{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T02:18:22Z","timestamp":1783131502540,"version":"3.54.6"},"reference-count":43,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,11,1]],"date-time":"2026-11-01T00:00:00Z","timestamp":1793491200000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/100012542","name":"Sichuan Provincial Science and Technology Support Program","doi-asserted-by":"publisher","award":["2024NSFSC1472"],"award-info":[{"award-number":["2024NSFSC1472"]}],"id":[{"id":"10.13039\/100012542","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100012226","name":"Fundamental Research Funds for the Central Universities","doi-asserted-by":"publisher","award":["2682025ZTPY038"],"award-info":[{"award-number":["2682025ZTPY038"]}],"id":[{"id":"10.13039\/501100012226","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Ad Hoc Networks"],"published-print":{"date-parts":[[2026,11]]},"DOI":"10.1016\/j.adhoc.2026.104292","type":"journal-article","created":{"date-parts":[[2026,5,19]],"date-time":"2026-05-19T15:56:26Z","timestamp":1779206186000},"page":"104292","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["EM-GAT: An Edge-enhanced Multi-hop Graph Attention Network for Network Intrusion Detection"],"prefix":"10.1016","volume":"192","author":[{"given":"Yuanlin","family":"Li","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-2212-9768","authenticated-orcid":false,"given":"Li","family":"Feng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zonghai","family":"Zhu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Huanlai","family":"Xing","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.adhoc.2026.104292_b1","unstructured":"J. Piet, A. Sharma, V. Paxson, D. Wagner, Network Detection of Interactive {SSH} Impostors Using Deep Learning, in: 32nd USENIX Security Symposium (USENIX Security 23), 2023, pp. 4283\u20134300."},{"key":"10.1016\/j.adhoc.2026.104292_b2","doi-asserted-by":"crossref","first-page":"3387","DOI":"10.1109\/TIFS.2021.3080082","article-title":"An exploit kits detection approach based on HTTP message graph","volume":"16","author":"Qin","year":"2021","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"16","key":"10.1016\/j.adhoc.2026.104292_b3","doi-asserted-by":"crossref","first-page":"3724","DOI":"10.1002\/sec.1539","article-title":"A survey and taxonomy of DoS attacks in cloud computing","volume":"9","author":"Masdari","year":"2016","journal-title":"Secur. Commun. Netw."},{"issue":"9","key":"10.1016\/j.adhoc.2026.104292_b4","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3472753","article-title":"A survey on data-driven network intrusion detection","volume":"54","author":"Chou","year":"2021","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.adhoc.2026.104292_b5","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2024.101420","article-title":"Ensuring patient safety in iomt: A systematic literature review of behavior-based intrusion detection systems","volume":"28","author":"Domenech","year":"2024","journal-title":"Internet Things"},{"key":"10.1016\/j.adhoc.2026.104292_b6","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104367","article-title":"HC-NIDS: Historical contextual information based network intrusion detection system in internet of things","volume":"152","author":"Chen","year":"2025","journal-title":"Comput. Secur."},{"key":"10.1016\/j.adhoc.2026.104292_b7","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103821","article-title":"A survey on graph neural networks for intrusion detection systems: Methods, trends and challenges","volume":"141","author":"Zhong","year":"2024","journal-title":"Comput. Secur."},{"issue":"7","key":"10.1016\/j.adhoc.2026.104292_b8","doi-asserted-by":"crossref","first-page":"810","DOI":"10.1109\/TC.2002.1017701","article-title":"Multivariate statistical analysis of audit trails for host-based intrusion detection","volume":"51","author":"Ye","year":"2002","journal-title":"IEEE Trans. Comput."},{"issue":"1","key":"10.1016\/j.adhoc.2026.104292_b9","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1109\/TDSC.2007.9","article-title":"Hybrid intrusion detection with weighted signature generation over anomalous internet episodes","volume":"4","author":"Hwang","year":"2007","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"10.1016\/j.adhoc.2026.104292_b10","series-title":"International Conference on Big Data Technologies and Applications","first-page":"117","article-title":"Netflow datasets for machine learning-based network intrusion detection systems","author":"Sarhan","year":"2020"},{"key":"10.1016\/j.adhoc.2026.104292_b11","unstructured":"F. Yang, J. Xu, C. Xiong, Z. Li, K. Zhang, PROGRAPHER: An anomaly detection system based on provenance graph embedding, in: 32nd USENIX Security Symposium (USENIX Security 23), 2023, pp. 4355\u20134372."