{"id":"https://openalex.org/W7164892461","doi":"https://doi.org/10.3390/make8060166","title":"Edge-Optimized Deep and Transfer Learning for Efficient DDoS Detection in IIoT Networks","display_name":"Edge-Optimized Deep and Transfer Learning for Efficient DDoS Detection in IIoT Networks","publication_year":2026,"publication_date":"2026-06-16","ids":{"openalex":"https://openalex.org/W7164892461","doi":"https://doi.org/10.3390/make8060166"},"language":"en","primary_location":{"id":"doi:10.3390/make8060166","is_oa":true,"landing_page_url":"https://doi.org/10.3390/make8060166","pdf_url":"https://www.mdpi.com/2504-4990/8/6/166/pdf?version=1781599755","source":{"id":"https://openalex.org/S4210213891","display_name":"Machine Learning and Knowledge Extraction","issn_l":"2504-4990","issn":["2504-4990"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning and Knowledge Extraction","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2504-4990/8/6/166/pdf?version=1781599755","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134824943","display_name":"Mikiyas Alemayehu","orcid":"https://orcid.org/0009-0008-1180-6188"},"institutions":[{"id":"https://openalex.org/I56007636","display_name":"Keele University","ror":"https://ror.org/00340yn33","country_code":"GB","type":"education","lineage":["https://openalex.org/I56007636"]}],"countries":["GB"],"is_corresponding":false,"raw_author_name":"Mikiyas Alemayehu","raw_affiliation_strings":["School of Computer Science and Mathematics, Keele University, Newcastle-Under-Lyme ST5 5AA, UK"],"raw_orcid":"https://orcid.org/0009-0008-1180-6188","affiliations":[{"raw_affiliation_string":"School of Computer Science and Mathematics, Keele University, Newcastle-Under-Lyme ST5 5AA, UK","institution_ids":["https://openalex.org/I56007636"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5101549630","display_name":"Mohamed Chahine Ghanem","orcid":"https://orcid.org/0000-0002-7067-7848"},"institutions":[{"id":"https://openalex.org/I146655781","display_name":"University of Liverpool","ror":"https://ror.org/04xs57h96","country_code":"GB","type":"education","lineage":["https://openalex.org/I146655781"]},{"id":"https://openalex.org/I56007636","display_name":"Keele University","ror":"https://ror.org/00340yn33","country_code":"GB","type":"education","lineage":["https://openalex.org/I56007636"]}],"countries":["GB"],"is_corresponding":true,"raw_author_name":"Mohamed Chahine Ghanem","raw_affiliation_strings":["Cybersecurity Institute, School of Computer Science and Informatics, University of Liverpool, Liverpool L69 3BX, UK","School of Computer Science and Mathematics, Keele University, Newcastle-Under-Lyme ST5 5AA, UK"],"raw_orcid":"https://orcid.org/0000-0002-7067-7848","affiliations":[{"raw_affiliation_string":"Cybersecurity Institute, School of Computer Science and Informatics, University of Liverpool, Liverpool L69 3BX, UK","institution_ids":["https://openalex.org/I146655781"]},{"raw_affiliation_string":"School of Computer Science and Mathematics, Keele University, Newcastle-Under-Lyme ST5 5AA, UK","institution_ids":["https://openalex.org/I56007636"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5087761119","display_name":"Hamza Kheddar","orcid":"https://orcid.org/0000-0002-9532-2453"},"institutions":[{"id":"https://openalex.org/I4210128965","display_name":"University Yahia Fares of Medea","ror":"https://ror.org/02e2yc259","country_code":"DZ","type":"education","lineage":["https://openalex.org/I4210128965"]}],"countries":["DZ"],"is_corresponding":false,"raw_author_name":"Hamza Kheddar","raw_affiliation_strings":["Laboratory of Advanced Electronic Systems LSEA, Department of Electrical Engineering, University of Medea, Medea 26000, Algeria"],"raw_orcid":"https://orcid.org/0000-0002-9532-2453","affiliations":[{"raw_affiliation_string":"Laboratory of Advanced Electronic Systems LSEA, Department of Electrical Engineering, University of Medea, Medea 26000, Algeria","institution_ids":["https://openalex.org/I4210128965"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5101549630"],"corresponding_institution_ids":["https://openalex.org/I146655781","https://openalex.org/I56007636"],"apc_list":{"value":1400,"currency":"CHF","value_usd":1559},"apc_paid":{"value":1400,"currency":"CHF","value_usd":1559},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.75823314,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"8","issue":"6","first_page":"166","last_page":"166"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.3971000015735626,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.3971000015735626,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.14429999887943268,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.07590000331401825,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/denial-of-service-attack","display_name":"Denial-of-service attack","score":0.6241000294685364},{"id":"https://openalex.org/keywords/transfer-of-learning","display_name":"Transfer