{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,4,10]],"date-time":"2026-04-10T16:23:26Z","timestamp":1775838206985,"version":"3.50.1"},"reference-count":32,"publisher":"Springer Science and Business Media LLC","issue":"10","license":[{"start":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T00:00:00Z","timestamp":1756857600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T00:00:00Z","timestamp":1756857600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2025,10]]},"DOI":"10.1007\/s10586-025-05480-0","type":"journal-article","created":{"date-parts":[[2025,9,3]],"date-time":"2025-09-03T14:08:45Z","timestamp":1756908525000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["A hybrid intrusion detection system model integrated explainable AI and multi expert systems to adapt edge computing"],"prefix":"10.1007","volume":"28","author":[{"given":"Trong-Minh","family":"Hoang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Van-Nhan","family":"Nguyen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Trang-Linh","family":"Le Thi","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Minh-Hoang","family":"Nguyen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Nam-Hoang","family":"Nguyen","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,9,3]]},"reference":[{"key":"5480_CR1","doi-asserted-by":"publisher","first-page":"127294","DOI":"10.1109\/ACCESS.2024.3454812","volume":"12","author":"MN Jamil","year":"2024","unstructured":"Jamil, M.N., Schel\u00e9n, O., Monrat, A.A., Andersson, K.: Enabling industrial internet of things by leveraging distributed edge-to-cloud computing: challenges and opportunities. IEEE Access 12, 127294\u2013127308 (2024)","journal-title":"IEEE Access"},{"key":"5480_CR2","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2024.124965","volume":"257","author":"Z Li","year":"2024","unstructured":"Li, Z., Yao, W.: A two stage lightweight approach for intrusion detection in internet of things. Expert Syst. Appl. 257, 124965 (2024)","journal-title":"Expert Syst. Appl."},{"key":"5480_CR3","doi-asserted-by":"publisher","first-page":"80348","DOI":"10.1109\/ACCESS.2023.3296444","volume":"11","author":"Z Azam","year":"2023","unstructured":"Azam, Z., Islam, M.M., Huda, M.N.: Comparative analysis of intrusion detection systems and machine learning-based model analysis through decision tree. IEEE Access 11, 80348\u201380391 (2023)","journal-title":"IEEE Access"},{"issue":"1","key":"5480_CR4","doi-asserted-by":"publisher","first-page":"12077","DOI":"10.1038\/s41598-024-62861-y","volume":"14","author":"H El-Sofany","year":"2024","unstructured":"El-Sofany, H., El-Seoud, S.A., Karam, O.H., Bouallegue, B.: Using machine learning algorithms to enhance iot system security. Sci. Rep. 14(1), 12077 (2024)","journal-title":"Sci. Rep."},{"issue":"13","key":"5480_CR5","doi-asserted-by":"publisher","first-page":"4293","DOI":"10.3390\/s24134293","volume":"24","author":"MB Musthafa","year":"2024","unstructured":"Musthafa, M.B., Huda, S., Kodera, Y., Ali, M.A., Araki, S., Mwaura, J., Nogami, Y.: Optimizing iot intrusion detection using balanced class distribution, feature selection, and ensemble machine learning techniques. Sensors 24(13), 4293 (2024)","journal-title":"Sensors"},{"key":"5480_CR6","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2024.101231","volume":"26","author":"AA Toony","year":"2024","unstructured":"Toony, A.A., Alqahtani, F., Alginahi, Y., Said, W.: Multi-block: a novel ml-based intrusion detection framework for sdn-enabled iot networks using new pyramidal structure. Internet Things 26, 101231 (2024)","journal-title":"Internet Things"},{"issue":"13","key":"5480_CR7","doi-asserted-by":"publisher","first-page":"5941","DOI":"10.3390\/s23135941","volume":"23","author":"ECP Neto","year":"2023","unstructured":"Neto, E.C.P., Dadkhah, S., Ferreira, R., Zohourian, A., Lu, R., Ghorbani, A.A.: Ciciot 2023: a real-time dataset and benchmark for large-scale attacks in iot environment. Sensors 23(13), 5941 (2023)","journal-title":"Sensors"},{"issue":"8","key":"5480_CR8","doi-asserted-by":"publisher","first-page":"284","DOI":"10.3390\/fi16080284","volume":"16","author":"S-M Tseng","year":"2024","unstructured":"Tseng, S.-M., Wang, Y.-Q., Wang, Y.