{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T15:31:11Z","timestamp":1786375871227,"version":"build-2736575974"},"reference-count":81,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100020639","name":"Bayerische Staatsministerium f\u00fcr Wirtschaft, Landesentwicklung und Energie","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100020639","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100005017","name":"Bayerisches Staatsministerium f\u00fcr Wirtschaft Landesentwicklung und Energie","doi-asserted-by":"publisher","award":["DIK-2407-0002\/\/ DIK0726\/01"],"award-info":[{"award-number":["DIK-2407-0002\/\/ DIK0726\/01"]}],"id":[{"id":"10.13039\/501100005017","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Networks"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1016\/j.comnet.2026.112467","type":"journal-article","created":{"date-parts":[[2026,6,18]],"date-time":"2026-06-18T16:43:40Z","timestamp":1781801020000},"page":"112467","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["A review on robustness in Machine Learning based Network Intrusion Detection Systems"],"prefix":"10.1016","volume":"287","author":[{"ORCID":"https:\/\/orcid.org\/0009-0007-7459-7259","authenticated-orcid":false,"given":"Maximilian","family":"Wolf","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dieter","family":"Landes","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Andreas","family":"Hotho","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Daniel","family":"Schl\u00f6r","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"issue":"3","key":"10.1016\/j.comnet.2026.112467_b1","doi-asserted-by":"crossref","first-page":"698","DOI":"10.1057\/s41288-022-00266-6","article-title":"Cyber risk and cybersecurity: A systematic review of data availability","volume":"47","author":"Cremer","year":"2022","journal-title":"Geneva Pap. Risk Insur. - Issues Pr."},{"issue":"1","key":"10.1016\/j.comnet.2026.112467_b2","doi-asserted-by":"crossref","first-page":"41","DOI":"10.1186\/s40537-020-00318-5","article-title":"Cybersecurity data science: An overview from machine learning perspective","volume":"7","author":"Sarker","year":"2020","journal-title":"J. Big Data"},{"key":"10.1016\/j.comnet.2026.112467_b3","doi-asserted-by":"crossref","first-page":"147167","DOI":"10.1109\/ACCESS.2024.3473289","article-title":"Network intrusion detection: An IoT and non IoT-related survey","volume":"12","author":"Abdulkareem","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112467_b4","doi-asserted-by":"crossref","first-page":"209","DOI":"10.3390\/computers12100209","article-title":"On the robustness of ML-based network intrusion detection systems: An adversarial and distribution shift perspective","volume":"12","author":"Wang","year":"2023","journal-title":"Comput."},{"issue":"1","key":"10.1016\/j.comnet.2026.112467_b5","doi-asserted-by":"crossref","first-page":"538","DOI":"10.1109\/COMST.2022.3233793","article-title":"Adversarial machine learning for network intrusion detection systems: A comprehensive survey","volume":"25","author":"He","year":"2023","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.comnet.2026.112467_b6","series-title":"Machine learning robustness: A primer","author":"Braiek","year":"2024"},{"key":"10.1016\/j.comnet.2026.112467_b7","series-title":"A systematic review of robustness in deep learning for computer vision: Mind the gap?","author":"Drenkow","year":"2021"},{"key":"10.1016\/j.comnet.2026.112467_b8","doi-asserted-by":"crossref","first-page":"156","DOI":"10.1109\/RBME.2020.3013489","article-title":"Secure and robust machine learning for healthcare: A survey","volume":"14","author":"Qayyum","year":"2020","journal-title":"IEEE Rev. Biomed. Eng."