{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,15]],"date-time":"2026-09-15T22:03:14Z","timestamp":1789509794310,"version":"build-2803163510"},"reference-count":85,"publisher":"Springer Science and Business Media LLC","issue":"14","license":[{"start":{"date-parts":[[2025,9,29]],"date-time":"2025-09-29T00:00:00Z","timestamp":1759104000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,9,29]],"date-time":"2025-09-29T00:00:00Z","timestamp":1759104000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2025,11]]},"DOI":"10.1007\/s10586-025-05648-8","type":"journal-article","created":{"date-parts":[[2025,9,29]],"date-time":"2025-09-29T20:15:11Z","timestamp":1759176911000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["SmartHive-IDS: an advanced intrusion detection framework for SDN-HoneyNet enabled ICPS using hybrid explainable ensemble feature selection with optimized Bi-LSTM"],"prefix":"10.1007","volume":"28","author":[{"given":"S.","family":"Krishnaveni","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Sherali","family":"Zeadally","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"S.","family":"Sivamohan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"S. S.","family":"Sridhar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,9,29]]},"reference":[{"issue":"1","key":"5648_CR1","doi-asserted-by":"publisher","first-page":"100001","DOI":"10.1016\/j.grets.2022.100001","volume":"1","author":"M Javaid","year":"2023","unstructured":"Javaid, M., Haleem, A., Singh, R.P., Suman, R.: An integrated outlook of Cyber\u2013Physical systems for industry 4.0: Topical practices, architecture, and applications. Green. Technol. Sustain. 1(1), 100001 (2023)","journal-title":"Green. Technol. Sustain."},{"issue":"11s","key":"5648_CR2","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3510410","volume":"54","author":"H Kayan","year":"2022","unstructured":"Kayan, H., Nunes, M., Rana, O., Burnap, P., Perera, C.: Cybersecurity of industrial cyber-physical systems: A review. ACM Comput. Surv. (CSUR). 54(11s), 1\u201335 (2022)","journal-title":"ACM Comput. Surv. (CSUR)"},{"key":"5648_CR3","doi-asserted-by":"publisher","first-page":"103611","DOI":"10.1016\/j.compind.2022.103611","volume":"137","author":"M Jbair","year":"2022","unstructured":"Jbair, M., Ahmad, B., Maple, C., Harrison, R.: Threat modelling for industrial cyber physical systems in the era of smart manufacturing. Comput. Ind. 137, 103611 (2022)","journal-title":"Comput. Ind."},{"issue":"7","key":"5648_CR4","doi-asserted-by":"publisher","first-page":"1191","DOI":"10.3390\/electronics13071191","volume":"13","author":"J Pochmara","year":"2024","unstructured":"Pochmara, J., \u015awietlicka, A.: Cybersecurity of industrial systems\u2014A 2023 report. Electronics. 13(7), 1191 (2024)","journal-title":"Electronics"},{"key":"5648_CR5","unstructured":"Forescout Research. Forescout 2024 Threat Report: Intensifying Cyber Threats in Industrial Control Systems. Industrial Cyber: (2024). Available at: https:\/\/industrialcyber.co\/reports\/forescout-2024-threat-report-warns-of-intensifying-cyber-threats-in-2025-as-ot-protocols-increasingly-targeted"},{"key":"5648_CR6","unstructured":"The Hacker News: Over 145,000 Industrial Control Systems (ICS) Devices Exposed Online Across 175 Countries. The Hacker News, November 2024. Available at: https:\/\/thehackernews.com\/2024\/11\/over-145000-industrial-control-systems.html"},{"key":"5648_CR7","unstructured":"Reuters, Ukraine\u2019s Railways Restore Half IT Services Hit by Cyber Attack So Far, Reuters: April 9, (2025). Available at: https:\/\/www.reuters.com\/world\/europe\/ukraines-railways-restore-half-it-services-hit-by-cyber-attack-so-far-2025-04-09"},{"key":"5648_CR8","unstructured":"Gordon Lubold & Dustin Volz. In Secret Meeting, China Acknowledged Role in U.S. Infrastructure Hacks. The Wall Street Journal, March 2025. Available at: https:\/\/www.wsj.com\/politics\/national-security\/in-secret-meeting-china-acknowledged-role-in-u-s-infrastructure-hacks-c5ab37cb"},{"issue":"0","key":"5648_CR9","first-page":"44","volume":"2","author":"C Ezechi","year":"2025","unstructured":"Ezechi, C., Akinsolu, M.O., Sangodoyin, A.O., Akinsolu, F.T., Sakpere, W.: Software-defined networking in cyber-physical systems: Benefits, challenges, and opportunities. Cyber Phys. Syst. 2(0), 44\u201369 (2025)","journal-title":"Cyber Phys. Syst."