{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,5]],"date-time":"2026-05-05T15:33:34Z","timestamp":1777995214900,"version":"3.51.4"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"13","license":[{"start":{"date-parts":[[2024,2,11]],"date-time":"2024-02-11T00:00:00Z","timestamp":1707609600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,2,11]],"date-time":"2024-02-11T00:00:00Z","timestamp":1707609600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Neural Comput & Applic"],"published-print":{"date-parts":[[2024,5]]},"DOI":"10.1007\/s00521-024-09439-x","type":"journal-article","created":{"date-parts":[[2024,2,11]],"date-time":"2024-02-11T20:02:06Z","timestamp":1707681726000},"page":"6955-6972","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":46,"title":["Comparative study of ML models for IIoT intrusion detection: impact of data preprocessing and balancing"],"prefix":"10.1007","volume":"36","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-5940-6994","authenticated-orcid":false,"given":"Abdulrahman Mahmoud","family":"Eid","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8128-5498","authenticated-orcid":false,"given":"Bassel","family":"Soudan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1570-0897","authenticated-orcid":false,"given":"Ali Bou","family":"Nassif","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1959-0058","authenticated-orcid":false,"given":"MohammadNoor","family":"Injadat","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2024,2,11]]},"reference":[{"key":"9439_CR1","doi-asserted-by":"crossref","unstructured":"Stouffer K, Pillitteri V, Lightman S, et al (2015) Guide to industrial control systems (ICS) security NIST special publication 800\u201382 revision 2, pp 1\u2013157","DOI":"10.6028\/NIST.SP.800-82r2"},{"key":"9439_CR2","doi-asserted-by":"publisher","first-page":"1043","DOI":"10.3390\/electronics10091043","volume":"10","author":"AA Smadi","year":"2021","unstructured":"Smadi AA, Ajao BT, Johnson BK et al (2021) A comprehensive survey on cyber-physical smart grid testbed architectures: requirements and challenges. Electronics 10:1043. https:\/\/doi.org\/10.3390\/electronics10091043","journal-title":"Electronics"},{"key":"9439_CR3","doi-asserted-by":"publisher","unstructured":"Bonetto R, Sychev I, Zhdanenko O, et al (2020) Smart grids for smarter cities. In: 2020 IEEE 17th annual consumer communications and networking conference (CCNC). https:\/\/doi.org\/10.1109\/CCNC46108.2020.9045309","DOI":"10.1109\/CCNC46108.2020.9045309"},{"key":"9439_CR4","doi-asserted-by":"publisher","DOI":"10.1145\/3603713","author":"H Attar","year":"2023","unstructured":"Attar H (2023) Joint IoT\/ML platforms for smart societies and environments: a review on multimodal information-based learning for safety and security. J Data Inf Qual. https:\/\/doi.org\/10.1145\/3603713","journal-title":"J Data Inf Qual"},{"key":"9439_CR5","doi-asserted-by":"publisher","first-page":"320","DOI":"10.24138\/jcomss.v14i4.604","volume":"14","author":"M Calabretta","year":"2018","unstructured":"Calabretta M, Pecori R, Vecchio M, Veltri L (2018) MQTT-AUTH: a token-based solution to endow MQTT with authentication and authorization capabilities. J Commun Softw Syst 14:320\u2013331. https:\/\/doi.org\/10.24138\/jcomss.v14i4.604","journal-title":"J Commun Softw Syst"},{"key":"9439_CR6","doi-asserted-by":"publisher","unstructured":"Calabretta M, Pecori R, Veltri L (2018) A token-based protocol for securing MQTT communications. In: Proceedings of the 26th international conference on software, telecommunications and computer networks, SoftCOM 2018, pp 373\u2013378. https:\/\/doi.org\/10.23919\/SOFTCOM.2018.8555834","DOI":"10.23919\/SOFTCOM.2018.8555834"},{"key":"9439_CR7","doi-asserted-by":"publisher","first-page":"478","DOI":"10.34028\/iajit\/19\/3A\/8","volume":"19","author":"IK Nti","year":"2022","unstructured":"Nti IK, Adekoya AF, Narko-Boateng