},{"key":"10.1016\/j.comnet.2026.112467_b9","series-title":"Measure and improve robustness in NLP models: A survey","author":"Wang","year":"2021"},{"issue":"1","key":"10.1016\/j.comnet.2026.112467_b10","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1007\/s10922-021-09615-7","article-title":"Towards model generalization for intrusion detection: Unsupervised machine learning techniques","volume":"30","author":"Verkerken","year":"2022","journal-title":"J. Netw. Syst. Manage."},{"key":"10.1016\/j.comnet.2026.112467_b11","doi-asserted-by":"crossref","unstructured":"G. Andresini, F. Pendlebury, F. Pierazzi, C. Loglisci, A. Appice, L. Cavallaro, INSOMNIA: Towards Concept-Drift Robustness in Network Intrusion Detection, in: Proceedings of the 14th ACM Workshop on Artificial Intelligence and Security, 2021, pp. 111\u2013122.","DOI":"10.1145\/3474369.3486864"},{"key":"10.1016\/j.comnet.2026.112467_b12","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.120994","article-title":"Anomaly detection in streaming data: A comparison and evaluation study","volume":"233","author":"Iglesias V\u00e1zquez","year":"2023","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.comnet.2026.112467_b13","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104028","article-title":"NIDS-vis: Improving the generalized adversarial robustness of network intrusion detection system","volume":"145","author":"He","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112467_b14","first-page":"561","article-title":"Genos: General in-network unsupervised intrusion detection by rule extraction","author":"Li","year":"2024","journal-title":"IEEE Conf. Comput. Commun."},{"key":"10.1016\/j.comnet.2026.112467_b15","series-title":"Foundations of Intelligent Systems","first-page":"117","article-title":"XAI to explore robustness of features in adversarial training for cybersecurity","volume":"Vol. 13515","author":"AL-Essa","year":"2022"},{"key":"10.1016\/j.comnet.2026.112467_b16","doi-asserted-by":"crossref","unstructured":"M. AL-Essa, G. Andresini, A. Appice, D. Malerba, An XAI-based adversarial training approach for cyber-threat detection, in: 2022 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress, DASC\/PiCom\/CBDCom\/CyberSciTech, 2022, pp. 1\u20138.","DOI":"10.1109\/DASC\/PiCom\/CBDCom\/Cy55231.2022.9927842"},{"key":"10.1016\/j.comnet.2026.112467_b17","series-title":"Robustness evaluation of deep unsupervised learning algorithms for intrusion detection systems","author":"Nkashama","year":"2022"},{"key":"10.1016\/j.comnet.2026.112467_b18","series-title":"KDD cup 1999 data","author":"University of California","year":"1999"},{"key":"10.1016\/j.comnet.2026.112467_b19","series-title":"2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications","first-page":"1","article-title":"A detailed analysis of the KDD CUP 99 data set","author":"Tavallaee","year":"2009"},{"key":"10.1016\/j.comnet.2026.112467_b20","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","author":"Sharafaldin","year":"2018","journal-title":"Int. Conf. Inf. Syst. Secur. Priv."},{"key":"10.1016\/j.comnet.2026.112467_b21","series-title":"2015 Military Communications and Information Systems Conference (MilCIS)","first-page":"1","article-title":"UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)","author":"Moustafa","year":"2015"},{"key":"10.1016\/j.comnet.2026.112467_b22","series-title":"ToN-IoT datasets","author":"Moustafa","year":"2019"},{"key":"10.1016\/j.comnet.2026.112467_b23","doi-asserted-by":"crossref","DOI":"10.3390\/s23187796","article-title":"SGAN-IDS: Self-attention-based generative adversarial network against intrusion detection systems","volume":"23","author":"Aldhaheri","year":"2023","journal-title":"Sensors (Basel, Switzerland)"},{"issue":"4","key":"10.1016\/j.comnet.2026.112467_b24","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1145\/3543146.3543171","article-title":"Unveiling the potential of graph neural networks for robust intrusion detection","volume":"49","author":"Pujol-Perich","year":"2022","journal-title":"ACM SIGMETRICS Perform. Eval. Rev."