{"id":"https://openalex.org/W7161042770","doi":"https://doi.org/10.31449/inf.v50i12.13007","title":"Fusion of Improved LSTM with Graph Attention Networks for Malicious IoT Traffic Detection","display_name":"Fusion of Improved LSTM with Graph Attention Networks for Malicious IoT Traffic Detection","publication_year":2026,"publication_date":"2026-05-13","ids":{"openalex":"https://openalex.org/W7161042770","doi":"https://doi.org/10.31449/inf.v50i12.13007"},"language":null,"primary_location":{"id":"doi:10.31449/inf.v50i12.13007","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i12.13007","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/13007/6684","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.informatica.si/index.php/informatica/article/download/13007/6684","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5101719502","display_name":"Yonghong Li","orcid":"https://orcid.org/0000-0002-6017-0146"},"institutions":[{"id":"https://openalex.org/I146563203","display_name":"University of International Business and Economics","ror":"https://ror.org/05khqpb71","country_code":"CN","type":"education","lineage":["https://openalex.org/I146563203"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Yonghong Li","raw_affiliation_strings":["Henan Institute of International Business and Economics"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Henan Institute of International Business and Economics","institution_ids":["https://openalex.org/I146563203"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5101719502"],"corresponding_institution_ids":["https://openalex.org/I146563203"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.58342104,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"50","issue":"12","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.8062999844551086,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.8062999844551086,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.10090000182390213,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10714","display_name":"Software-Defined Networks and 5G","score":0.012799999676644802,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/residual","display_name":"Residual","score":0.5098000168800354},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.47200000286102295},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.421999990940094},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.39579999446868896},{"id":"https://openalex.org/keywords/stability","display_name":"Stability (learning theory)","score":0.3781999945640564},{"id":"https://openalex.org/keywords/covert","display_name":"Covert","score":0.37689998745918274},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.3698999881744385},{"id":"https://openalex.org/keywords/margin","display_name":"Margin (machine learning)","score":0.3497999906539917}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7723000049591064},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5131000280380249},{"id":"https://openalex.org/C155512373","wikidata":"https://www.wikidata.org/wiki/Q287450","display_name":"Residual","level":2,"score":0.5098000168800354},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.47200000286102295},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46459999680519104},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.421999990940094},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.39579999446868896},{"id":"https://openalex.org/C112972136","wikidata":"https://www.wikidata.org/wiki/Q7595718","display_name":"Stability (learning theory)","level":2,"score":0.3781999945640564},{"id":"https://openalex.org/C2779338814","wikidata":"https://www.wikidata.org/wiki/Q5179285","display_name":"Covert","level":2,"score":0.37689998745918274},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.3698999881744385},{"id":"https://openalex.org/C774472","wikidata":"https://www.wikidata.org/wiki/Q6760393","display_name":"Margin (machine learning)","level":2,"score":0.3497999906539917},{"id":"https://openalex.org/C2776359362","wikidata":"https://www.wikidata.org/wiki/Q2145286","display_name":"Representation (politics)","level":3,"score":0.3303999900817871},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.32179999351501465},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.31299999356269836},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.27549999952316284},{"id":"https://openalex.org/C45374587","wikidata":"https://www.wikidata.org/wiki/Q12525525","display_name":"Computation","level":2,"score":0.26109999418258667},{"id":"https://openalex.org/C2993807640","wikidata":"https://www.wikidata.org/wiki/Q103709453","display_name":"Attention