixture-of-Experts":[80],"System":[83],"(AMoE-IDS),":[84],"a":[85,92,109],"learning":[88,157],"framework":[89,164,247],"integrates":[91],"shared":[93,106],"feature":[94,115,227],"encoder,":[95],"multiple":[96],"specialized":[97],"expert":[98,231],"adaptive":[102,230],"gating":[103,119],"mechanism.":[104],"The":[105,162],"encoder":[107],"learns":[108],"unified":[110],"latent":[111],"representation":[112],"from":[113,198],"spaces,":[116],"while":[117,219],"the":[118,126,191,212,223,238,241,245],"dynamically":[121],"routes":[122],"each":[123],"input":[124],"relevant":[128],"experts,":[129],"enabling":[130],"conditional":[131],"computation":[132],"improved":[134,254],"detection":[135],"performance.":[136],"Extensive":[137],"experiments":[138],"conducted":[139],"three":[141],"recent":[142],"benchmark":[143],"datasets,":[144],"CICIoT2023,":[145,181],"CSE-CICIDS":[146,182],"2018,":[147,183],"TII-SSRC-23,":[149,185],"demonstrate":[150],"AMoE-IDS":[152,215],"consistently":[153],"outperforms":[154],"models.":[161],"proposed":[163,246],"achieves":[165],"F1-scores":[166],"99.19%,":[168],"99.67%,":[169],"99.68%":[171],"AUC":[173],"values":[174],"0.992,":[176],"0.991,":[177],"0.990":[179],"respectively.":[186],"Despite":[187],"its":[188],"multi-expert":[189],"architecture,":[190],"model":[192],"maintains":[193],"low":[194],"inference":[195],"latency":[196],"ranging":[197],"1.28":[199],"1.56":[201],"ms":[202],"per":[203],"flow,":[205],"supporting":[206],"real-time":[207],"deployment.":[208],"Cross-dataset":[209],"evaluation":[210],"confirms":[211],"robustness":[213],"under":[216],"distribution":[217],"shifts,":[218],"ablation":[220],"studies":[221],"highlight":[222],"critical":[224],"role":[225],"harmonization":[228],"selection.":[232],"Statistical":[233],"significance":[234],"analysis":[235],"further":[236],"validates":[237],"reliability":[239],"observed":[242],"improvements.":[243],"Overall,":[244],"demonstrates":[248],"competitive":[249],"good":[251],"scalability,":[252],"cross-dataset":[255],"generalization.":[256]},"counts_by_year":[],"updated_date":"2026-07-19T07:52:34.831488","created_date":"2026-07-08T00:00:00"}