{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,6]],"date-time":"2026-07-06T12:19:03Z","timestamp":1783340343509,"version":"3.54.6"},"reference-count":35,"publisher":"Springer Science and Business Media LLC","issue":"3","license":[{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T00:00:00Z","timestamp":1773705600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Netw Syst Manage"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1007\/s10922-026-10053-6","type":"journal-article","created":{"date-parts":[[2026,3,17]],"date-time":"2026-03-17T16:32:04Z","timestamp":1773765124000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Deep Learning for IoT Security: Leveraging GNNs and Attention Networks"],"prefix":"10.1007","volume":"34","author":[{"given":"Khalid","family":"El Azhar","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ghizlane","family":"Hnini","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Khalid","family":"El Fazazy","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Mohamed Adnane","family":"Mahraz","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hamid","family":"Tairi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Jamal","family":"Riffi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,3,17]]},"reference":[{"key":"10053_CR1","doi-asserted-by":"publisher","DOI":"10.1007\/s10115-025-02531-1","author":"M Koca","year":"2025","unstructured":"Koca, M.: A comprehensive bibliometric analysis of big data and cyber security: intellectual structure, trends, and global collaborations. Knowl. Inf. Syst. (2025). https:\/\/doi.org\/10.1007\/s10115-025-02531-1","journal-title":"Knowl. Inf. Syst."},{"key":"10053_CR2","doi-asserted-by":"publisher","DOI":"10.1007\/s11227-024-06471-5","author":"L Lin","year":"2024","unstructured":"Lin, L., Zhong, Q., Qiu, J., Liang, Z.: E-gracl: an iot intrusion detection system based on graph neural networks. J. Supercomput. (2024). https:\/\/doi.org\/10.1007\/s11227-024-06471-5","journal-title":"J. Supercomput."},{"key":"10053_CR3","doi-asserted-by":"publisher","first-page":"44","DOI":"10.3390\/computers9020044","volume":"9","author":"MA Obaidat","year":"2020","unstructured":"Obaidat, M.A., Obeidat, S., Holst, J., Hayajneh, A.A., Brown, J.: A comprehensive and systematic survey on the internet of things: security and privacy challenges, security frameworks, enabling technologies, threats, vulnerabilities and countermeasures. Computers 9, 44 (2020). https:\/\/doi.org\/10.3390\/computers9020044","journal-title":"Computers"},{"key":"10053_CR4","doi-asserted-by":"publisher","first-page":"49","DOI":"10.18034\/ra.v5i3.650","volume":"5","author":"M Mandapuram","year":"2017","unstructured":"Mandapuram, M.: Security risk analysis of the internet of things. ABC Res. Alert 5, 49\u201355 (2017). https:\/\/doi.org\/10.18034\/ra.v5i3.650","journal-title":"ABC Res. Alert"},{"key":"10053_CR5","doi-asserted-by":"publisher","unstructured":"Erlacher, F., Dressler, F.: Fixids: A high-speed signature-based flow intrusion detection system. In: NOMS 2018\u20132018 IEEE\/IFIP Network Operations and Management Symposium, pp. 1\u20138. IEEE, (2018). https:\/\/doi.org\/10.1109\/NOMS.2018.8406247","DOI":"10.1109\/NOMS.2018.8406247"},{"key":"10053_CR6","doi-asserted-by":"publisher","first-page":"189","DOI":"10.1016\/j.cose.2014.02.006","volume":"43","author":"W Meng","year":"2014","unstructured":"Meng, W., Li, W., Kwok, L.-F.: Efm: Enhancing the performance of signature-based network intrusion detection systems using enhanced filter mechanism. Comput. Secur. 43, 189\u2013204 (2014). https:\/\/doi.org\/10.1016\/j.cose.2014.02.006","journal-title":"Comput. Secur."},{"key":"10053_CR7","doi-asserted-by":"publisher","first-page":"147","DOI":"10.1016\/j.cose.2019.06.005","volume":"86","author":"M Ring","year":"2019","unstructured":"Ring, M., Wunderlich, S., Scheuring, D., Landes, D., Hotho, A.: A survey of network-based intrusion detection data sets. Comput. Secur. 