{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T12:07:36Z","timestamp":1779365256030,"version":"3.53.0"},"reference-count":46,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T00:00:00Z","timestamp":1778025600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100003030","name":"Government of Catalonia Agency for Administration of University and Research Grants","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100003030","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100013410","name":"Cybersecurity National Institute","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100013410","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.comnet.2026.112359","type":"journal-article","created":{"date-parts":[[2026,5,6]],"date-time":"2026-05-06T16:28:09Z","timestamp":1778084889000},"page":"112359","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Robust AI-based intrusion detection for IoMT: A data-efficient approach via optimized feature selection and hybrid data balancing"],"prefix":"10.1016","volume":"284","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2977-7265","authenticated-orcid":false,"given":"Jordi","family":"Dom\u00e9nech","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7288-4659","authenticated-orcid":false,"given":"Saber","family":"Mhiri","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2869-051X","authenticated-orcid":false,"given":"Olga","family":"Le\u00f3n","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8257-4969","authenticated-orcid":false,"given":"Muhammad Shuaib","family":"Siddiqui","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5194-4883","authenticated-orcid":false,"given":"Josep","family":"Pegueroles","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.comnet.2026.112359_b1","doi-asserted-by":"crossref","first-page":"41796","DOI":"10.1109\/ACCESS.2023.3270225","article-title":"Attack detection for medical cyber-physical systems-a systematic literature review","volume":"11","author":"Weber","year":"2023","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112359_b2","doi-asserted-by":"crossref","DOI":"10.1016\/j.rineng.2024.103787","article-title":"Transformative impacts of the internet of medical things on modern healthcare","volume":"25","author":"Ahmed","year":"2025","journal-title":"Results Eng."},{"key":"10.1016\/j.comnet.2026.112359_b3","series-title":"Artificial intelligence for IoMT security: A review of intrusion detection systems, attacks, datasets and cloud\u2013fog\u2013edge architectures","author":"Hernandez-Jaimes","year":"2023"},{"key":"10.1016\/j.comnet.2026.112359_b4","series-title":"ENISA Threat Landscape: Health Sector (January 2021 to March 2023)","author":"European Union Agency for Cybersecurity","year":"2023"},{"key":"10.1016\/j.comnet.2026.112359_b5","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2024.101420","article-title":"Ensuring patient safety in IoMT: A systematic literature review of behavior-based intrusion detection systems","volume":"28","author":"Dom\u00e9nech","year":"2024","journal-title":"Internet Things"},{"issue":"4","key":"10.1016\/j.comnet.2026.112359_b6","doi-asserted-by":"crossref","first-page":"114","DOI":"10.1007\/s10462-024-11101-w","article-title":"A comprehensive and systematic literature review on intrusion detection systems in the internet of medical things: current status, challenges, and opportunities","volume":"58","author":"Naghib","year":"2025","journal-title":"Artif. Intell. Rev."},{"key":"10.1016\/j.comnet.2026.112359_b7","doi-asserted-by":"crossref","DOI":"10.1016\/j.ijcip.2021.100430","article-title":"ARTINALI#: An Efficient Intrusion Detection Technique for Resource-Constrained Cyber-Physical Systems","volume":"33","author":"Raiyat Aliabadi","year":"2021","journal-title":"Int. J. Crit. Infrastruct. Prot."},{"key":"10.1016\/j.comnet.2026.112359_b8","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104288","article-title":"Automated detection of cyber attacks in healthcare systems: A novel scheme with advanced feature extraction and classification","volume":"150","author":"Nasayreh","year":"2025","journal-title":"Comput. Secur."