{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T12:31:37Z","timestamp":1787574697411,"version":"build-2736575974"},"reference-count":25,"publisher":"Springer Science and Business Media LLC","issue":"9","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"funder":[{"name":"High Level Talent International Training Program of Henan Province","award":["GCC2025010"],"award-info":[{"award-number":["GCC2025010"]}]},{"name":"Key Scientific and Technological Project of Henan Province","award":["252102210245"],"award-info":[{"award-number":["252102210245"]}]},{"name":"Henan Provincial Center for Outstanding Overseas Scientists","award":["GZS2025004"],"award-info":[{"award-number":["GZS2025004"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Cluster Comput"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1007\/s10586-026-06350-z","type":"journal-article","created":{"date-parts":[[2026,7,23]],"date-time":"2026-07-23T11:54:43Z","timestamp":1784807683000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Anomal-EF: self-supervised learning and multi-head attention based anomalous node detection in IoT networks"],"prefix":"10.1007","volume":"29","author":[{"given":"Gaojuan","family":"Fan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Qingyi","family":"Huang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Junchao","family":"Ma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hafiz Muhammad Sanaullah","family":"Badar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Chongsheng","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ke","family":"Yuan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,23]]},"reference":[{"issue":"11","key":"6350_CR1","first-page":"1","volume":"20","author":"X-C Liao","year":"2025","unstructured":"Liao, X.-C., Chen, W.-N., Guo, X.-Q., Zhong, J., Wang, D.-J.: DRIFT: A Dynamic Crowd Inflow Control System Using LSTM-Based Deep Reinforcement Learning. IEEE Transactions on Systems, Man, and Cybernetics: Systems 20(11), 1\u201314 (2025)","journal-title":"IEEE Transactions on Systems, Man, and Cybernetics: Systems"},{"issue":"11","key":"6350_CR2","doi-asserted-by":"publisher","first-page":"12758","DOI":"10.1109\/TII.2024.3424347","volume":"20","author":"M Hu","year":"2024","unstructured":"Hu, M., Zhang, L., Liu, H.: Collaborative Deployment and Routing of Industrial Microservices in Smart Factories. IEEE Trans. Industr. Inf. 20(11), 12758\u201312770 (2024)","journal-title":"IEEE Trans. Industr. Inf."},{"issue":"10","key":"6350_CR3","doi-asserted-by":"publisher","first-page":"17589","DOI":"10.1109\/JIOT.2024.3360039","volume":"11","author":"Y Han","year":"2024","unstructured":"Han, Y., Wang, X., He, M., Wang, X., Guo, S.: Intrusion Detection for Encrypted Flows Using Single Feature Based on Graph Integration Theory. IEEE Internet of Things Journal 11(10), 17589\u201317601 (2024)","journal-title":"IEEE Internet of Things Journal"},{"key":"6350_CR4","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.103821","author":"M Zhong","year":"2024","unstructured":"Zhong, M., Lin, M., Zhang, C., Xu, Z.: A Survey on Graph Neural Networks for Intrusion Detection Systems: Methods, Trends and Challenges. Computers & Security (2024). https:\/\/doi.org\/10.1016\/j.cose.2024.103821","journal-title":"Computers & Security"},{"key":"6350_CR5","unstructured":"Wang, H., Li, T., Sun, Y.: A real-time anomaly detection framework for IoT systems using adaptive thresholding and data analytics. Journal of IoT Security Research, 34\u201348 (2024)"},{"key":"6350_CR6","unstructured":"Chen, X., Zhao, Q.: Machine learning-based anomaly detection techniques for IoT: Challenges and future directions. International Journal of Cyber-Physical Systems, 67\u201389 (2024)"},{"key":"6350_CR7","unstructured":"Hamilton, W.L., Ying, R., L.J.: Inductive representation learning on large graphs. In: Proceedings of the 31st International Conference on Neural Information Processing Systems, pp. 1025\u20131035. (2017)"},{"issue":"2","key":"6350_CR8","first-page":"2218","volume":"36","author":"X Wang","year":"2022","unstructured":"Wang, X., Lin, Z., Zhao, Y.: graph neural networks with dynamic attention mechanisms. Proceedings of the AAAI Conference on Artificial Intelligence 36(2), 2218\u20132225 (2022)","journal-title":"Proceedings of the AAAI Conference on Artificial Intelligence"},{"issue":"3","key":"6350_CR9","first-page":"45","volume":"17","author":"F Zhou","year":"2023","unstructured":"Zhou, F., Liu, H., Zhang, C.: Multi-head attention-based graph learning for complex node interactions. ACM Trans. Knowl. Discov. Data 17(3), 45\u201359 (2023)","journal-title":"ACM Trans. Knowl. Discov. Data"},{"key":"6350_CR10","doi-asserted-by":"crossref","unstructured":"Lo, W.W., Layeghy, S., Sarhan, M.: E-graphsage: A graph neural network based intrusion detection system for iot. In: IEEE\/IFIP Network Operations and Management Symposium, pp. 1\u20139. (2022)","DOI":"10.1109\/NOMS54207.2022.9789878"},{"key":"6350_CR11","doi-asserted-by":"crossref","unstructured":"Zhang, Y., Zhang, Y., Wu, Y., Li, C.: TPE-NIDS: uses graph neural networks to detect malicious traffic. In: 2022 4th International Conference on Frontiers Technology of Information and Computer (ICFTIC), pp. 949\u2013958 (2022)","DOI":"10.1109\/ICFTIC57696.2022.10075261"},{"key":"6350_CR12","doi-asserted-by":"publisher","first-page":"25487","DOI":"10.1007\/s11042-023-15635-z","volume":"83","author":"H Ko","year":"2023","unstructured":"Ko, H., Praca, I., Choi, S.G.: Anomaly detection analysis based on correlation of features in graph neural network. Multimedia Tools and Applications 83, 25487\u201325501 (2023)","journal-title":"Multimedia Tools and Applications"},{"key":"6350_CR13","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104132","volume":"148","author":"P Deng","year":"2025","unstructured":"Deng, P., Huang, Y.: Edge-featured multi-hop attention graph neural network for intrusion detection system. Comput. Secur. 