O, Somanathan AR (2022) Stacknet based decision fusion classifier for network intrusion detection. Int Arab J Inf Technol 19:478\u2013490. https:\/\/doi.org\/10.34028\/iajit\/19\/3A\/8","journal-title":"Int Arab J Inf Technol"},{"key":"9439_CR8","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2023.100750","author":"A Abdul Rahman Al-chikh Omar","year":"2023","unstructured":"Abdul Rahman Al-chikh Omar A, Soudan B, Ala\u2019 Altaweel (2023) A comprehensive survey on detection of sinkhole attack in routing over low power and Lossy network for internet of things. Internet Things (Netherlands). https:\/\/doi.org\/10.1016\/j.iot.2023.100750","journal-title":"Internet Things (Netherlands)"},{"key":"9439_CR9","doi-asserted-by":"crossref","unstructured":"Samara G, Aljaidi M, Alazaidah R, et al (2023) A comprehensive review of machine learning-based intrusion detection techniques for IoT networks. In: Artificial intelligence, Internet of Things, and society 5.0. pp 465\u2013473","DOI":"10.1007\/978-3-031-43300-9_38"},{"key":"9439_CR10","doi-asserted-by":"publisher","first-page":"8772","DOI":"10.3390\/s23218772","volume":"23","author":"A Manderna","year":"2023","unstructured":"Manderna A, Kumar S, Dohare U et al (2023) Vehicular Network Intrusion Detection Using a Cascaded Deep Learning Approach with Multi-Variant Metaheuristic. Sensors 23:8772. https:\/\/doi.org\/10.3390\/s23218772","journal-title":"Sensors"},{"key":"9439_CR11","doi-asserted-by":"publisher","first-page":"878","DOI":"10.1109\/JBHI.2022.3167256","volume":"27","author":"A Alamleh","year":"2023","unstructured":"Alamleh A, Albahri OS, Zaidan AA et al (2023) Federated Learning for IoMT Applications: A Standardization and Benchmarking Framework of Intrusion Detection Systems. IEEE J Biomed Heal Informatics 27:878\u2013887. https:\/\/doi.org\/10.1109\/JBHI.2022.3167256","journal-title":"IEEE J Biomed Heal Informatics"},{"key":"9439_CR12","doi-asserted-by":"publisher","first-page":"501","DOI":"10.34028\/iajit\/19\/3A\/10","volume":"19","author":"O Surakhi","year":"2022","unstructured":"Surakhi O, Garc\u00eda A, Jamoos M, Alkhanafseh M (2022) The Intrusion detection system by deep learning methods: issues and challenges. Int Arab J Inf Technol 19:501\u2013513. https:\/\/doi.org\/10.34028\/iajit\/19\/3A\/10","journal-title":"Int Arab J Inf Technol"},{"key":"9439_CR13","doi-asserted-by":"publisher","unstructured":"Keliris A, Salehghaffari H, Cairl B, et al (2016) Machine learning-based defense against process-aware attacks on industrial control systems. In: Proceedings of 2016 IEEE international test conference (ITC), pp 1\u201310. https:\/\/doi.org\/10.1109\/TEST.2016.7805855","DOI":"10.1109\/TEST.2016.7805855"},{"key":"9439_CR14","doi-asserted-by":"publisher","unstructured":"Ullah I, Mahmoud QH (2017) A hybrid model for anomaly-based intrusion detection in SCADA networks. In: Proceedings of 2017 IEEE international conference on big data (big data), pp 2160\u20132167. https:\/\/doi.org\/10.1109\/BigData.2017.8258164","DOI":"10.1109\/BigData.2017.8258164"},{"key":"9439_CR15","doi-asserted-by":"publisher","DOI":"10.1088\/1742-6596\/2001\/1\/012004","author":"AM Vulfin","year":"2021","unstructured":"Vulfin AM, Vasilyev VI, Kuharev SN et al (2021) Algorithms for detecting network attacks in an enterprise industrial network based on data mining algorithms. J Phys Conf Ser. https:\/\/doi.org\/10.1088\/1742-6596\/2001\/1\/012004","journal-title":"J Phys Conf Ser"},{"key":"9439_CR16","doi-asserted-by":"publisher","unstructured":"Beaver JM, Borges-Hink RC, Buckner MA (2013) An evaluation of machine learning methods to detect malicious SCADA communications. In: Proceedings of 2013 12th international conference on machine learning and applications ICMLA, vol 2, pp 54\u201359. https:\/\/doi.org\/10.1109\/ICMLA.2013.105","DOI":"10.1109\/ICMLA.2013.105"},{"key":"9439_CR17","doi-asserted-by":"publisher","first-page":"94","DOI":"10.1109\/JPROC.2010.2072970","volume":"99","author":"Y