},{"issue":"10","key":"10.1016\/j.adhoc.2026.104292_b12","doi-asserted-by":"crossref","first-page":"8445","DOI":"10.1109\/JIOT.2023.3237661","article-title":"A secure intrusion detection platform using blockchain and radial basis function neural networks for internet of drones","volume":"10","author":"Heidari","year":"2023","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.adhoc.2026.104292_b13","series-title":"Graph attention networks","author":"Veli\u010dkovi\u0107","year":"2017"},{"key":"10.1016\/j.adhoc.2026.104292_b14","article-title":"Attention is all you need","volume":"30","author":"Vaswani","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"3","key":"10.1016\/j.adhoc.2026.104292_b15","article-title":"Robust network security: A deep learning approach to intrusion detection in IoT","volume":"81","author":"Odeh","year":"2024","journal-title":"Comput. Mater. Contin."},{"key":"10.1016\/j.adhoc.2026.104292_b16","article-title":"Network intrusion detection: An optimized deep learning approach using big data analytics","volume":"251","author":"Mary","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.adhoc.2026.104292_b17","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.123027","article-title":"Dugat-LSTM: Deep learning based network intrusion detection system using chaotic optimization strategy","volume":"245","author":"Devendiran","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.adhoc.2026.104292_b18","article-title":"Fedmse: Semi-supervised federated learning approach for IoT network intrusion detection","volume":"151","author":"Beuran","year":"2025","journal-title":"Comput. Secur."},{"key":"10.1016\/j.adhoc.2026.104292_b19","doi-asserted-by":"crossref","first-page":"287","DOI":"10.1613\/jair.1.14768","article-title":"A comprehensive survey on deep graph representation learning methods","volume":"78","author":"Chikwendu","year":"2023","journal-title":"J. Artificial Intelligence Res."},{"issue":"2","key":"10.1016\/j.adhoc.2026.104292_b20","article-title":"Optimizing network intrusion detection performance with GNN-based feature selection.","volume":"85","author":"Ko","year":"2025","journal-title":"Comput. Mater. Contin."},{"key":"10.1016\/j.adhoc.2026.104292_b21","first-page":"361","article-title":"Grids-a graph based intrusion detection system for large networks","volume":"vol. 1","author":"Staniford-Chen","year":"1996"},{"key":"10.1016\/j.adhoc.2026.104292_b22","series-title":"International Conference on Computational Science","first-page":"156","article-title":"Towards network anomaly detection using graph embedding","author":"Xiao","year":"2020"},{"key":"10.1016\/j.adhoc.2026.104292_b23","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2023.110966","article-title":"TS-IDS: Traffic-aware self-supervised learning for IoT network intrusion detection","volume":"279","author":"Nguyen","year":"2023","journal-title":"Knowl.-Based Syst."},{"key":"10.1016\/j.adhoc.2026.104292_b24","series-title":"E-graphsage: A graph neural network based intrusion detection system for iot","author":"Lo","year":"2021"},{"key":"10.1016\/j.adhoc.2026.104292_b25","article-title":"Inductive representation learning on large graphs","volume":"30","author":"Hamilton","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.adhoc.2026.104292_b26","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2024.110495","article-title":"Applying self-supervised learning to network intrusion detection for network flows with graph neural network","volume":"248","author":"Xu","year":"2024","journal-title":"Comput. Netw."},{"key":"10.1016\/j.adhoc.2026.104292_b27","doi-asserted-by":"crossref","DOI":"10.1016\/j.jpdc.2024.105010","article-title":"Enabling semi-supervised learning in intrusion detection systems","volume":"196","author":"Sarantos","year":"2025","journal-title":"J. Parallel Distrib. Comput."},{"issue":"1","key":"10.1016\/j.adhoc.2026.104292_b28","article-title":"Punet: A semi-supervised anomaly detection model for network anomaly detection based on positive unlabeled data.","volume":"81","author":"Long","year":"2024","journal-title":"Comput. Mater. Contin."},{"key":"10.1016\/j.adhoc.2026.104292_b29","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2023.103786","article-title":"Semi-supervised, neural network based approaches to face mask and anomaly detection in surveillance networks","volume":"222","author":"Saheel","year":"2024","journal-title":"J. Netw. Comput. Appl."},{"issue":"4","key":"10.1016\/j.adhoc.2026.104292_b30","doi-asserted-by":"crossref","first-page":"277","DOI":"10.1016\/j.dcan.2017.09.009","article-title":"Semi-supervised multi-layered clustering model for intrusion detection","volume":"4","author":"Al-Jarrah","year":"2018","journal-title":"Digit. Commun. Netw."