-C.: Multi-class intrusion detection based on transformer for iot networks using cic-iot-2023 dataset. Future Internet 16(8), 284 (2024)","journal-title":"Future Internet"},{"key":"5480_CR9","doi-asserted-by":"crossref","unstructured":"Hamidouche, M., Popko, E., Ouni, B.: Enhancing iot security via automatic network traffic analysis: The transition from machine learning to deep learning. In: Proceedings of the 13th International Conference on the Internet of Things, pp. 105\u2013112 (2023)","DOI":"10.1145\/3627050.3627053"},{"key":"5480_CR10","doi-asserted-by":"crossref","unstructured":"Baral, S., Saha, S., Haque, A.: An adaptive end-to-end iot security framework using explainable ai and llms. arXiv preprint arXiv:2409.13177 (2024)","DOI":"10.1109\/WF-IoT62078.2024.10811456"},{"key":"5480_CR11","doi-asserted-by":"crossref","unstructured":"Tritscher, J., Wolf, M., Hotho, A., Schl\u00f6r, D.: Evaluating feature relevance xai in network intrusion detection. In: World Conference on Explainable Artificial Intelligence, pp. 483\u2013497 (2023). Springer","DOI":"10.1007\/978-3-031-44064-9_25"},{"key":"5480_CR12","unstructured":"Lundberg, S.: A unified approach to interpreting model predictions. arXiv preprint arXiv:1705.07874 (2017)"},{"key":"5480_CR13","doi-asserted-by":"crossref","unstructured":"Ribeiro, M.T., Singh, S., Guestrin, C.: \" why should i trust you?\" explaining the predictions of any classifier. In: Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, pp. 1135\u20131144 (2016)","DOI":"10.1145\/2939672.2939778"},{"issue":"1","key":"5480_CR14","doi-asserted-by":"publisher","first-page":"2400304","DOI":"10.1002\/aisy.202400304","volume":"7","author":"AM Salih","year":"2024","unstructured":"Salih, A.M., Raisi-Estabragh, Z., Galazzo, I.B., Radeva, P., Petersen, S.E., Lekadir, K., Menegaz, G.: A perspective on explainable artificial intelligence methods: shap and lime. Adv. Intell. Syst. 7(1), 2400304 (2024)","journal-title":"Adv. Intell. Syst."},{"key":"5480_CR15","doi-asserted-by":"publisher","unstructured":"Jolliffe, I.T.: Principal Component Analysis, pp. 338\u2013372. Springer, New York (2002). https:\/\/doi.org\/10.1007\/0-387-22440-8_13","DOI":"10.1007\/0-387-22440-8_13"},{"key":"5480_CR16","doi-asserted-by":"publisher","first-page":"81","DOI":"10.1023\/A:1022643204877","volume":"1","author":"JR Quinlan","year":"1986","unstructured":"Quinlan, J.R.: Induction of decision trees. Mach. Learn. 1, 81\u2013106 (1986)","journal-title":"Mach. Learn."},{"key":"5480_CR17","volume-title":"Elements of Information Theory","author":"TM Cover","year":"1999","unstructured":"Cover, T.M.: Elements of Information Theory. Wiley, New York (1999)"},{"issue":"6","key":"5480_CR18","doi-asserted-by":"publisher","first-page":"8367","DOI":"10.1007\/s10586-024-04436-0","volume":"27","author":"A Nazir","year":"2024","unstructured":"Nazir, A., He, J., Zhu, N., Anwar, M.S., Pathan, M.S.: Enhancing iot security: a collaborative framework integrating federated learning, dense neural networks, and blockchain. Clust. Comput. 27(6), 8367\u20138392 (2024)","journal-title":"Clust. Comput."},{"issue":"10","key":"5480_CR19","doi-asserted-by":"publisher","DOI":"10.1016\/j.jksuci.2023.101820","volume":"35","author":"A Nazir","year":"2023","unstructured":"Nazir, A., He, J., Zhu, N., Wajahat, A., Ma, X., Ullah, F., Qureshi, S., Pathan, M.S.: Advancing iot security: a systematic review of machine learning approaches for the detection of iot botnets. J. King Saud Univ. Comput. Inf. Sci. 35(10), 101820 (2023)","journal-title":"J. King Saud Univ. Comput. Inf. Sci."},{"key":"5480_CR20","doi-asserted-by":"crossref","unstructured":"Tellache, A., Mokhtari, A., Korba, A.A., Ghamri-Doudane, Y.: Multi-agent reinforcement learning-based network intrusion detection system. In: NOMS 2024-2024 IEEE Network Operations and Management Symposium, pp. 1\u20139 (2024). IEEE","DOI":"10.1109\/NOMS59830.2024.10575541"},{"key":"5480_CR21","doi-asserted-by":"crossref","unstructured":"Amato, F., Moscato, F., Xhafa, F., Vivenzio, E.: Smart intrusion detection with expert systems. In: Advances on P2P, Parallel, Grid, Cloud and Internet Computing: Proceedings of the 13th International Conference on P2P, Parallel, Grid, Cloud and Internet Computing (3PGCIC-2018), pp. 148\u2013159 (2019). Springer","DOI":"10.1007\/978-3-030-02607-3_14"},{"issue":"9","key":"5480_CR22","doi-asserted-by":"publisher","first-page":"4376","DOI":"10.3390\/s23094376","volume":"23","author":"F Luo","year":"2023","unstructured":"Luo, F., Yang, Z., Zhang, Z., Wang, Z., Wang, B., Wu, M.: A multi-layer intrusion detection system for some\/ip-based in-vehicle network. Sensors 23(9), 4376 (2023)","journal-title":"Sensors"},{"key":"5480_CR23","doi-asserted-by":"crossref","unstructured":"Dudek, G.: Short-term load forecasting using random forests. In: Intelligent Systems\u2019 2014: Proceedings of the 7th IEEE International Conference Intelligent Systems IS\u20192014, September 24-26, 2014, Warsaw, Poland, Volume 2: Tools, Architectures, Systems, Applications, pp. 821\u2013828 (2015). Springer","DOI":"10.1007\/978-3-319-11310-4_71"},{"key":"5480_CR24","doi-asserted-by":"crossref","unstructured":"Taud, H., Mas, J.