{"id":"https://openalex.org/W7133314921","doi":"https://doi.org/10.48550/arxiv.2603.00363","title":"Quantifying Catastrophic Forgetting in IoT Intrusion Detection Systems","display_name":"Quantifying Catastrophic Forgetting in IoT Intrusion Detection Systems","publication_year":2026,"publication_date":"2026-02-27","ids":{"openalex":"https://openalex.org/W7133314921","doi":"https://doi.org/10.48550/arxiv.2603.00363"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2603.00363","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00363","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2603.00363","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5034661675","display_name":"Sourasekhar Banerjee","orcid":"https://orcid.org/0000-0002-3451-2851"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Banerjee, Sourasekhar","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5127995481","display_name":"David Bergqvist","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Bergqvist, David","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5049765702","display_name":"Salman Toor","orcid":"https://orcid.org/0000-0003-0302-6276"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Toor, Salman","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5004373489","display_name":"Christian Rohner","orcid":"https://orcid.org/0000-0002-1527-734X"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rohner, Christian","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5023887843","display_name":"Andreas Johnsson","orcid":"https://orcid.org/0000-0003-3743-9431"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Johnsson, Andreas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7322999835014343,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7322999835014343,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.060499999672174454,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.03620000183582306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/forgetting","display_name":"Forgetting","score":0.755299985408783},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.7135000228881836},{"id":"https://openalex.org/keywords/adaptability","display_name":"Adaptability","score":0.59579998254776},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5483999848365784},{"id":"https://openalex.org/keywords/reliability","display_name":"Reliability (semiconductor)","score":0.541700005531311},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4251999855041504},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.41769999265670776},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.39250001311302185}],"concepts":[{"id":"https://openalex.org/C7149132","wikidata":"https://www.wikidata.org/wiki/Q1377840","display_name":"Forgetting","level":2,"score":0.755299985408783},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7243000268936157},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.7135000228881836},{"id":"https://openalex.org/C177606310","wikidata":"https://www.wikidata.org/wiki/Q5674297","display_name":"Adaptability","level":2,"score":0.59579998254776},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5483999848365784},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.541700005531311},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4498000144958496},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4251999855041504},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.41769999265670776},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.4065999984741211},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.39890000224113464},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.39250001311302185},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.3264000117778778},{"id":"https://openalex.org/C2780264999","wikidata":"https://www.wikidata.org/wiki/Q7445032","display_name":"Security domain","level":2,"score":0.28769999742507935},{"id":"https://openalex.org/C24590314","wikidata":"https://www.wikidata.org/wiki/Q336038","display_name":"Wireless sensor network","level":2,"score":0.28519999980926514},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2825999855995178},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.2808000147342682},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.27309998869895935},{"id":"https://openalex.org/C2779119184","wikidata":"https://www.wikidata.org/wiki/Q294350","display_name":"ALARM","level":2,"score":0.2662999927997589},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2662000060081482},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2515000104904175}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2603.00363","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00363","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2603.00363","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2603.00363","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[{"score":0.4040604531764984,"display_name":"Responsible consumption and production","id":"https://metadata.un.org/sdg/12"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Distribution":[0],"shifts":[1],"in":[2,160],"attack":[3],"patterns":[4],"within":[5],"RPL-based":[6],"IoT":[7,58,128,162],"networks":[8],"pose":[9],"a":[10,70,77,99,116,123],"critical":[11],"threat":[12],"to":[13,32,34],"the":[14,131,136],"reliability":[15],"and":[16,37,75,121,156],"security":[17],"of":[18,50],"large-scale":[19],"connected":[20],"systems.":[21],"Intrusion":[22],"Detection":[23],"Systems":[24],"(IDS)":[25],"trained":[26],"on":[27],"static":[28],"datasets":[29],"often":[30],"fail":[31],"generalize":[33],"unseen":[35],"threats":[36],"suffer":[38],"from":[39],"catastrophic":[40,112],"forgetting":[41,113,146],"when":[42],"updated":[43],"with":[44,147],"new":[45],"attacks.":[46],"Ensuring":[47],"continual":[48,72,85,109],"adaptability":[49],"IDS":[51,79,158],"is":[52],"therefore":[53],"essential":[54],"for":[55,126,154],"maintaining":[56,115],"robust":[57],"network":[59],"defence.":[60],"In":[61],"this":[62],"focused":[63],"study,":[64],"we":[65],"formulate":[66],"intrusion":[67],"detection":[68],"as":[69],"domain":[71],"learning":[73,86,110],"problem":[74],"propose":[76],"method-agnostic":[78],"framework":[80],"that":[81,108],"can":[82],"integrate":[83],"diverse":[84],"strategies.":[87],"We":[88],"systematically":[89],"benchmark":[90],"five":[91],"representative":[92],"approaches":[93,134],"across":[94],"multiple":[95],"domain-ordering":[96],"sequences":[97],"using":[98],"comprehensive":[100],"multi-attack":[101],"dataset":[102],"comprising":[103],"48":[104],"domains.":[105],"Results":[106],"show":[107],"mitigates":[111],"while":[114,140],"balance":[117],"between":[118],"plasticity,":[119],"stability,":[120],"efficiency,":[122,150],"crucial":[124],"aspect":[125],"resource-constrained":[127],"environments.":[129],"Among":[130],"methods,":[132],"Replay-based":[133],"achieve":[135],"best":[137],"overall":[138],"performance,":[139],"Synaptic":[141],"Intelligence":[142],"(SI)":[143],"delivers":[144],"near-zero":[145],"high":[148],"training":[149],"demonstrating":[151],"strong":[152],"potential":[153],"stable":[155],"sustainable":[157],"deployment":[159],"dynamic":[161],"networks.":[163]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-03-04T00:00:00"}