network","level":2,"score":0.2587999999523163},{"id":"https://openalex.org/C204673680","wikidata":"https://www.wikidata.org/wiki/Q1628107","display_name":"Airfield traffic pattern","level":2,"score":0.2547999918460846},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2542000114917755},{"id":"https://openalex.org/C198531522","wikidata":"https://www.wikidata.org/wiki/Q485146","display_name":"Sample (material)","level":2,"score":0.2533000111579895},{"id":"https://openalex.org/C148417208","wikidata":"https://www.wikidata.org/wiki/Q4825882","display_name":"Authentication (law)","level":2,"score":0.25110000371932983},{"id":"https://openalex.org/C77618280","wikidata":"https://www.wikidata.org/wiki/Q1155772","display_name":"Scheme (mathematics)","level":2,"score":0.25099998712539673}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.31449/inf.v50i12.13007","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i12.13007","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/13007/6684","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.31449/inf.v50i12.13007","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i12.13007","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/13007/6684","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7161042770.pdf","grobid_xml":"https://content.openalex.org/works/W7161042770.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"In":[0,71,105,189],"the":[1,5,72,86,106,118,135,138,141,161,169,178,245,263],"rapid":[2],"development":[3],"of":[4,7,49,88,126,140,150,211,247,259,265],"Internet":[6,48,264],"Things,":[8],"malicious":[9,51,260],"traffic":[10,52,121,128,261],"is":[11,114,183],"highly":[12,201],"mixed":[13],"with":[14,64,146,206],"normal":[15],"business":[16],"traffic,":[17],"and":[18,22,26,37,79,95,177,218,240,249],"exhibits":[19],"strong":[20],"long-term":[21,220],"short-term":[23],"temporal":[24,73],"dependencies":[25],"suddenness.":[27],"Traditional":[28],"detection":[29,53,209,238],"methods":[30,236],"have":[31],"shortcomings":[32],"in":[33,225,237,262],"identifying":[34],"covert":[35],"attacks":[36],"reducing":[38],"false":[39],"positives.":[40],"To":[41],"this":[42,44,192],"end,":[43],"study":[45],"proposes":[46],"an":[47,57,76,147,195,207],"Things":[50,266],"method":[54,143,193,231],"that":[55,134,156],"integrates":[56],"improved":[58],"Long":[59],"Short-Term":[60],"Memory":[61],"(LSTM)":[62],"network":[63],"a":[65,110,253],"Multi-Feature":[66],"Graph":[67],"Attention":[68],"Network":[69],"(MFGAT).":[70],"modeling":[74,108],"stage,":[75,109],"attention":[77,112],"mechanism":[78,113],"residual":[80],"connections":[81],"are":[82,99],"introduced":[83],"to":[84,101,116,167,175,187],"enhance":[85],"representation":[87],"critical":[89],"time-slice":[90],"features,":[91],"while":[92],"lightweight":[93,248],"gating":[94],"parameter":[96,170],"compression":[97],"strategies":[98],"employed":[100],"reduce":[102],"model":[103],"complexity.":[104],"spatial":[107],"graph":[111],"utilized":[115],"weight":[117],"relationships":[119],"among":[120],"nodes,":[122],"enabling":[123],"collaborative":[124],"enhancement":[125],"multi-dimensional":[127],"features.":[129],"The":[130,152,229],"experimental":[131],"results":[132],"show":[133],"area":[136],"under":[137,200,215],"curve":[139],"proposed":[142,230],"reaches":[144],"0.96,":[145],"average":[148,208],"accuracy":[149,239],"0.91.":[151],"ablation":[153],"experiment":[154],"shows":[155],"after":[157],"introducing":[158],"improvement":[159],"measures,":[160],"F1":[162,196],"value":[163],"increases":[164],"from":[165,173,185],"0.87":[166],"0.92,":[168],"counts":[171],"decreases":[172],"5.13M":[174],"4.23M,":[176],"single":[179],"sample":[180],"inference":[181],"delay":[182,210],"shortened":[184],"7.64ms":[186],"5.61ms.":[188],"complex":[190],"scenarios,":[191],"maintains":[194,219],"score":[197],"above":[198],"0.80":[199],"imbalanced":[202],"class":[203],"distributions.":[204],"conditions,":[205],"only":[212,233],"about":[213],"30ms":[214],"sudden":[216],"attacks,":[217],"stability":[221],"through":[222],"rolling":[223],"updates":[224],"concept":[226],"drift":[227],"scenarios.":[228],"not":[232],"outperforms":[234],"existing":[235],"robustness,":[241],"but":[242],"also":[243],"has":[244],"advantages":[246],"real-time":[250],"performance,":[251],"providing":[252],"feasible":[254],"solution":[255],"for":[256],"efficient":[257],"identification":[258],"environment.":[267]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-05-14T00:00:00"}