86, 147\u2013167 (2019). https:\/\/doi.org\/10.1016\/j.cose.2019.06.005","journal-title":"Comput. Secur."},{"key":"10053_CR8","doi-asserted-by":"publisher","first-page":"4","DOI":"10.1109\/TNNLS.2020.2978386","volume":"32","author":"Z Wu","year":"2021","unstructured":"Wu, Z., Pan, S., Chen, F., Long, G., Zhang, C., Yu, P.S.: A comprehensive survey on graph neural networks. IEEE Trans. Neural Netw. Learn. Syst. 32, 4\u201324 (2021). https:\/\/doi.org\/10.1109\/TNNLS.2020.2978386","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"key":"10053_CR9","doi-asserted-by":"publisher","first-page":"727","DOI":"10.3390\/s19030727","volume":"19","author":"JM Ceron","year":"2019","unstructured":"Ceron, J.M., Steding-Jessen, K., Hoepers, C., Granville, L.Z., Margi, C.B.: Improving iot botnet investigation using an adaptive network layer. Sensors 19, 727 (2019). https:\/\/doi.org\/10.3390\/s19030727","journal-title":"Sensors"},{"key":"10053_CR10","doi-asserted-by":"publisher","unstructured":"Kambourakis, G., Kolias, C., Stavrou, A.: The mirai botnet and the iot zombie armies. In: MILCOM 2017\u20132017 IEEE Military Communications Conference (MILCOM), pp. 267\u2013272. IEEE, (2017). https:\/\/doi.org\/10.1109\/MILCOM.2017.8170867","DOI":"10.1109\/MILCOM.2017.8170867"},{"key":"10053_CR11","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2024.3466391","author":"M Koca","year":"2024","unstructured":"Koca, M., et al.: An advanced deep learning approach for intrusion detection in iot networks. IEEE Access (2024). https:\/\/doi.org\/10.1109\/ACCESS.2024.3466391","journal-title":"IEEE Access"},{"key":"10053_CR12","doi-asserted-by":"publisher","unstructured":"Cozzi, E., Vervier, P.-A., Dell\u2019Amico, M., Shen, Y., Bilge, L., Balzarotti, D.: The tangled genealogy of iot malware. In: Annual Computer Security Applications Conference, pp. 1\u201316. ACM, (2020). https:\/\/doi.org\/10.1145\/3427228.3427256","DOI":"10.1145\/3427228.3427256"},{"key":"10053_CR13","doi-asserted-by":"publisher","first-page":"161","DOI":"10.1109\/LNET.2021.3076600","volume":"3","author":"S Torabi","year":"2021","unstructured":"Torabi, S., Dib, M., Bou-Harb, E., Assi, C., Debbabi, M.: A strings-based similarity analysis approach for characterizing iot malware and inferring their underlying relationships. IEEE Netw. Lett. 3, 161\u2013165 (2021). https:\/\/doi.org\/10.1109\/LNET.2021.3076600","journal-title":"IEEE Netw. Lett."},{"key":"10053_CR14","doi-asserted-by":"publisher","unstructured":"Su, J., Vasconcellos, V.D., Prasad, S., Daniele, S., Feng, Y., Sakurai, K.: Lightweight classification of iot malware based on image recognition. In: 2018 IEEE 42nd Annual Computer Software and Applications Conference (COMPSAC), pp. 664\u2013669. IEEE, (2018). https:\/\/doi.org\/10.1109\/COMPSAC.2018.10315","DOI":"10.1109\/COMPSAC.2018.10315"},{"key":"10053_CR15","doi-asserted-by":"publisher","unstructured":"Lo, W.W., Layeghy, S., Sarhan, M., Gallagher, M., Portmann, M.: E-graphsage: A graph neural network based intrusion detection system for iot (2021) https:\/\/doi.org\/10.1109\/NOMS54207.2022.9789878","DOI":"10.1109\/NOMS54207.2022.9789878"},{"key":"10053_CR16","doi-asserted-by":"publisher","unstructured":"Sarhan, M., Layeghy, S., Portmann, M.: Towards a standard feature set for network intrusion detection system datasets (2021). https:\/\/doi.org\/10.1007\/s11036-021-01843-0","DOI":"10.1007\/s11036-021-01843-0"},{"key":"10053_CR17","doi-asserted-by":"publisher","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","volume":"100","author":"N Koroniotis","year":"2019","unstructured":"Koroniotis, N., Moustafa, N., Sitnikova, E., Turnbull, B.: Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-iot dataset. Future Gener. Comput. Syst. 100, 779\u2013796 (2019). https:\/\/doi.org\/10.1016\/j.future.2019.05.041","journal-title":"Future Gener. Comput. Syst."