},{"issue":"3","key":"10.1016\/j.comnet.2026.112359_b9","doi-asserted-by":"crossref","DOI":"10.3390\/s25030624","article-title":"Stacking ensemble deep learning for real-time intrusion detection in IoMT environments","volume":"25","author":"Alalwany","year":"2025","journal-title":"Sensors"},{"key":"10.1016\/j.comnet.2026.112359_b10","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2025.101631","article-title":"Evaluating and enhancing intrusion detection systems in IoMT: The importance of domain-specific datasets","volume":"32","author":"Dom\u00e9nech","year":"2025","journal-title":"Internet Things"},{"issue":"15","key":"10.1016\/j.comnet.2026.112359_b11","doi-asserted-by":"crossref","first-page":"25454","DOI":"10.1109\/JIOT.2023.3327024","article-title":"An intelligent and explainable saas-based intrusion detection system for resource-constrained iomt","volume":"11","author":"Aljuhani","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.comnet.2026.112359_b12","series-title":"Advances in Computing Systems and Applications","first-page":"323","article-title":"Enhanced intrusion detection system for remote healthcare","author":"Ayoub","year":"2022"},{"issue":"13","key":"10.1016\/j.comnet.2026.112359_b13","doi-asserted-by":"crossref","DOI":"10.3390\/s24134293","article-title":"Optimizing IoT intrusion detection using balanced class distribution, feature selection, and ensemble machine learning techniques","volume":"24","author":"Musthafa","year":"2024","journal-title":"Sensors"},{"key":"10.1016\/j.comnet.2026.112359_b14","series-title":"2025 IEEE 4th International Conference on AI in Cybersecurity","first-page":"1","article-title":"Future-proofed intrusion detection for internet of things with machine learning","author":"Adeyemi","year":"2025"},{"key":"10.1016\/j.comnet.2026.112359_b15","doi-asserted-by":"crossref","first-page":"161546","DOI":"10.1109\/ACCESS.2021.3128837","article-title":"Efficient cyber attack detection on the internet of medical things-smart environment based on deep recurrent neural network and machine learning algorithms","volume":"9","author":"Saheed","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112359_b16","article-title":"SmartEdge: A scalable and adaptive framework for cyber resilience in iomt","author":"Misbah","year":"2024","journal-title":"Authorea Prepr."},{"key":"10.1016\/j.comnet.2026.112359_b17","series-title":"2024 19th Iranian Conference on Intelligent Systems","first-page":"168","article-title":"Securing healthcare with deep learning: A CNN-based model for medical IoT threat detection","author":"Mohammadi","year":"2024"},{"key":"10.1016\/j.comnet.2026.112359_b18","series-title":"2024 4th International Conference on Mobile Networks and Wireless Communications","first-page":"1","article-title":"Optimized hybrid approach for anomaly detection of DDoS and network attacks in IoMT systems using autoencoders and TabNet","author":"Kirubavathi","year":"2024"},{"key":"10.1016\/j.comnet.2026.112359_b19","article-title":"A deep reinforcement learning-based robust intrusion detection system for securing IoMT healthcare networks","volume":"Volume 12 - 2025","author":"Shaikh","year":"2025","journal-title":"Front. Med."},{"key":"10.1016\/j.comnet.2026.112359_b20","series-title":"2025 13th International Symposium on Digital Forensics and Security","first-page":"1","article-title":"Advancing IoMT security with privacy-preserving federated learning techniques","author":"Kouekam","year":"2025"},{"key":"10.1016\/j.comnet.2026.112359_b21","series-title":"2025 9th International Symposium on Innovative Approaches in Smart Technologies","first-page":"1","article-title":"Walrus optimization-enhanced machine learning intrusion detection for the internet of medical things","author":"G\u00fcl","year":"2025"},{"key":"10.1016\/j.comnet.2026.112359_b22","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1016\/j.comcom.2020.05.048","article-title":"An effective feature engineering for DNN using hybrid PCA-GWO for intrusion detection in IoMT architecture","volume":"160","author":"R.M.","year":"2020","journal-title":"Comput. Commun."