},{"key":"5648_CR10","doi-asserted-by":"crossref","unstructured":"Mittal, M., Al-Jawahry, H.M., Varshney, N., Kumar, S.P., Michaelson, J., Reddy, R.A.: Deployment Schemes of In-Band Management Mode Based on Industrial SDN Network. In 2024 7th International Conference on Contemporary Computing and Informatics (IC3I) (Vol. 7, pp. 1739\u20131748). IEEE. (2024), September","DOI":"10.1109\/IC3I61595.2024.10829245"},{"issue":"4","key":"5648_CR11","doi-asserted-by":"publisher","first-page":"1052","DOI":"10.1109\/JSYST.2013.2257594","volume":"8","author":"S Han","year":"2014","unstructured":"Han, S., Xie, M., Chen, H.H., Ling, Y.: Intrusion detection in cyber-physical systems: Techniques and challenges. IEEE Syst. J. 8(4), 1052\u20131062 (2014)","journal-title":"IEEE Syst. J."},{"issue":"1","key":"5648_CR12","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3422369","volume":"5","author":"A Khaled","year":"2020","unstructured":"Khaled, A., Ouchani, S., Tari, Z., Drira, K.: Assessing the severity of smart attacks in industrial cyber-physical systems. ACM Trans. Cyber-Physical Syst. 5(1), 1\u201328 (2020)","journal-title":"ACM Trans. Cyber-Physical Syst."},{"key":"5648_CR13","doi-asserted-by":"crossref","unstructured":"Zahid, F., Kuo, M.M., Sinha, R., Funchal, G., Pedrosa, T., Leitao, P.: Actively Detecting Multiscale Flooding Attacks & Attack Volumes in resource-constrained ICPS. IEEE Transactions on Industrial Informatics (2024)","DOI":"10.1109\/TII.2024.3383520"},{"key":"5648_CR14","doi-asserted-by":"crossref","unstructured":"Yu, J., Shvetsov, A.V., Alsamhi, S.H.: Leveraging Machine Learning for Cybersecurity Resilience in Industry 4.0: Challenges and Future Directions. IEEE Access (2024)","DOI":"10.1109\/ACCESS.2024.3482987"},{"issue":"17","key":"5648_CR15","doi-asserted-by":"publisher","first-page":"3497","DOI":"10.3390\/electronics13173497","volume":"13","author":"S Moosavi","year":"2024","unstructured":"Moosavi, S., Farajzadeh-Zanjani, M., Razavi-Far, R., Palade, V., Saif, M.: Explainable AI in manufacturing and industrial cyber\u2013physical systems: A survey. Electronics. 13(17), 3497 (2024)","journal-title":"Electronics"},{"issue":"4","key":"5648_CR16","doi-asserted-by":"publisher","first-page":"1993","DOI":"10.1007\/s12083-023-01507-8","volume":"16","author":"S Sivamohan","year":"2023","unstructured":"Sivamohan, S., Sridhar, S.S., Krishnaveni, S.: TEA-EKHO-IDS: An intrusion detection system for industrial CPS with trustworthy explainable AI and enhanced Krill herd optimization. Peer-to-Peer Netw. Appl. 16(4), 1993\u20132021 (2023)","journal-title":"Peer-to-Peer Netw. Appl."},{"key":"5648_CR17","doi-asserted-by":"publisher","first-page":"106946","DOI":"10.1016\/j.comnet.2019.106946","volume":"165","author":"MR Asghar","year":"2019","unstructured":"Asghar, M.R., Hu, Q., Zeadally, S.: Cybersecurity in industrial control systems: Issues, technologies, and challenges. Comput. Netw. 165, 106946 (2019)","journal-title":"Comput. Netw."},{"key":"5648_CR18","doi-asserted-by":"publisher","first-page":"16239","DOI":"10.1109\/ACCESS.2021.3053135","volume":"9","author":"M Noorizadeh","year":"2021","unstructured":"Noorizadeh, M., Shakerpour, M., Meskin, N., Unal, D., Khorasani, K.: A cyber-security methodology for a cyber-physical industrial control system testbed. IEEE Access. 9, 16239\u201316253 (2021)","journal-title":"IEEE Access."},{"key":"5648_CR19","doi-asserted-by":"publisher","first-page":"86769","DOI":"10.1109\/ACCESS.2019.2923610","volume":"7","author":"Q Qi","year":"2019","unstructured":"Qi, Q., Tao, F.: A smart manufacturing service system based on edge computing, fog computing, and cloud computing. IEEE Access. 7, 86769\u201386777 (2019)","journal-title":"IEEE Access."},{"key":"5648_CR20","doi-asserted-by":"publisher","first-page":"101561","DOI":"10.1016\/j.cose.2019.06.015","volume":"87","author":"JE Rubio","year":"2019","unstructured":"Rubio, J.E., Alcaraz, C., Roman, R., Lopez, J.: Current cyber-defense trends in industrial control systems. Computers Secur. 