of learning","score":0.4993000030517578},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.47200000286102295},{"id":"https://openalex.org/keywords/cloud-computing","display_name":"Cloud computing","score":0.44020000100135803},{"id":"https://openalex.org/keywords/perceptron","display_name":"Perceptron","score":0.4397999942302704},{"id":"https://openalex.org/keywords/throughput","display_name":"Throughput","score":0.430400013923645},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.4088999927043915},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.4074000120162964},{"id":"https://openalex.org/keywords/block","display_name":"Block (permutation group theory)","score":0.3831999897956848}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8274000287055969},{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.6241000294685364},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.4993000030517578},{"id":"https://openalex.org/C120314980","wikidata":"https://www.wikidata.org/wiki/Q180634","display_name":"Distributed computing","level":1,"score":0.4945000112056732},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.47200000286102295},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46650001406669617},{"id":"https://openalex.org/C79974875","wikidata":"https://www.wikidata.org/wiki/Q483639","display_name":"Cloud computing","level":2,"score":0.44020000100135803},{"id":"https://openalex.org/C60908668","wikidata":"https://www.wikidata.org/wiki/Q690207","display_name":"Perceptron","level":3,"score":0.4397999942302704},{"id":"https://openalex.org/C157764524","wikidata":"https://www.wikidata.org/wiki/Q1383412","display_name":"Throughput","level":3,"score":0.430400013923645},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.4088999927043915},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4074000120162964},{"id":"https://openalex.org/C2777210771","wikidata":"https://www.wikidata.org/wiki/Q4927124","display_name":"Block (permutation group theory)","level":2,"score":0.3831999897956848},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.34860000014305115},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3447999954223633},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.34439998865127563},{"id":"https://openalex.org/C2778456923","wikidata":"https://www.wikidata.org/wiki/Q5337692","display_name":"Edge computing","level":3,"score":0.34040001034736633},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.33899998664855957},{"id":"https://openalex.org/C138236772","wikidata":"https://www.wikidata.org/wiki/Q25098575","display_name":"Edge device","level":3,"score":0.32249999046325684},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.31299999356269836},{"id":"https://openalex.org/C557945733","wikidata":"https://www.wikidata.org/wiki/Q389772","display_name":"Data transmission","level":2,"score":0.3043999969959259},{"id":"https://openalex.org/C2777303404","wikidata":"https://www.wikidata.org/wiki/Q759757","display_name":"Convergence (economics)","level":2,"score":0.29989999532699585},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.2985000014305115},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.2831000089645386},{"id":"https://openalex.org/C20136886","wikidata":"https://www.wikidata.org/wiki/Q749647","display_name":"Interoperability","level":2,"score":0.28029999136924744},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2750000059604645},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2736999988555908},{"id":"https://openalex.org/C5111613","wikidata":"https://www.wikidata.org/wiki/Q3799443","display_name":"Inter-domain","level":4,"score":0.266400009393692},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C190793597","wikidata":"https://www.wikidata.org/wiki/Q189768","display_name":"Application layer","level":3,"score":0.2558000087738037}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/make8060166","is_oa":true,"landing_page_url":"https://doi.org/10.3390/make8060166","pdf_url":"https://www.mdpi.com/2504-4990/8/6/166/pdf?version=1781599755","source":{"id":"https://openalex.org/S4210213891","display_name":"Machine Learning and Knowledge Extraction","issn_l":"2504-4990","issn":["2504-4990"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning and Knowledge Extraction","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:f13dd6b9086645c095ae295fbfc7eb12","is_oa":false,"landing_page_url":"https://doaj.org/article/f13dd6b9086645c095ae295fbfc7eb12","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Machine Learning and Knowledge Extraction, Vol 8, Iss 6, p 166 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/make8060166","is_oa":true,"landing_page_url":"https://doi.org/10.3390/make8060166","pdf_url":"https://www.mdpi.com/2504-4990/8/6/166/pdf?version=1781599755","source":{"id":"https://openalex.org/S4210213891","display_name":"Machine Learning and Knowledge