},{"issue":"11","key":"10.1016\/j.comnet.2026.112359_b23","doi-asserted-by":"crossref","DOI":"10.3390\/fi17110529","article-title":"Top-K feature selection for IoT intrusion detection: Contributions of XGBoost, LightGBM, and random forest","volume":"17","author":"Kouassi","year":"2025","journal-title":"Futur. Internet"},{"key":"10.1016\/j.comnet.2026.112359_b24","series-title":"2024 International Conference on Expert Clouds and Applications","first-page":"449","article-title":"Intrusion detection system for internet of thing environment using feature engineering and balanced random forest algorithm","author":"Gautam","year":"2024"},{"issue":"2","key":"10.1016\/j.comnet.2026.112359_b25","doi-asserted-by":"crossref","DOI":"10.3390\/app16020980","article-title":"An XGBoost-based intrusion detection framework with interpretability analysis for IoT networks","volume":"16","author":"Hu","year":"2026","journal-title":"Appl. Sci."},{"issue":"1","key":"10.1016\/j.comnet.2026.112359_b26","doi-asserted-by":"crossref","first-page":"512","DOI":"10.1007\/s13198-023-01883-7","article-title":"Feature engineering based performance analysis of ML and DL algorithms for botnet attack detection in IoMT","volume":"14","author":"Saif","year":"2023","journal-title":"Int. J. Syst. Assur. Eng. Manag."},{"issue":"20","key":"10.1016\/j.comnet.2026.112359_b27","doi-asserted-by":"crossref","DOI":"10.3390\/app132011145","article-title":"A hybrid genetic algorithm-based random forest model for intrusion detection approach in internet of medical things","volume":"13","author":"Norouzi","year":"2023","journal-title":"Appl. Sci."},{"key":"10.1016\/j.comnet.2026.112359_b28","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2024.101351","article-title":"CICIoMT2024: A benchmark dataset for multi-protocol security assessment in IoMT","volume":"28","author":"Dadkhah","year":"2024","journal-title":"Internet Things"},{"key":"10.1016\/j.comnet.2026.112359_b29","series-title":"2019 IEEE Fifth International Conference on Big Data Computing Service and Applications (BigDataService)","first-page":"346","article-title":"Investigating random undersampling and feature selection on bioinformatics big data","author":"Hasanin","year":"2019"},{"issue":"1","key":"10.1016\/j.comnet.2026.112359_b30","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1186\/1471-2105-10-213","article-title":"A comparison of random forest and its gini importance with standard chemometric methods for the feature selection and classification of spectral data","volume":"10","author":"Menze","year":"2009","journal-title":"BMC Bioinformatics"},{"key":"10.1016\/j.comnet.2026.112359_b31","doi-asserted-by":"crossref","DOI":"10.1016\/j.micpro.2023.104823","article-title":"An intelligent ddos attack detection tree-based model using gini index feature selection method","volume":"98","author":"Bouke","year":"2023","journal-title":"Microprocess. Microsyst."},{"key":"10.1016\/j.comnet.2026.112359_b32","article-title":"Feature selection based on neighborhood rough sets and gini index","volume":"9","author":"Zhang","year":"2023","journal-title":"\u201dPeerJ Comput. Sci.\u201d"},{"key":"10.1016\/j.comnet.2026.112359_b33","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1613\/jair.953","article-title":"SMOTE: synthetic minority over-sampling technique","volume":"16","author":"Chawla","year":"2002","journal-title":"J. Artificial Intelligence Res."},{"key":"10.1016\/j.comnet.2026.112359_b34","series-title":"2018 IEEE International Conference on Information Reuse and Integration","first-page":"70","article-title":"The effects of random undersampling with simulated class imbalance for big data","author":"Hasanin","year":"2018"},{"issue":"11","key":"10.1016\/j.comnet.2026.112359_b35","doi-asserted-by":"crossref","DOI":"10.3390\/math12111709","article-title":"Imbalanced data classification based on improved random-SMOTE and feature standard deviation","volume":"12","author":"Zhang","year":"2024","journal-title":"Mathematics"},{"key":"10.1016\/j.comnet.2026.112359_b36","doi-asserted-by":"crossref","DOI":"10.1016\/j.neucom.2024.128372","article-title":"LSMOTE: A link-based synthetic minority oversampling technique for binary imbalanced datasets","volume":"608","author":"Cai","year":"2024","journal-title":"Neurocomputing"},{"issue":"5","key":"10.1016\/j.comnet.2026.112359_b37","doi-asserted-by":"crossref","first-page":"373","DOI":"10.5662\/wjm.v13.i5.373","article-title":"Challenges and limitations of synthetic minority oversampling techniques in machine learning","volume":"13","author":"Alkhawaldeh","year":"2023","journal-title":"World J. Methodol."