87, 101561 (2019)","journal-title":"Computers Secur."},{"issue":"1","key":"5648_CR21","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1109\/MIE.2017.2649104","volume":"11","author":"M Wollschlaeger","year":"2017","unstructured":"Wollschlaeger, M., Sauter, T., Jasperneite, J.: The future of industrial communication: Automation networks in the era of the internet of things and industry 4.0. IEEE Ind. Electron. Mag. 11(1), 17\u201327 (2017)","journal-title":"IEEE Ind. Electron. Mag."},{"issue":"12","key":"5648_CR22","doi-asserted-by":"publisher","first-page":"68","DOI":"10.1109\/MCOM.2016.1600352CM","volume":"54","author":"W Zhong","year":"2016","unstructured":"Zhong, W., Yu, R., Xie, S., Zhang, Y., Tsang, D.H.: Software defined networking for flexible and green energy internet. IEEE Commun. Mag. 54(12), 68\u201375 (2016)","journal-title":"IEEE Commun. Mag."},{"issue":"13","key":"5648_CR23","doi-asserted-by":"publisher","first-page":"6451","DOI":"10.3390\/app12136451","volume":"12","author":"K Sauka","year":"2022","unstructured":"Sauka, K., Shin, G.Y., Kim, D.W., Han, M.M.: Adversarial robust and explainable network intrusion detection systems based on deep learning. Appl. Sci. 12(13), 6451 (2022)","journal-title":"Appl. Sci."},{"issue":"1","key":"5648_CR24","doi-asserted-by":"publisher","first-page":"28","DOI":"10.1109\/MIE.2016.2618724","volume":"11","author":"S Mumtaz","year":"2017","unstructured":"Mumtaz, S., Alsohaily, A., Pang, Z., Rayes, A., Tsang, K.F., Rodriguez, J.: Massive internet of things for industrial applications: Addressing wireless IIoT connectivity challenges and ecosystem fragmentation. IEEE Ind. Electron. Mag. 11(1), 28\u201333 (2017)","journal-title":"IEEE Ind. Electron. Mag."},{"issue":"8","key":"5648_CR25","doi-asserted-by":"publisher","first-page":"5615","DOI":"10.1109\/TII.2020.3023430","volume":"17","author":"B Li","year":"2020","unstructured":"Li, B., Wu, Y., Song, J., Lu, R., Li, T., Zhao, L.: DeepFed: Federated deep learning for intrusion detection in industrial cyber\u2013physical systems. IEEE Trans. Industr. Inf. 17(8), 5615\u20135624 (2020)","journal-title":"IEEE Trans. Industr. Inf."},{"key":"5648_CR26","unstructured":"Maesschalck, S., Giotsas, V., Green, B., Race, N.: Honeypots for Automatic Network-Level Industrial Control System Security. In 14th EuroSys Doctoral Workshop. (2020), April"},{"issue":"8","key":"5648_CR27","doi-asserted-by":"publisher","first-page":"5542","DOI":"10.1109\/TII.2020.3044576","volume":"17","author":"Y Sun","year":"2020","unstructured":"Sun, Y., Tian, Z., Li, M., Su, S., Du, X., Guizani, M.: Honeypot identification in Softwarized industrial cyber\u2013physical systems. IEEE Trans. Industr. Inf. 17(8), 5542\u20135551 (2020)","journal-title":"IEEE Trans. Industr. Inf."},{"key":"5648_CR28","doi-asserted-by":"crossref","unstructured":"Antonioli, D., Agrawal, A., Tippenhauer, N.O.: Towards high-interaction virtual ICS honeypots-in-a-box. In Proceedings of the 2nd ACM Workshop on Cyber-Physical Systems Security and Privacy (pp. 13\u201322). (2016), October","DOI":"10.1145\/2994487.2994493"},{"key":"5648_CR29","unstructured":"Almuqren, L., Maashi, M.S., Alamgeer, M., Mohsen, H., Hamza, M.A., Abdelmageed: A. A. (2023)"},{"issue":"7","key":"5648_CR30","doi-asserted-by":"publisher","first-page":"6335","DOI":"10.1016\/j.eswa.2011.12.017","volume":"39","author":"B Wu","year":"2012","unstructured":"Wu, B., Qian, C., Ni, W., Fan, S.: The improvement of glowworm swarm optimization for continuous optimization problems. Expert Syst. Appl. 39(7), 6335\u20136342 (2012)","journal-title":"Expert Syst. Appl."