{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T02:20:17Z","timestamp":1783045217780,"version":"3.54.6"},"reference-count":23,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,6,1]],"date-time":"2026-06-01T00:00:00Z","timestamp":1780272000000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100004242","name":"Princess Nourah bint Abdulrahman University","doi-asserted-by":"publisher","award":["PNURSP2026R137"],"award-info":[{"award-number":["PNURSP2026R137"]}],"id":[{"id":"10.13039\/501100004242","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,6]]},"DOI":"10.1016\/j.comnet.2026.112320","type":"journal-article","created":{"date-parts":[[2026,4,21]],"date-time":"2026-04-21T16:10:43Z","timestamp":1776787843000},"page":"112320","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["XAI-CPS: An explainable hybrid deep learning framework for real-time anomaly detection and adaptive threat mitigation in networked Cyber\u2013Physical Systems"],"prefix":"10.1016","volume":"283","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-1408-8528","authenticated-orcid":false,"given":"Iftikhar","family":"Rasheed","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hala","family":"Mostafa","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ghulam","family":"Mohayudin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"issue":"5","key":"10.1016\/j.comnet.2026.112320_b1","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3453155","article-title":"Deep learning-based anomaly detection in cyber-physical systems: Progress and opportunities","volume":"54","author":"Luo","year":"2021","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.comnet.2026.112320_b2","doi-asserted-by":"crossref","DOI":"10.1109\/TPAMI.2024.3443141","article-title":"A survey on graph neural networks for time series: Forecasting, classification, imputation, and anomaly detection","author":"Jin","year":"2024","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.comnet.2026.112320_b3","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103825","article-title":"ADT: Time series anomaly detection for cyber-physical systems via deep reinforcement learning","volume":"141","author":"Yang","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112320_b4","series-title":"A survey of anomaly detection in cyber-physical systems","author":"Abshari","year":"2025"},{"issue":"10","key":"10.1016\/j.comnet.2026.112320_b5","doi-asserted-by":"crossref","first-page":"4170","DOI":"10.3390\/app14104170","article-title":"Xai-ids: Toward proposing an explainable artificial intelligence framework for enhancing network intrusion detection systems","volume":"14","author":"Arreche","year":"2024","journal-title":"Appl. Sci."},{"issue":"2","key":"10.1016\/j.comnet.2026.112320_b6","article-title":"Multivariate time series anomaly detection based on Spatial-Temporal network and transformer in industrial internet of things.","volume":"80","author":"Zhao","year":"2024","journal-title":"Comput. Mater. Contin."},{"key":"10.1016\/j.comnet.2026.112320_b7","article-title":"Explainable artificial intelligence models in intrusion detection systems","volume":"144","author":"Samed","year":"2025","journal-title":"Eng. Appl. Artif. Intell."},{"key":"10.1016\/j.comnet.2026.112320_b8","series-title":"2025 IEEE Symposium on Computational Intelligence on Engineering\/Cyber Physical Systems","first-page":"1","article-title":"Transformer-based multivariate time series anomaly localization","author":"Shimillas","year":"2025"},{"key":"10.1016\/j.comnet.2026.112320_b9","doi-asserted-by":"crossref","unstructured":"F. Terranova, A. Lahmadi, I. Chrisment, Leveraging deep reinforcement learning for cyber-attack paths prediction: Formulation, generalization, and evaluation, in: Proceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses, 2024, pp. 1\u201316.","DOI":"10.1145\/3678890.3678902"},{"key":"10.1016\/j.comnet.2026.112320_b10","doi-asserted-by":"crossref","unstructured":"S. Kim, K. Choi, H.