},{"key":"10053_CR18","unstructured":"Atuhurra, J., Hara, T., Zhang, Y., Sasabe, M., Kasahara, S.: Dealing with imbalanced classes in bot-iot dataset (2024)"},{"key":"10053_CR19","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2023.100818","volume":"22","author":"T Altaf","year":"2023","unstructured":"Altaf, T., Wang, X., Ni, W., Yu, G., Liu, R.P., Braun, R.: A new concatenated multigraph neural network for iot intrusion detection. Internet Things 22, 100818 (2023). https:\/\/doi.org\/10.1016\/j.iot.2023.100818","journal-title":"Internet Things"},{"key":"10053_CR20","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1155\/2022\/7892130","volume":"2022","author":"R Malik","year":"2022","unstructured":"Malik, R., Singh, Y., Sheikh, Z.A., Anand, P., Singh, P.K., Workneh, T.C.: An improved deep belief network ids on iot-based network for traffic systems. J. Adv. Transp. 2022, 1\u201317 (2022). https:\/\/doi.org\/10.1155\/2022\/7892130","journal-title":"J. Adv. Transp."},{"key":"10053_CR21","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1155\/2022\/6473507","volume":"2022","author":"A Dahou","year":"2022","unstructured":"Dahou, A., Elaziz, M.A., Chelloug, S.A., Awadallah, M.A., Al-Betar, M.A., Al-qaness, M.A.A., Forestiero, A.: Intrusion detection system for iot based on deep learning and modified reptile search algorithm. Comput. Intell. Neurosci. 2022, 1\u201315 (2022). https:\/\/doi.org\/10.1155\/2022\/6473507","journal-title":"Comput. Intell. Neurosci."},{"key":"10053_CR22","unstructured":"Zhou, J., Cui, G., Hu, S., Zhang, Z., Yang, C., Liu, Z., Wang, L., Li, C., Sun, M.: Graph neural networks: a review of methods and applications (2018)"},{"key":"10053_CR23","doi-asserted-by":"publisher","unstructured":"Pradhyumna, P., Shreya, G.P., Mohana: Graph neural network (gnn) in image and video understanding using deep learning for computer vision applications. In: 2021 Second International Conference on Electronics and Sustainable Communication Systems (ICESC), pp. 1183\u20131189. IEEE, (2021). https:\/\/doi.org\/10.1109\/ICESC51422.2021.9532631","DOI":"10.1109\/ICESC51422.2021.9532631"},{"key":"10053_CR24","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3597428","volume":"56","author":"J Vatter","year":"2024","unstructured":"Vatter, J., Mayer, R., Jacobsen, H.-A.: The evolution of distributed systems for graph neural networks and their origin in graph processing and deep learning: A survey. ACM Comput. Surv. 56, 1\u201337 (2024). https:\/\/doi.org\/10.1145\/3597428","journal-title":"ACM Comput. Surv."},{"key":"10053_CR25","doi-asserted-by":"publisher","unstructured":"Auten, A., Tomei, M., Kumar, R.: Hardware acceleration of graph neural networks. In: 2020 57th ACM\/IEEE Design Automation Conference (DAC), pp. 1\u20136. IEEE, (2020). https:\/\/doi.org\/10.1109\/DAC18072.2020.9218751","DOI":"10.1109\/DAC18072.2020.9218751"},{"key":"10053_CR26","doi-asserted-by":"publisher","unstructured":"Arka, A.I., Doppa, J.R., Pande, P.P., Joardar, B.K., Chakrabarty, K.: Regraphx: Noc-enabled 3d heterogeneous reram architecture for training graph neural networks. In: 2021 Design, Automation & Test in Europe Conference & Exhibition (DATE), pp. 1667\u20131672. IEEE, (2021). https:\/\/doi.org\/10.23919\/DATE51398.2021.9473949","DOI":"10.23919\/DATE51398.2021.9473949"},{"key":"10053_CR27","unstructured":"Hamilton, W.L., Ying, R., Leskovec, J.: Inductive representation learning on large graphs (2017)"},{"key":"10053_CR28","doi-asserted-by":"publisher","unstructured":"Zhang, C., Song, D., Huang, C., Swami, A., Chawla, N.V.: Heterogeneous graph neural network. In: Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining, pp. 793\u2013803. ACM, (2019). https:\/\/doi.org\/10.1145\/3292500.3330961","DOI":"10.1145\/3292500.3330961"},{"key":"10053_CR29","doi-asserted-by":"publisher","unstructured":"Chang, H., Rong, Y., Xu, T., Huang, W., Sojoudi, S., Huang, J., Zhu, W.: Spectral graph attention network with fast eigen-approximation. In: Proceedings of the 30th ACM International Conference on Information & Knowledge Management, pp. 2905\u20132909. ACM, (2021). https:\/\/doi.org\/10.1145\/3459637.3482187","DOI":"10.1145\/3459637.3482187"},{"key":"10053_CR30","doi-asserted-by":"publisher","first-page":"4211","DOI":"10.1109\/TCSII.2023.3280180","volume":"70","author":"Z He","year":"2023","unstructured":"He, Z., Tian, T., Wu, Q., Jin, X.: Ftw-gat: An fpga-based accelerator for graph attention networks with ternary weights. IEEE Trans. Circ. Syst. 70, 4211\u20134215 (2023). https:\/\/doi.org\/10.1109\/TCSII.2023.3280180","journal-title":"IEEE Trans. Circ. Syst."