},{"key":"5648_CR31","doi-asserted-by":"crossref","unstructured":"Amarasinghe, K., Kenney, K., Manic, M.: Toward explainable deep neural network-based anomaly detection. In 2018 11th international conference on human system interaction (HSI) (pp. 311\u2013317). IEEE. (2018), July","DOI":"10.1109\/HSI.2018.8430788"},{"key":"5648_CR32","doi-asserted-by":"crossref","unstructured":"Explainable Artificial Intelligence Enabled Intrusion Detection Technique for Secure Cyber: -Physical Syst. Appl. Sci., 13(5), 3081 (2023)","DOI":"10.3390\/app13053081"},{"key":"5648_CR33","doi-asserted-by":"publisher","first-page":"181","DOI":"10.1016\/j.future.2021.09.010","volume":"127","author":"IA Khan","year":"2022","unstructured":"Khan, I.A., Moustafa, N., Razzak, I., Tanveer, M., Pi, D., Pan, Y., Ali, B.S.: XSRU-IoMT: Explainable simple recurrent units for threat detection in internet of medical things networks. Future Generation Comput. Syst. 127, 181\u2013193 (2022)","journal-title":"Future Generation Comput. Syst."},{"issue":"5","key":"5648_CR34","doi-asserted-by":"publisher","first-page":"1045","DOI":"10.1007\/s11571-022-09780-8","volume":"16","author":"MA Alohali","year":"2022","unstructured":"Alohali, M.A., Al-Wesabi, F.N., Hilal, A.M., Goel, S., Gupta, D., Khanna, A.: Artificial intelligence enabled intrusion detection systems for cognitive cyber-physical systems in industry 4.0 environment. Cogn. Neurodyn. 16(5), 1045\u20131057 (2022)","journal-title":"Cogn. Neurodyn."},{"key":"5648_CR35","doi-asserted-by":"crossref","unstructured":"Chinnasamy, R., Subramanian, M., Sengupta, N.: Empowering intrusion detection systems: A synergistic hybrid approach with optimization and deep learning techniques for network security. Int. Arab. J. Inform. Technol. (IAJIT), 22(1), 60\u201374 (2025)","DOI":"10.34028\/iajit\/22\/1\/6"},{"issue":"5","key":"5648_CR36","doi-asserted-by":"publisher","first-page":"5241","DOI":"10.3934\/mbe.2022246","volume":"19","author":"X Zhou","year":"2022","unstructured":"Zhou, X., Zhou, S., Han, Y., Zhu, S.: Levy flight-based inverse adaptive comprehensive learning particle swarm optimization. Math. Biosci. Eng. 19(5), 5241\u20135268 (2022)","journal-title":"Math. Biosci. Eng."},{"key":"5648_CR37","doi-asserted-by":"crossref","unstructured":"Lei, W., Pang, Z., Wen, H., Hou, W., Zhang, X.: Edge-enabled zero trust architecture for ICPS with spatial and temporal granularity. In 2023 IEEE 6th International Conference on Industrial Cyber-Physical Systems (ICPS) (pp. 1\u20136). IEEE. (2023), May","DOI":"10.1109\/ICPS58381.2023.10127999"},{"issue":"1","key":"5648_CR38","doi-asserted-by":"publisher","first-page":"5001","DOI":"10.22178\/pos.113-2","volume":"11","author":"AO Ojo","year":"2025","unstructured":"Ojo, A.O.: Adoption of zero trust architecture (ZTA) in the protection of critical infrastructure. Path Sci. 11(1), 5001\u20135009 (2025)","journal-title":"Path Sci."},{"key":"5648_CR39","doi-asserted-by":"crossref","unstructured":"Moriano, P., Hespeler, S.C., Li, M., Mahbub, M.: Adaptive Anomaly Detection for Identifying Attacks in Cyber-Physical Systems: A Systematic Literature Review. arXiv preprint arXiv:2411.14278. (2024)","DOI":"10.1007\/s10462-025-11292-w"},{"key":"5648_CR40","doi-asserted-by":"crossref","unstructured":"Adil, M., Farouk, A., Abulkasim, H., Ali, A., Song, H., Jin, Z.: NG-ICPS: Next Generation Industrial-CPS, Security Threats in the Era of Artificial Intelligence, Open Challenges with Future Research Directions. IEEE Internet of Things Journal (2024)","DOI":"10.1109\/JIOT.2024.3486659"},{"key":"5648_CR41","doi-asserted-by":"publisher","first-page":"108447","DOI":"10.1016\/j.compeleceng.2022.108447","volume":"104","author":"H Alqahtani","year":"2022","unstructured":"Alqahtani, H., Kumar, G.: A deep learning-based intrusion detection system for in-vehicle networks. Comput. Electr. Eng. 104, 108447 (2022)","journal-title":"Comput. Electr. Eng."},{"issue":"2","key":"5648_CR42","first-page":"1503","volume":"54","author":"G Kocher","year":"2022","unstructured":"Kocher, G., Kumar, G.: A hybrid deep learning approach for effective intrusion detection systems using spatial-temporal features. Adv. Eng. Sci. 54(2), 1503\u20131519 (2022)","journal-title":"Adv. Eng. Sci."},{"key":"5648_CR43","first-page":"100471","volume":"35","author":"W Lo","year":"2022","unstructured":"Lo, W., Alqahtani, H., Thakur, K., Almadhor, A., Chander, S., Kumar, G.: A hybrid deep learning based intrusion detection system using spatial-temporal representation of in-vehicle network traffic. Veh. Commun. 35, 100471 (2022)","journal-title":"Veh. Commun."