148, 104132 (2025)","journal-title":"Comput. Secur."},{"key":"6350_CR14","doi-asserted-by":"publisher","first-page":"309","DOI":"10.1007\/s10586-025-05100-x","volume":"28","author":"R Li","year":"2025","unstructured":"Li, R., Shen, H., Zhang, Q.: An edge-enhanced graphSAGE-based intrusion detection model for the internet of things. Cluster Comput 28, 309 (2025)","journal-title":"Cluster Comput"},{"key":"6350_CR15","doi-asserted-by":"crossref","unstructured":"Chang, L., Branco, P.: Embedding residuals in graph-based solutions: the E-ResSAGE and E-ResGAT algorithms. Appl. Intell. 54, 6025\u20136040 (2024)","DOI":"10.1007\/s10489-024-05404-2"},{"key":"6350_CR16","unstructured":"Rieger, P., Mohamed, R., Miettinen, M., Fereidooni, H.: ARGUS: Context-Based Detection of Stealthy IoT Infiltration Attacks. In: USENIX Security Symposium, (USENIX Security 23), pp. 4301\u20134318. (2023)"},{"key":"6350_CR17","doi-asserted-by":"crossref","unstructured":"Caville, E., Lo, W.W., Layeghy, S., P.M.: Anomal-E: A self-supervised network intrusion detection system based on graph neural networks. Knowledge-Based Systems, p. 110030. (2022)","DOI":"10.1016\/j.knosys.2022.110030"},{"key":"6350_CR18","unstructured":"Veli?kovi? P, Fedus, W., Hamilton, W.L.: Deep graph infomax. International Conference on Learning Representations (ICLR), (2018). arxiv: 1809.10341 arxiv preprint"},{"key":"6350_CR19","doi-asserted-by":"publisher","DOI":"10.1016\/j.knosys.2023.110966","author":"H Nguyen","year":"2023","unstructured":"Nguyen, H., Kashef, R.: TS-IDS: Traffic-aware self-supervised learning for IoT Network Intrusion Detection. Knowledge-Based Systems (2023). https:\/\/doi.org\/10.1016\/j.knosys.2023.110966","journal-title":"Knowledge-Based Systems"},{"key":"6350_CR20","volume-title":"Pavlo Mozharovskyi","author":"L Guerra","year":"2025","unstructured":"Guerra, L., Chapuis, T., Duc, G.: Pavlo Mozharovskyi. Self-Supervised Learning of Graph Representations for Network Intrusion Detection. ArXiv, Van-Tam Nguyen (2025)"},{"issue":"16","key":"6350_CR21","doi-asserted-by":"publisher","first-page":"33520","DOI":"10.1109\/JIOT.2025.3576710","volume":"12","author":"N Sun","year":"2025","unstructured":"Sun, N., Chen, L., Han, G.: HADGA: Hierarchical Attention-Based Dynamic GNN Algorithm for IoT Botnet Detection. IEEE Internet of Things Journal 12(16), 33520\u201333532 (2025)","journal-title":"IEEE Internet of Things Journal"},{"key":"6350_CR22","unstructured":"Veli?kovi? P., Cucurull G., Casanova A.,: Graph attention networks. arXiv preprint arXiv: 1710.10903 (2017)"},{"key":"6350_CR23","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103526","volume":"136","author":"R Reka","year":"2024","unstructured":"Reka, R., Karthick, R., Ram, R.S.: Multi head self-attention gated graph convolutional network based multi?attack intrusion detection in MANET. Computers & Security 136, 103526 (2024)","journal-title":"Computers & Security"},{"key":"6350_CR24","doi-asserted-by":"publisher","DOI":"10.1016\/j.media.2022.102518","volume":"80","author":"J Yan","year":"2022","unstructured":"Yan, J., Chen, Y.: Modeling spatio-temporal patterns of holistic functional brain networks via multi-head guided attention graph neural networks (Multi-Head GAGNNs). Med. Image Anal. 80, 102518 (2022)","journal-title":"Med. Image Anal."},{"key":"6350_CR25","doi-asserted-by":"publisher","DOI":"10.1007\/s11036-021-01843-0","author":"M Sarhan","year":"2021","unstructured":"Sarhan, M., Layeghy, S., Portmann, M.: Towards a Standard Feature Set for Network Intrusion Detection System Datasets. Mobile Networks and Applications (2021). https:\/\/doi.org\/10.1007\/s11036-021-01843-0","journal-title":"Mobile Networks and Applications"}],"container-title":["Cluster Computing"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-026-06350-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10586-026-06350-z","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10586-026-06350-z.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,24]],"date-time":"2026-08-24T12:13:49Z","timestamp":1787573629000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10586-026-06350-z"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":25,"journal-issue":{"issue":"9","published-print":{"date-parts":[[2026,7]]}},"alternative-id":["6350"],"URL":"https:\/\/doi.org\/10.1007\/s10586-026-06350-z","relation":{},"ISSN":["1386-7857","1573-7543"],"issn-type":[{"value":"1386-7857","type":"print"},{"value":"1573-7543","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"6 June 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"29 March 2026","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"2 July 2026","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"23 July 2026","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare no competing interests.","order":1,"name":"Ethics","label":"Competing interests","group":{"name":"EthicsHeading","label":"Declarations"}}],"article-number":"544"}}