},{"issue":"3","key":"10.1016\/j.adhoc.2026.104292_b31","doi-asserted-by":"crossref","first-page":"1472","DOI":"10.1109\/COMST.2020.2965856","article-title":"Thirty years of machine learning: The road to Pareto-optimal wireless networks","volume":"22","author":"Wang","year":"2020","journal-title":"IEEE Commun. Surv. & Tutorials"},{"issue":"11","key":"10.1016\/j.adhoc.2026.104292_b32","doi-asserted-by":"crossref","first-page":"11041","DOI":"10.1109\/JIOT.2020.2993410","article-title":"Semisupervised-learning-based security to detect and mitigate intrusions in IoT network","volume":"7","author":"Ravi","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.adhoc.2026.104292_b33","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2020.102631","article-title":"Enhancing collaborative intrusion detection via disagreement-based semi-supervised learning in IoT environments","volume":"161","author":"Li","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"issue":"15","key":"10.1016\/j.adhoc.2026.104292_b34","doi-asserted-by":"crossref","first-page":"12251","DOI":"10.1109\/JIOT.2021.3060878","article-title":"Semi-supervised spatiotemporal deep learning for intrusions detection in IoT networks","volume":"8","author":"Abdel-Basset","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.adhoc.2026.104292_b35","article-title":"Pytorch: An imperative style, high-performance deep learning library","volume":"32","author":"Paszke","year":"2019","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.adhoc.2026.104292_b36","unstructured":"M.Y. Wang, Deep graph library: Towards efficient and scalable deep learning on graphs, in: ICLR Workshop on Representation Learning on Graphs and Manifolds, 2019."},{"key":"10.1016\/j.adhoc.2026.104292_b37","article-title":"Pattern recognition and machine learning (information science and statistics)","author":"Biship","year":"2007","journal-title":"Springer N. Y."},{"issue":"1","key":"10.1016\/j.adhoc.2026.104292_b38","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1007\/s11036-021-01843-0","article-title":"Towards a standard feature set for network intrusion detection system datasets","volume":"27","author":"Sarhan","year":"2022","journal-title":"Mob. Networks Appl."},{"key":"10.1016\/j.adhoc.2026.104292_b39","doi-asserted-by":"crossref","DOI":"10.1016\/j.bdr.2022.100359","article-title":"Evaluating standard feature sets towards increased generalisability and explainability of ML-based network intrusion detection","volume":"30","author":"Sarhan","year":"2022","journal-title":"Big Data Res."},{"key":"10.1016\/j.adhoc.2026.104292_b40","series-title":"Evaluation: from precision, recall and F-measure to ROC, informedness, markedness and correlation","author":"Powers","year":"2020"},{"issue":"1","key":"10.1016\/j.adhoc.2026.104292_b41","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1023\/A:1010933404324","article-title":"Random forests","volume":"45","author":"Breiman","year":"2001","journal-title":"Mach. Learn."},{"key":"10.1016\/j.adhoc.2026.104292_b42","doi-asserted-by":"crossref","unstructured":"T. Chen, C. Guestrin, Xgboost: A scalable tree boosting system, in: Proceedings of the 22nd Acm Sigkdd International Conference on Knowledge Discovery and Data Mining, 2016, pp. 785\u2013794.","DOI":"10.1145\/2939672.2939785"},{"issue":"8","key":"10.1016\/j.adhoc.2026.104292_b43","doi-asserted-by":"crossref","first-page":"861","DOI":"10.1016\/j.patrec.2005.10.010","article-title":"An introduction to ROC analysis","volume":"27","author":"Fawcett","year":"2006","journal-title":"Pattern Recognit. Lett."}],"container-title":["Ad Hoc Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1570870526001587?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1570870526001587?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,4]],"date-time":"2026-07-04T01:32:16Z","timestamp":1783128736000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1570870526001587"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,11]]},"references-count":43,"alternative-id":["S1570870526001587"],"URL":"https:\/\/doi.org\/10.1016\/j.adhoc.2026.104292","relation":{},"ISSN":["1570-8705"],"issn-type":[{"value":"1570-8705","type":"print"}],"subject":[],"published":{"date-parts":[[2026,11]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"EM-GAT: An Edge-enhanced Multi-hop Graph Attention Network for Network Intrusion Detection","name":"articletitle","label":"Article Title"},{"value":"Ad Hoc Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.adhoc.2026.104292","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"104292"}}