},{"key":"5648_CR44","doi-asserted-by":"crossref","unstructured":"Kumar, G., Alqahtani, H.: Machine learning techniques for intrusion detection systems in SDN-Recent advances, challenges and future directions. CMES-Computer Model. Eng. Sci., 134(1), 89 (2023)","DOI":"10.32604\/cmes.2022.020724"},{"key":"5648_CR45","doi-asserted-by":"crossref","unstructured":"Schueller, Q., Basu, K., Younas, M., Patel, M., Ball, F.: A hierarchical intrusion detection system using support vector machine for SDN network in cloud data center. In 2018 28th International Telecommunication Networks and Applications Conference (ITNAC) (pp. 1\u20136). IEEE. (2018), November","DOI":"10.1109\/ATNAC.2018.8615255"},{"key":"5648_CR46","unstructured":"Mane, S., Rao, D. Explain the network intrusion detection system using an explainable AI framework in their 2021 publication. Cornell university, arXiv preprint arXiv:2103.07110"},{"issue":"14","key":"5648_CR47","doi-asserted-by":"publisher","first-page":"3817","DOI":"10.3390\/s20143817","volume":"20","author":"Z Wang","year":"2020","unstructured":"Wang, Z., Lai, Y., Liu, Z., Liu, J.: Explaining the attributes of a deep learning-based intrusion detection system for industrial control networks. Sensors. 20(14), 3817 (2020)","journal-title":"Sensors"},{"key":"5648_CR48","doi-asserted-by":"publisher","first-page":"102925","DOI":"10.1016\/j.annals.2020.102925","volume":"83","author":"A Kulshrestha","year":"2020","unstructured":"Kulshrestha, A., Krishnaswamy, V., Sharma, M.: Bayesian BILSTM approach for tourism demand forecasting. Annals Tourism Res. 83, 102925 (2020)","journal-title":"Annals Tourism Res."},{"key":"5648_CR49","doi-asserted-by":"crossref","unstructured":"Yang, H., Cheng, L., Chuah, M.C.: Deep-learning-based network intrusion detection for SCADA systems. In 2019 IEEE Conference on Communications and Network Security (CNS) (pp. 1\u20137). IEEE. (2019), June","DOI":"10.1109\/CNS.2019.8802785"},{"key":"5648_CR50","doi-asserted-by":"publisher","first-page":"113578","DOI":"10.1016\/j.eswa.2020.113578","volume":"158","author":"J Liu","year":"2020","unstructured":"Liu, J., Zhang, W., Ma, T., Tang, Z., Xie, Y., Gui, W., Niyoyita, J.P.: Toward security monitoring of industrial cyber-physical systems via hierarchically distributed intrusion detection. Expert Syst. Appl. 158, 113578 (2020)","journal-title":"Expert Syst. Appl."},{"key":"5648_CR51","unstructured":"Antonioli, D.: MiniCPS public repository. https:\/\/github.com\/scy-phy\/minicps"},{"issue":"2","key":"5648_CR52","doi-asserted-by":"publisher","first-page":"348","DOI":"10.24191\/jcrinn.v9i2.477","volume":"9","author":"MF Mohd Fuzi","year":"2024","unstructured":"Mohd Fuzi, M.F., Mazlan, M.F., Jamaluddin, M.N.F., Abd Halim, I.H.: Performance analysis of network intrusion detection using T-Pot honeypots. J. Comput. Res. Innov. (JCRINN). 9(2), 348\u2013360 (2024)","journal-title":"J. Comput. Res. Innov. (JCRINN)"},{"key":"5648_CR53","doi-asserted-by":"crossref","unstructured":"Sivamohan, S., Sridhar, S.S., Krishnaveni, S.: Efficient Multi-platform Honeypot for Capturing Real-time Cyber Attacks. In Intelligent Data Communication Technologies and Internet of Things: Proceedings of ICICI 2021 (pp. 291\u2013308). Singapore: Springer Nature Singapore. (2022)","DOI":"10.1007\/978-981-16-7610-9_21"},{"key":"5648_CR54","doi-asserted-by":"crossref","unstructured":"Khoa, N.H., Hoang, D., Ngo-Khanh, H., Duy, K., P. T., Pham, V.H.: Sdn-based cyber deception deployment for proactive defense strategy using honey of things and cyber threat intelligence. In International Conference on Intelligence of Things (pp. 269\u2013278). Cham: Springer Nature Switzerland. (2023), October","DOI":"10.1007\/978-3-031-46749-3_26"},{"key":"5648_CR55","doi-asserted-by":"publisher","first-page":"321","DOI":"10.1613\/jair.953","volume":"16","author":"NV Chawla","year":"2002","unstructured":"Chawla, N.V., Bowyer, K.W., Hall, L.O., Kegelmeyer, W.P.: SMOTE: Synthetic minority over-sampling technique. J. Artif. Intell. Res. 16, 321\u2013357 (2002)","journal-title":"J. Artif. Intell. Res."