-S. Choi, B. Lee, S. Yoon, Towards a rigorous evaluation of time-series anomaly detection, in: Proceedings of the AAAI Conference on Artificial Intelligence, Vol. 36, 2022, pp. 7194\u20137201.","DOI":"10.1609\/aaai.v36i7.20680"},{"key":"10.1016\/j.comnet.2026.112320_b11","doi-asserted-by":"crossref","unstructured":"A. Deng, B. Hooi, Graph neural network-based anomaly detection in multivariate time series, in: Proceedings of the AAAI Conference on Artificial Intelligence, Vol. 35, 2021, pp. 4027\u20134035.","DOI":"10.1609\/aaai.v35i5.16523"},{"key":"10.1016\/j.comnet.2026.112320_b12","series-title":"Tranad: Deep transformer networks for anomaly detection in multivariate time series data","author":"Tuli","year":"2022"},{"key":"10.1016\/j.comnet.2026.112320_b13","series-title":"Anomaly transformer: Time series anomaly detection with association discrepancy","author":"Xu","year":"2021"},{"key":"10.1016\/j.comnet.2026.112320_b14","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2024.111507","article-title":"Transformer-based multivariate time series anomaly detection using inter-variable attention mechanism","volume":"290","author":"Kang","year":"2024","journal-title":"Knowl.-Based Syst."},{"key":"10.1016\/j.comnet.2026.112320_b15","doi-asserted-by":"crossref","first-page":"57947","DOI":"10.52202\/075280-2525","article-title":"Memto: Memory-guided transformer for multivariate time series anomaly detection","volume":"36","author":"Song","year":"2023","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.comnet.2026.112320_b16","series-title":"A survey for deep reinforcement learning based network intrusion detection","author":"Yang","year":"2024"},{"issue":"3","key":"10.1016\/j.comnet.2026.112320_b17","doi-asserted-by":"crossref","first-page":"555","DOI":"10.3390\/electronics13030555","article-title":"Employing deep reinforcement learning to cyber-attack simulation for enhancing cybersecurity","volume":"13","author":"Oh","year":"2024","journal-title":"Electronics"},{"key":"10.1016\/j.comnet.2026.112320_b18","article-title":"Multi-agent reinforcement learning for cybersecurity: Classification and survey","author":"Finistrella","year":"2025","journal-title":"Intell. Syst. Appl."},{"key":"10.1016\/j.comnet.2026.112320_b19","series-title":"2016 International Workshop on Cyber-Physical Systems for Smart Water Networks (CySWater)","first-page":"31","article-title":"SWaT: A water treatment testbed for research and training on ICS security","author":"Mathur","year":"2016"},{"key":"10.1016\/j.comnet.2026.112320_b20","doi-asserted-by":"crossref","unstructured":"C.M. Ahmed, V.R. Palleti, A.P. Mathur, WADI: a water distribution testbed for research in the design of secure cyber physical systems, in: Proceedings of the 3rd International Workshop on Cyber-Physical Systems for Smart Water Networks, 2017, pp. 25\u201328.","DOI":"10.1145\/3055366.3055375"},{"issue":"8","key":"10.1016\/j.comnet.2026.112320_b21","doi-asserted-by":"crossref","DOI":"10.1061\/(ASCE)WR.1943-5452.0000969","article-title":"Battle of the attack detection algorithms: Disclosing cyber attacks on water distribution networks","volume":"144","author":"Taormina","year":"2018","journal-title":"J. Water Resour. Plan. Manag."},{"issue":"20","key":"10.1016\/j.comnet.2026.112320_b22","doi-asserted-by":"crossref","first-page":"4095","DOI":"10.3390\/electronics14204095","article-title":"DataSense: A real-time sensor-based benchmark dataset for attack analysis in IIoT with multi-objective feature selection","volume":"14","author":"Firouzi","year":"2025","journal-title":"Electronics"},{"issue":"1","key":"10.1016\/j.comnet.2026.112320_b23","doi-asserted-by":"crossref","first-page":"4400","DOI":"10.1038\/s41598-023-31193-8","article-title":"Anomaly detection using spatial and temporal information in multivariate time series","volume":"13","author":"Tian","year":"2023","journal-title":"Sci. Rep."}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626003324?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626003324?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T02:02:08Z","timestamp":1783044128000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128626003324"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,6]]},"references-count":23,"alternative-id":["S1389128626003324"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112320","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,6]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"XAI-CPS: An explainable hybrid deep learning framework for real-time anomaly detection and adaptive threat mitigation in networked Cyber\u2013Physical Systems","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112320","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"112320"}}