},{"key":"10053_CR31","doi-asserted-by":"publisher","unstructured":"Huang, J., Shen, H., Hou, L., Cheng, X.: Signed graph attention networks, pp. 566\u2013577 (2019). https:\/\/doi.org\/10.1007\/978-3-030-30493-553","DOI":"10.1007\/978-3-030-30493-553"},{"key":"10053_CR32","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2021.3105544","author":"J Gao","year":"2021","unstructured":"Gao, J., Gao, J., Ying, X., Lu, M., Wang, J.: Higher-order interaction goes neural: a substructure assembling graph attention network for graph classification. IEEE Trans. Knowl. Data Eng. (2021). https:\/\/doi.org\/10.1109\/TKDE.2021.3105544","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"10053_CR33","doi-asserted-by":"publisher","DOI":"10.1016\/j.sysarc.2022.102505","volume":"126","author":"Y Peng","year":"2022","unstructured":"Peng, Y., Tan, G., Si, H., Li, J.: Drl-gat-sa: Deep reinforcement learning for autonomous driving planning based on graph attention networks and simplex architecture. J. Syst. Architect. 126, 102505 (2022). https:\/\/doi.org\/10.1016\/j.sysarc.2022.102505","journal-title":"J. Syst. Architect."},{"key":"10053_CR34","doi-asserted-by":"publisher","first-page":"165907","DOI":"10.1109\/ACCESS.2021.3132127","volume":"9","author":"I Ullah","year":"2021","unstructured":"Ullah, I., Mahmoud, Q.H.: A framework for anomaly detection in iot networks using conditional generative adversarial networks. IEEE Access 9, 165907\u2013165931 (2021). https:\/\/doi.org\/10.1109\/ACCESS.2021.3132127","journal-title":"IEEE Access"},{"key":"10053_CR35","doi-asserted-by":"publisher","unstructured":"Shaker, B.N., Al-Musawi, B.Q., Hassan, M.F.: A comparative study of ids-based deep learning models for iot network. In: Proceedings of the 2023 international conference on advances in artificial intelligence and applications, pp. 15\u201321. ACM, (2023). https:\/\/doi.org\/10.1145\/3603273.3635058","DOI":"10.1145\/3603273.3635058"}],"container-title":["Journal of Network and Systems Management"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-026-10053-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s10922-026-10053-6","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s10922-026-10053-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,6]],"date-time":"2026-07-06T11:39:35Z","timestamp":1783337975000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s10922-026-10053-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,3,17]]},"references-count":35,"journal-issue":{"issue":"3","published-print":{"date-parts":[[2026,7]]}},"alternative-id":["10053"],"URL":"https:\/\/doi.org\/10.1007\/s10922-026-10053-6","relation":{"has-preprint":[{"id-type":"doi","id":"10.21203\/rs.3.rs-7020099\/v1","asserted-by":"object"}]},"ISSN":["1064-7570","1573-7705"],"issn-type":[{"value":"1064-7570","type":"print"},{"value":"1573-7705","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,3,17]]},"assertion":[{"value":"1 July 2025","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"13 January 2026","order":2,"name":"revised","label":"Revised","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"26 February 2026","order":3,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"17 March 2026","order":4,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors declare no conflict of interest.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"68"}}