},{"key":"5648_CR56","doi-asserted-by":"crossref","unstructured":"Bala, R., Nagpal, R.: A review on Kdd cup99 and Nsl Nsl-kdd dataset. Int. J. Adv. Res. Comput. Sci., 10(2), 64 (2019)","DOI":"10.26483\/ijarcs.v10i2.6395"},{"issue":"12","key":"5648_CR57","doi-asserted-by":"publisher","first-page":"245","DOI":"10.3390\/computers12120245","volume":"12","author":"S Songma","year":"2023","unstructured":"Songma, S., Sathuphan, T., Pamutha, T.: Optimizing intrusion detection systems in three phases on the CSE-CIC-IDS-2018 dataset. Computers. 12(12), 245 (2023)","journal-title":"Computers"},{"key":"5648_CR58","doi-asserted-by":"publisher","first-page":"142206","DOI":"10.1109\/ACCESS.2021.3120626","volume":"9","author":"AR Gad","year":"2021","unstructured":"Gad, A.R., Nashat, A.A., Barkat, T.M.: Intrusion detection system using machine learning for vehicular ad hoc networks based on ToN-IoT dataset. IEEE Access. 9, 142206\u2013142217 (2021)","journal-title":"IEEE Access."},{"key":"5648_CR59","doi-asserted-by":"publisher","first-page":"151","DOI":"10.1007\/978-3-031-33837-3_8","volume-title":"Normalization of Multidimensional Data for Multi-Criteria Decision-Making Problems: Inversion, Displacement, Asymmetry","author":"IZ Mukhametzyanov","year":"2023","unstructured":"Mukhametzyanov, I.Z.: MS-Transformation of Z-Score. In: Price, C.C., Zhu, J., & Hillier, F.S. (eds.) Normalization of Multidimensional Data for Multi-Criteria Decision-Making Problems: Inversion, Displacement, Asymmetry, pp. 151\u2013166. Springer International Publishing, Cham (2023)"},{"issue":"1","key":"5648_CR60","doi-asserted-by":"publisher","first-page":"2400304","DOI":"10.1002\/aisy.202400304","volume":"7","author":"AM Salih","year":"2025","unstructured":"Salih, A.M., Raisi-Estabragh, Z., Galazzo, I.B., Radeva, P., Petersen, S.E., Lekadir, K., Menegaz, G.: A perspective on explainable artificial intelligence methods: SHAP and LIME. Adv. Intell. Syst. 7(1), 2400304 (2025)","journal-title":"Adv. Intell. Syst."},{"key":"5648_CR61","doi-asserted-by":"publisher","first-page":"100676","DOI":"10.1016\/j.iot.2022.100676","volume":"21","author":"LAC Ahakonye","year":"2023","unstructured":"Ahakonye, L.A.C., Nwakanma, C.I., Lee, J.M., Kim, D.S.: SCADA intrusion detection scheme exploiting the fusion of modified decision tree and Chi-square feature selection. Internet Things. 21, 100676 (2023)","journal-title":"Internet Things"},{"key":"5648_CR62","doi-asserted-by":"crossref","unstructured":"Chen, P., Li, F., Wu, C.: Research on intrusion detection method based on Pearson correlation coefficient feature selection algorithm. In Journal of Physics: Conference Series (Vol. 1757, No. 1, p. 012054). IOP Publishing. (2021)","DOI":"10.1088\/1742-6596\/1757\/1\/012054"},{"issue":"4","key":"5648_CR63","doi-asserted-by":"publisher","first-page":"1184","DOI":"10.1016\/j.jnca.2011.01.002","volume":"34","author":"F Amiri","year":"2011","unstructured":"Amiri, F., Yousefi, M.R., Lucas, C., Shakery, A., Yazdani, N.: Mutual information-based feature selection for intrusion detection systems. J. Netw. Comput. Appl. 34(4), 1184\u20131199 (2011)","journal-title":"J. Netw. Comput. Appl."},{"key":"5648_CR64","doi-asserted-by":"publisher","first-page":"132911","DOI":"10.1109\/ACCESS.2020.3009843","volume":"8","author":"D Stiawan","year":"2020","unstructured":"Stiawan, D., Idris, M.Y.B., Bamhdi, A.M., Budiarto, R.: CICIDS-2017 dataset feature analysis with information gain for anomaly detection. IEEE Access. 8, 132911\u2013132921 (2020)","journal-title":"IEEE Access."},{"issue":"2","key":"5648_CR65","doi-asserted-by":"publisher","first-page":"264","DOI":"10.23919\/JCN.2022.000002","volume":"24","author":"S Subbiah","year":"2022","unstructured":"Subbiah, S., Anbananthen, K.S.M., Thangaraj, S., Kannan, S., Chelliah, D.: Intrusion detection technique in wireless sensor network using grid search random forest with Boruta feature selection algorithm. J. Commun. Netw. 24(2), 264\u2013273 (2022)","journal-title":"J. Commun. Netw."},{"issue":"10","key":"5648_CR66","doi-asserted-by":"publisher","first-page":"1764","DOI":"10.3390\/sym13101764","volume":"13","author":"E Jaw","year":"2021","unstructured":"Jaw, E., Wang, X.: Feature selection And ensemble-based intrusion detection system: An efficient And comprehensive approach. Symmetry. 