Extraction","issn_l":"2504-4990","issn":["2504-4990"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Machine Learning and Knowledge Extraction","raw_type":"journal-article"},"sustainable_development_goals":[{"display_name":"Decent work and economic growth","id":"https://metadata.un.org/sdg/8","score":0.43924224376678467}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7164892461.pdf","grobid_xml":"https://content.openalex.org/works/W7164892461.grobid-xml"},"referenced_works_count":37,"referenced_works":["https://openalex.org/W2109488193","https://openalex.org/W2474084250","https://openalex.org/W2783741806","https://openalex.org/W2884585870","https://openalex.org/W2958285686","https://openalex.org/W2980856918","https://openalex.org/W2982682021","https://openalex.org/W2994779073","https://openalex.org/W2995496823","https://openalex.org/W3037237724","https://openalex.org/W3041133507","https://openalex.org/W3085955590","https://openalex.org/W3096913503","https://openalex.org/W3191209831","https://openalex.org/W4224331011","https://openalex.org/W4226319939","https://openalex.org/W4280505175","https://openalex.org/W4290717392","https://openalex.org/W4312369036","https://openalex.org/W4375852471","https://openalex.org/W4387556984","https://openalex.org/W4393115034","https://openalex.org/W4399915793","https://openalex.org/W4401512567","https://openalex.org/W4401729226","https://openalex.org/W4401842380","https://openalex.org/W4404125286","https://openalex.org/W4409351559","https://openalex.org/W4409561124","https://openalex.org/W4414077420","https://openalex.org/W4414197879","https://openalex.org/W4414405391","https://openalex.org/W4416429200","https://openalex.org/W4417128986","https://openalex.org/W4417509730","https://openalex.org/W7118176711","https://openalex.org/W7128494478"],"related_works":[],"abstract_inverted_index":{"The":[0,121,160,207],"increasing":[1],"convergence":[2],"of":[3,15,36,191,203],"Operational":[4],"Technology":[5,9],"(OT)":[6],"and":[7,24,48,60,94,153,199,215],"Information":[8],"(IT)":[10],"within":[11],"the":[12,126,132],"Industrial":[13],"Internet":[14],"Things":[16],"(IIoT)":[17],"brings":[18],"about":[19],"remarkable":[20],"improvements":[21],"in":[22,44,99,118],"monitoring":[23],"automation.":[25],"However,":[26],"it":[27],"also":[28],"exposes":[29],"industrial":[30],"systems":[31],"to":[32,62,131],"large-scale":[33],"Distributed":[34],"Denial":[35],"Service":[37],"(DDoS)":[38],"attacks.":[39],"Edge-based":[40],"defences":[41],"are":[42,138],"essential":[43],"satisfying":[45],"low-latency":[46],"demands":[47],"data":[49],"sovereignty":[50],"rules,":[51],"yet":[52],"they":[53],"must":[54],"function":[55],"under":[56,156],"severe":[57],"resource":[58],"limitations":[59],"adapt":[61],"shifting":[63],"traffic":[64],"characteristics":[65],"without":[66],"cloud":[67],"assistance.":[68],"In":[69],"this":[70],"work,":[71],"we":[72],"introduce":[73],"a":[74,82,88,95,100,111,174,183],"lightweight":[75],"hybrid":[76],"deep":[77],"learning":[78,106],"architecture":[79],"that":[80,115],"fuses":[81],"Convolutional":[83,89],"Neural":[84],"Network":[85],"(CNN)":[86],"with":[87],"Block":[90],"Attention":[91],"Module":[92],"(CBAM)":[93],"Multi-Layer":[96],"Perceptron":[97],"(MLP)":[98],"single":[101],"detector.":[102],"A":[103],"sequential":[104],"transfer":[105],"scheme":[107],"is":[108,123,173],"adopted,":[109],"including":[110],"feature":[112],"projection":[113],"layer":[114],"handles":[116],"differences":[117],"input":[119],"dimensionality.":[120],"model":[122],"pre-trained":[124],"on":[125,140,166,182],"CIC-DDoS2019":[127],"dataset,":[128],"then":[129],"adapted":[130],"more":[133],"recent":[134],"CICIoT23":[135,167],"dataset.":[136],"Evaluations":[137],"performed":[139],"both":[141],"datasets":[142],"while":[143,168],"preserving":[144],"their":[145],"natural":[146],"class":[147],"imbalance.":[148],"We":[149],"provide":[150],"extensive":[151],"ablation":[152],"variance":[154],"analysis":[155],"identical":[157],"experimental":[158],"conditions.":[159],"proposed":[161],"method":[162],"achieves":[163],"99.52%":[164],"accuracy":[165],"maintaining":[169],"99.65%":[170],"recall,":[171],"which":[172],"crucial":[175],"property":[176],"for":[177,217],"critical":[178],"systems.":[179],"Real-time":[180],"measurements":[181],"CPU-only":[184],"testbed":[185],"show":[186],"an":[187],"average":[188],"inference":[189],"latency":[190],"0.013":[192],"ms,":[193],"inference-only":[194],"throughput":[195,202],"exceeding":[196],"93,000":[197],"packets/s,":[198],"end-to-end":[200],"batch":[201],"approximately":[204],"38,000":[205],"packets/s.":[206],"solution":[208],"demonstrates":[209],"effective":[210],"domain":[211],"adaptation,":[212],"sub-millisecond":[213],"latency,":[214],"suitability":[216],"resource-constrained":[218],"IIoT":[219],"edge":[220],"gateways.":[221]},"counts_by_year":[],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2026-06-17T00:00:00"}