-F.: Multilayer perceptron (mlp). Geomatic approaches for modeling land change scenarios, 451\u2013455 (2018)","DOI":"10.1007\/978-3-319-60801-3_27"},{"issue":"4","key":"5480_CR25","doi-asserted-by":"publisher","first-page":"2408","DOI":"10.1039\/D0EE02970J","volume":"14","author":"TI Okedi","year":"2021","unstructured":"Okedi, T.I., Fisher, A.C.: Time series analysis and long short-term memory (lstm) network prediction of bpv current density. Energy Environ. Sci. 14(4), 2408\u20132418 (2021)","journal-title":"Energy Environ. Sci."},{"issue":"7","key":"5480_CR26","doi-asserted-by":"publisher","first-page":"1235","DOI":"10.1162\/neco_a_01199","volume":"31","author":"Y Yu","year":"2019","unstructured":"Yu, Y., Si, X., Hu, C., Zhang, J.: A review of recurrent neural networks: Lstm cells and network architectures. Neural Comput. 31(7), 1235\u20131270 (2019)","journal-title":"Neural Comput."},{"issue":"3","key":"5480_CR27","doi-asserted-by":"publisher","first-page":"117","DOI":"10.3390\/info12030117","volume":"12","author":"U Onyekpe","year":"2021","unstructured":"Onyekpe, U., Palade, V., Kanarachos, S., Christopoulos, S.-R.G.: A quaternion gated recurrent unit neural network for sensor fusion. Information 12(3), 117 (2021)","journal-title":"Information"},{"key":"5480_CR28","doi-asserted-by":"publisher","DOI":"10.12720\/jait.14.1.153-159","author":"T-M Hoang","year":"2023","unstructured":"Hoang, T.-M., Thi, T.-L., Quy, N.: A novel distributed machine learning model to detect attacks on edge computing network. J. Adv. Inf. Technol. (2023). https:\/\/doi.org\/10.12720\/jait.14.1.153-159","journal-title":"J. Adv. Inf. Technol."},{"key":"5480_CR29","doi-asserted-by":"crossref","unstructured":"Trang, L.-L.T., Hoang, T.-M.: A novel multi-expert system in conjunction with ml models for detecting dos on edge computing. In: International Conference on Intelligence of Things, pp. 307\u2013317 (2024). Springer","DOI":"10.1007\/978-3-031-75596-5_28"},{"key":"5480_CR30","doi-asserted-by":"publisher","DOI":"10.5281\/zenodo.4743746","author":"S Garcia","year":"2021","unstructured":"Garcia, S., Parmisano, A., Erquiaga, M.J.: IoT-23: a labeled dataset with malicious and benign IoT network traffic. Zenodo (2021). https:\/\/doi.org\/10.5281\/zenodo.4743746","journal-title":"Zenodo"},{"key":"5480_CR31","unstructured":"Hindy, H., Tachtatzis, C., Atkinson, R., Bayne, E., Bellekens, X.: Mqtt-iot-ids2020: Mqtt internet of things intrusion detection dataset. IEEE Dataport (2020)"},{"key":"5480_CR32","doi-asserted-by":"publisher","first-page":"40281","DOI":"10.1109\/ACCESS.2022.3165809","volume":"10","author":"MA Ferrag","year":"2022","unstructured":"Ferrag, M.A., Friha, O., Hamouda, D., Maglaras, L., Janicke, H.: Edge-iiotset: a new comprehensive realistic cyber security dataset of iot and iiot applications for centralized and federated learning. IEEE Access 10, 40281\u201340306 (2022)","journal-title":"IEEE Access"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05480-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-025-05480-0\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05480-0.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,6]],"date-time":"2025-10-06T09:35:26Z","timestamp":1759743326000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-025-05480-0"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,3]]},"references-count":32,"journal-issue":{"issue":"10","published-print":{"date-parts":[[2025,10]]}},"alternative-id":["5480"],"URL":"https:\/\/doi.org\/10.1007\/s10586-025-05480-0","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,3]]},"assertion":[{"value":"7 November 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 March 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 May 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"3 September 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no Conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"649"}}