13(10), 1764 (2021)","journal-title":"Symmetry"},{"key":"5648_CR67","doi-asserted-by":"crossref","unstructured":"Hao, S., Long, J., Yang, Y.: Bl-ids: Detecting web attacks using bi-lstm model based on deep learning. In International conference on security and privacy in new computing environments (pp. 551\u2013563). Cham: Springer International Publishing. (2019), April","DOI":"10.1007\/978-3-030-21373-2_45"},{"key":"5648_CR68","doi-asserted-by":"crossref","unstructured":"Injadat, M., Salo, F., Nassif, A.B., Essex, A., Shami, A.: Bayesian optimization with machine learning algorithms towards anomaly detection. In 2018 IEEE global communications conference (GLOBECOM) (pp. 1\u20136). IEEE. (2018), December","DOI":"10.1109\/GLOCOM.2018.8647714"},{"key":"5648_CR69","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s12046-020-1308-5","volume":"45","author":"N Kunhare","year":"2020","unstructured":"Kunhare, N., Tiwari, R., Dhar, J.: Particle swarm optimization and feature selection for intrusion detection system. S\u0101dhan\u0101. 45, 1\u201314 (2020)","journal-title":"S\u0101dhan\u0101"},{"key":"5648_CR70","first-page":"httpwwwcsnorthw","volume":"URL","author":"A Goyal","year":"2008","unstructured":"Goyal, A., Kumar, C.: GA-NIDS: A genetic algorithm-based network intrusion detection system. Northwest. Univ. URL, httpwwwcsnorthwesterneduago\u2013210 (2008)","journal-title":"Northwest. Univ."},{"key":"5648_CR71","doi-asserted-by":"crossref","unstructured":"Wankhade, A., Chandrasekaran, K.: Distributed-intrusion detection system using combination of ant colony optimization (ACO) and support vector machine (SVM). In 2016 International Conference on Micro-Electronics and Telecommunication Engineering (ICMETE) (pp. 646\u2013651). IEEE. (2016), September","DOI":"10.1109\/ICMETE.2016.94"},{"key":"5648_CR72","doi-asserted-by":"crossref","unstructured":"Rajathi, C., Rukmani, P.: Voting Ensemble: Performance Improvement for Intrusion Detection System. In 2024 3rd International Conference on Artificial Intelligence For Internet of Things (AIIoT), pp. 1\u20136. IEEE, (2024)","DOI":"10.1109\/AIIoT58432.2024.10574592"},{"key":"5648_CR73","doi-asserted-by":"publisher","first-page":"100090","DOI":"10.1016\/j.csa.2025.100090","volume":"3","author":"SI Ahsan","year":"2025","unstructured":"Ahsan, S.I., Legg, P., Alam, S.I.: An explainable ensemble-based intrusion detection system for software-defined vehicle ad-hoc networks. Cyber Secur. Appl. 3, 100090 (2025)","journal-title":"Cyber Secur. Appl."},{"issue":"4","key":"5648_CR74","doi-asserted-by":"publisher","first-page":"257","DOI":"10.1007\/s10586-024-04888-4","volume":"28","author":"QM Alzubi","year":"2025","unstructured":"Alzubi, Q.M., Sanjalawe, Y., Makhadmeh, S.N., Fakhouri, H.N.: An enhanced method for intrusion detection systems in IoT environment. Cluster Comput. 28(4), 257 (2025)","journal-title":"Cluster Comput."},{"issue":"3","key":"5648_CR75","doi-asserted-by":"publisher","first-page":"2993","DOI":"10.55214\/25768484.v9i3.5899","volume":"9","author":"KIM Woo-Seong","year":"2025","unstructured":"Woo-Seong, K.I.M., Hyun-Jung, K.I.M.: Bi-LSTM-XGBoost ensemble-based intrusion detection system: Addressing data imbalance and enhancing minority class performance. Edelweiss Appl. Sci. Technol. 9(3), 2993\u20132999 (2025)","journal-title":"Edelweiss Appl. Sci. Technol."},{"key":"5648_CR76","doi-asserted-by":"publisher","first-page":"104091","DOI":"10.1016\/j.jnca.2024.104091","volume":"235","author":"U Ahmed","year":"2025","unstructured":"Ahmed, U., Jiangbin, Z., Khan, S., Sadiq, M.T.: Consensus hybrid ensemble machine learning for intrusion detection with explainable AI. J. Netw. Comput. Appl. 235, 104091 (2025)","journal-title":"J. Netw. Comput. Appl."},{"issue":"3","key":"5648_CR77","doi-asserted-by":"publisher","first-page":"e8334","DOI":"10.1002\/cpe.8334","volume":"37","author":"S Krishnaveni","year":"2025","unstructured":"Krishnaveni, S., Sivamohan, S., Jothi, B., Chen, T.M., Sathiyanarayanan, M.: TwinSec-IDS: An enhanced intrusion detection system in SDN\u2010Digital\u2010Twin\u2010Based industrial Cyber\u2010Physical systems. Concurrency Computation: Pract. Experience. 