Zhang","year":"2011","unstructured":"Zhang Y, Ili\u0107 MD, Tonguz OK (2011) Mitigating blackouts via smart relays: a machine learning approach. Proc IEEE 99:94\u2013118. https:\/\/doi.org\/10.1109\/JPROC.2010.2072970","journal-title":"Proc IEEE"},{"key":"9439_CR18","doi-asserted-by":"publisher","unstructured":"Maglaras LA, Jiang J (2014) Intrusion detection in SCADA systems using machine learning techniques. In: Proceedings of 2014 science and information conference, pp 626\u2013631. https:\/\/doi.org\/10.1109\/SAI.2014.6918252","DOI":"10.1109\/SAI.2014.6918252"},{"key":"9439_CR19","doi-asserted-by":"publisher","unstructured":"Song Y, Luo W, Li J, et al (2021) SDN-based Industrial Internet Security Gateway. In: 2021 International conference on security, pattern analysis, and cybernetics (SPAC), pp 238\u2013243. https:\/\/doi.org\/10.1109\/SPAC53836.2021.9539961","DOI":"10.1109\/SPAC53836.2021.9539961"},{"key":"9439_CR20","doi-asserted-by":"publisher","first-page":"6822","DOI":"10.1109\/JIOT.2019.2912022","volume":"6","author":"M Zolanvari","year":"2019","unstructured":"Zolanvari M, Teixeira MA, Gupta L et al (2019) Machine learning-based network vulnerability analysis of industrial Internet of Things. IEEE Internet Things J 6:6822\u20136834. https:\/\/doi.org\/10.1109\/JIOT.2019.2912022","journal-title":"IEEE Internet Things J"},{"key":"9439_CR21","volume-title":"WUSTL-IIOT-2021 dataset for IIoT cybersecurity research","author":"MA Teixeira","year":"2021","unstructured":"Teixeira MA, Gupta L, Khan KM, Machine RJ (2021) WUSTL-IIOT-2021 dataset for IIoT cybersecurity research. Washington University, St. Louis"},{"key":"9439_CR22","doi-asserted-by":"publisher","first-page":"307","DOI":"10.1007\/s11219-021-09557-y","volume":"30","author":"J Siebert","year":"2022","unstructured":"Siebert J, Joeckel L, Heidrich J et al (2022) Construction of a quality model for machine learning systems. Softw Qual J 30:307\u2013335. https:\/\/doi.org\/10.1007\/s11219-021-09557-y","journal-title":"Softw Qual J"},{"key":"9439_CR23","doi-asserted-by":"publisher","DOI":"10.1007\/s42979-021-00815-1","author":"IH Sarker","year":"2021","unstructured":"Sarker IH (2021) Deep learning: a comprehensive overview on techniques, taxonomy, applications and research directions. SN Comput Sci. https:\/\/doi.org\/10.1007\/s42979-021-00815-1","journal-title":"SN Comput Sci"},{"key":"9439_CR24","doi-asserted-by":"crossref","unstructured":"Eid AM, Nassif AB, Soudan B, Injadat MN (2023) IIoT network intrusion detection using machine learning. In: 2023 6th International conference on intelligent robotics and control engineering (IRCE). IEEE, pp 196\u2013201","DOI":"10.1109\/IRCE59430.2023.10255088"},{"key":"9439_CR25","doi-asserted-by":"publisher","first-page":"139","DOI":"10.1007\/bfb0094814","volume":"1510","author":"KM Ting","year":"1998","unstructured":"Ting KM (1998) Inducing cost-sensitive trees via instance weighting. Lect Notes Comput Sci (Subser Lect Notes Artif Intell Lect Notes Bioinf) 1510:139\u2013147. https:\/\/doi.org\/10.1007\/bfb0094814","journal-title":"Lect Notes Comput Sci (Subser Lect Notes Artif Intell Lect Notes Bioinf)"},{"key":"9439_CR26","doi-asserted-by":"publisher","unstructured":"Zhang YP, Zhang LN, Wang YC (2010) Cluster-based majority under-sampling approaches for class imbalance learning. In: Proceedings of 2010 2nd IEEE international conference on information and financial engineering, pp 400\u2013404. https:\/\/doi.org\/10.1109\/ICIFE.2010.5609385","DOI":"10.1109\/ICIFE.2010.5609385"},{"key":"9439_CR27","doi-asserted-by":"publisher","DOI":"10.2139\/ssrn.3627163","author":"R Richman","year":"2020","unstructured":"Richman R, Wuthrich MV (2020) Nagging predictors. SSRN Electron J. https:\/\/doi.org\/10.2139\/ssrn.3627163","journal-title":"SSRN Electron J"},{"key":"9439_CR28","volume-title":"Data cleaning steps and process to