},{"issue":"1","key":"10.1016\/j.comnet.2026.112359_b38","doi-asserted-by":"crossref","first-page":"3460","DOI":"10.1038\/s41598-024-84786-2","article-title":"Hybrid clustering strategies for effective oversampling and undersampling in multiclass classification","volume":"15","author":"Salehi","year":"2025","journal-title":"Sci. Rep."},{"key":"10.1016\/j.comnet.2026.112359_b39","doi-asserted-by":"crossref","first-page":"88","DOI":"10.1016\/j.neucom.2017.03.011","article-title":"Fast-CBUS: A fast clustering-based undersampling method for addressing the class imbalance problem","volume":"243","author":"Ofek","year":"2017","journal-title":"Neurocomputing"},{"key":"10.1016\/j.comnet.2026.112359_b40","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1016\/j.ins.2017.05.008","article-title":"Clustering-based undersampling in class-imbalanced data","volume":"409\u2013410","author":"Lin","year":"2017","journal-title":"Inform. Sci."},{"issue":"1","key":"10.1016\/j.comnet.2026.112359_b41","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1080\/03610926.2020.1743313","article-title":"The geometric mean?","volume":"51","author":"Vogel","year":"2022","journal-title":"Comm. Statist. Theory Methods"},{"issue":"3","key":"10.1016\/j.comnet.2026.112359_b42","doi-asserted-by":"crossref","first-page":"1074","DOI":"10.1016\/j.eswa.2014.08.025","article-title":"Geometric mean based boosting algorithm with over-sampling to resolve data imbalance problem for bankruptcy prediction","volume":"42","author":"Kim","year":"2015","journal-title":"Expert Syst. Appl."},{"issue":"2","key":"10.1016\/j.comnet.2026.112359_b43","doi-asserted-by":"crossref","first-page":"215","DOI":"10.1007\/s13748-019-00172-4","article-title":"Instance selection improves geometric mean accuracy: a study on imbalanced data classification","volume":"8","author":"Kuncheva","year":"2019","journal-title":"Prog. Artif. Intell."},{"key":"10.1016\/j.comnet.2026.112359_b44","doi-asserted-by":"crossref","first-page":"115370","DOI":"10.1109\/ACCESS.2024.3437214","article-title":"IoMT-TrafficData: Dataset and tools for benchmarking intrusion detection in internet of medical things","volume":"12","author":"Areia","year":"2024","journal-title":"IEEE Access"},{"issue":"13","key":"10.1016\/j.comnet.2026.112359_b45","doi-asserted-by":"crossref","DOI":"10.3390\/s23135941","article-title":"CICIoT2023: A real-time dataset and benchmark for large-scale attacks in IoT environment","volume":"23","author":"Neto","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.comnet.2026.112359_b46","series-title":"2020 International Conference on Cyber Security and Protection of Digital Services (Cyber Security)","first-page":"1","article-title":"Evaluation of Machine Learning Algorithms for Anomaly Detection","author":"Elmrabit","year":"2020"}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626003713?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626003713?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T11:33:57Z","timestamp":1779363237000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128626003713"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":46,"alternative-id":["S1389128626003713"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112359","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Robust AI-based intrusion detection for IoMT: A data-efficient approach via optimized feature selection and hybrid data balancing","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112359","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Author(s). Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"112359"}}