37(3), e8334 (2025)","journal-title":"Concurrency Computation: Pract. Experience"},{"issue":"1","key":"5648_CR78","doi-asserted-by":"publisher","first-page":"150","DOI":"10.1186\/s13677-024-00712-x","volume":"13","author":"U Ahmed","year":"2024","unstructured":"Ahmed, U., Jiangbin, Z., Almogren, A., Khan, S., Sadiq, M.T., Altameem, A., Rehman, A.U.: Explainable AI-based innovative hybrid ensemble model for intrusion detection. J. Cloud Comput. 13(1), 150 (2024)","journal-title":"J. Cloud Comput."},{"key":"5648_CR79","doi-asserted-by":"crossref","unstructured":"Attique, D., Hao, W., Ping, W., Javeed, D., Kumar, P.: Explainable and data-efficient Deep Learning for Enhanced Attack Detection in IIoT Ecosystem. IEEE Internet of Things Journal (2024)","DOI":"10.1109\/JIOT.2024.3384374"},{"key":"5648_CR80","doi-asserted-by":"publisher","first-page":"123853","DOI":"10.1016\/j.eswa.2024.123853","volume":"250","author":"C Kumar","year":"2024","unstructured":"Kumar, C., Ansari, M.S.A.: An explainable nature-inspired cyber attack detection system in Software-Defined IoT applications. Expert Syst. Appl. 250, 123853 (2024)","journal-title":"Expert Syst. Appl."},{"issue":"15","key":"5648_CR81","doi-asserted-by":"publisher","first-page":"11459","DOI":"10.1007\/s00521-023-08319-0","volume":"35","author":"S Sivamohan","year":"2023","unstructured":"Sivamohan, S., Sridhar, S.S.: An optimized model for network intrusion detection systems in industry 4.0 using XAI based Bi-LSTM framework. Neural Comput. Appl. 35(15), 11459\u201311475 (2023)","journal-title":"Neural Comput. Appl."},{"key":"5648_CR82","doi-asserted-by":"publisher","first-page":"103661","DOI":"10.1016\/j.cose.2023.103661","volume":"138","author":"V Hnamte","year":"2024","unstructured":"Hnamte, V., Najar, A.A., Nhung-Nguyen, H., Hussain, J., Sugali, M.N.: DDoS attack detection and mitigation using deep neural network in SDN environment. Computers Secur. 138, 103661 (2024)","journal-title":"Computers Secur."},{"key":"5648_CR83","doi-asserted-by":"publisher","first-page":"103832","DOI":"10.1016\/j.jnca.2024.103832","volume":"224","author":"S Murtuza","year":"2024","unstructured":"Murtuza, S., Asawa, K.: Early prevention and mitigation of link flooding attacks in software defined networks. J. Netw. Comput. Appl. 224, 103832 (2024)","journal-title":"J. Netw. Comput. Appl."},{"key":"5648_CR84","doi-asserted-by":"crossref","unstructured":"Tayfour, O.E., Mubarakali, A., Tayfour, A.E., Marsono, M.N., Hassan, E., Abdelrahman, A.M.: Adapting Deep learning-LSTM Method Using Optimized Dataset in SDN Controller for Secure IoT, pp. 1\u20139. Soft Computing (2023)","DOI":"10.1007\/s00500-023-08348-w"},{"issue":"5","key":"5648_CR85","doi-asserted-by":"publisher","first-page":"3081","DOI":"10.3390\/app13053081","volume":"13","author":"L Almuqren","year":"2023","unstructured":"Almuqren, L., Maashi, M.S., Alamgeer, M., Mohsen, H., Hamza, M.A., Abdelmageed, A.A.: Explainable artificial intelligence enabled intrusion detection technique for secure Cyber-Physical systems. Appl. Sci. 13(5), 3081 (2023)","journal-title":"Appl. Sci."}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05648-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-025-05648-8\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-025-05648-8.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,11,27]],"date-time":"2025-11-27T11:03:17Z","timestamp":1764241397000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-025-05648-8"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,9,29]]},"references-count":85,"journal-issue":{"issue":"14","published-print":{"date-parts":[[2025,11]]}},"alternative-id":["5648"],"URL":"https:\/\/doi.org\/10.1007\/s10586-025-05648-8","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,9,29]]},"assertion":[{"value":"12 December 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"20 June 2025","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 July 2025","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 September 2025","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no competing interests.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}}],"article-number":"913"}}