prep your data for success","author":"TG Mesevage","year":"2021","unstructured":"Mesevage TG (2021) Data cleaning steps and process to prep your data for success. MonkeyLearn, Montevideo"},{"key":"9439_CR29","volume-title":"Data cleaning: definition, benefits, and how-to","author":"Tableau","year":"2022","unstructured":"Tableau (2022) Data cleaning: definition, benefits, and how-to. Tableau, Mountain View"},{"key":"9439_CR30","doi-asserted-by":"publisher","DOI":"10.1186\/s12864-019-6413-7","author":"D Chicco","year":"2020","unstructured":"Chicco D, Jurman G (2020) The advantages of the Matthews correlation coefficient (MCC) over F1 score and accuracy in binary classification evaluation. BMC Genomics. https:\/\/doi.org\/10.1186\/s12864-019-6413-7","journal-title":"BMC Genomics"},{"key":"9439_CR31","doi-asserted-by":"publisher","DOI":"10.1186\/s13040-023-00322-4","author":"D Chicco","year":"2023","unstructured":"Chicco D, Jurman G (2023) The Matthews correlation coefficient (MCC) should replace the ROC AUC as the standard metric for assessing binary classification. BioData Min. https:\/\/doi.org\/10.1186\/s13040-023-00322-4","journal-title":"BioData Min"},{"key":"9439_CR32","first-page":"825","volume":"98","author":"H Khafajeh","year":"2020","unstructured":"Khafajeh H (2020) An efficient intrusion detection approach using light gradient boosting. J Theor Appl Inf Technol 98:825\u2013835","journal-title":"J Theor Appl Inf Technol"}],"updated-by":[{"DOI":"10.1007\/s00521-024-09841-5","type":"correction","label":"Correction","source":"publisher","updated":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T00:00:00Z","timestamp":1715126400000}}],"container-title":["Neural Computing and Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-024-09439-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s00521-024-09439-x\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s00521-024-09439-x.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,5,8]],"date-time":"2024-05-08T10:04:00Z","timestamp":1715162640000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s00521-024-09439-x"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,11]]},"references-count":32,"journal-issue":{"issue":"13","published-print":{"date-parts":[[2024,5]]}},"alternative-id":["9439"],"URL":"https:\/\/doi.org\/10.1007\/s00521-024-09439-x","relation":{"correction":[{"id-type":"doi","id":"10.1007\/s00521-024-09841-5","asserted-by":"object"}]},"ISSN":["0941-0643","1433-3058"],"issn-type":[{"value":"0941-0643","type":"print"},{"value":"1433-3058","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,11]]},"assertion":[{"value":"10 October 2023","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"15 January 2024","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"11 February 2024","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"8 May 2024","order":4,"name":"change_date","label":"Change Date","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"Correction","order":5,"name":"change_type","label":"Change Type","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"A Correction to this paper has been published:","order":6,"name":"change_details","label":"Change Details","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"https:\/\/doi.org\/10.1007\/s00521-024-09841-5","URL":"https:\/\/doi.org\/10.1007\/s00521-024-09841-5","order":7,"name":"change_details","label":"Change Details","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare that they have no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}},{"value":"The authors would like to convey their thanks and appreciation to the \u201cUniversity of Sharjah\u201d for supporting this work.","order":3,"name":"Ethics","group":{"name":"EthicsHeading","label":"Ethical approval"}},{"value":"This study does not involve any experiments on animals.","order":4,"name":"Ethics","group":{"name":"EthicsHeading","label":"Informed consent"}}]}}