},{"key":"10.1016\/j.comnet.2026.112467_b25","doi-asserted-by":"crossref","first-page":"401","DOI":"10.1007\/s12243-023-00953-y","article-title":"Towards adversarial realism and robust learning for IoT intrusion detection and classification","volume":"78","author":"Vitorino","year":"2023","journal-title":"Ann. Telecommun."},{"key":"10.1016\/j.comnet.2026.112467_b26","doi-asserted-by":"crossref","unstructured":"M. Pujari, B. Cherukuri, A.Y. Javaid, W. Sun, An Approach to Improve the Robustness of Machine Learning based Intrusion Detection System Models Against the Carlini-Wagner Attack, in: 2022 IEEE International Conference on Cyber Security and Resilience, CSR, 2022, pp. 62\u201367.","DOI":"10.1109\/CSR54599.2022.9850306"},{"key":"10.1016\/j.comnet.2026.112467_b27","doi-asserted-by":"crossref","first-page":"727","DOI":"10.3233\/JCS-210094","article-title":"Adversarial examples for network intrusion detection systems","volume":"30","author":"Sheatsley","year":"2022","journal-title":"J. Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112467_b28","series-title":"Generating practical adversarial network traffic flows using NIDSGAN","author":"Zolbayar","year":"2022"},{"key":"10.1016\/j.comnet.2026.112467_b29","doi-asserted-by":"crossref","first-page":"2269","DOI":"10.1109\/TNSM.2022.3175710","article-title":"Griffin: Real-time network intrusion detection system via ensemble of autoencoder in SDN","volume":"19","author":"Yang","year":"2022","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.comnet.2026.112467_b30","doi-asserted-by":"crossref","unstructured":"A. McCarthy, P. Andriotis, E. Ghadafi, P. Legg, Feature Vulnerability and Robustness Assessment against Adversarial Machine Learning Attacks, in: 2021 International Conference on Cyber Situational Awareness, Data Analytics and Assessment, 2021, pp. 1\u20138.","DOI":"10.1109\/CyberSA52016.2021.9478199"},{"key":"10.1016\/j.comnet.2026.112467_b31","article-title":"Adversarial machine learning: A comparative study on contemporary intrusion detection datasets","author":"Pacheco","year":"2021","journal-title":"Int. Conf. Inf. Syst. Secur. Priv."},{"key":"10.1016\/j.comnet.2026.112467_b32","series-title":"Launching adversarial attacks against network intrusion detection systems for IoT","author":"Papadopoulos","year":"2021"},{"key":"10.1016\/j.comnet.2026.112467_b33","doi-asserted-by":"crossref","unstructured":"M. Schneider, D. Aspinall, N.D. Bastian, Evaluating Model Robustness to Adversarial Samples in Network Intrusion Detection, in: 2021 IEEE International Conference on Big Data (Big Data), 2021, pp. 3343\u20133352.","DOI":"10.1109\/BigData52589.2021.9671580"},{"key":"10.1016\/j.comnet.2026.112467_b34","doi-asserted-by":"crossref","first-page":"6","DOI":"10.3390\/network5010006","article-title":"GAOR: Genetic algorithm-based optimization for machine learning robustness in communication networks","volume":"5","author":"Thompson","year":"2025","journal-title":"Network"},{"key":"10.1016\/j.comnet.2026.112467_b35","doi-asserted-by":"crossref","unstructured":"I. Sharafaldin, A.H. Lashkari, S. Hakak, A.A. Ghorbani, Developing Realistic Distributed Denial of Service (DDoS) Attack Dataset and Taxonomy, in: 2019 International Carnahan Conference on Security Technology, ICCST, 2019, pp. 1\u20138.","DOI":"10.1109\/CCST.2019.8888419"},{"key":"10.1016\/j.comnet.2026.112467_b36","series-title":"5G-NIDD: A comprehensive network intrusion detection dataset generated over 5G wireless network","author":"Samarakoon","year":"2022"},{"key":"10.1016\/j.comnet.2026.112467_b37","doi-asserted-by":"crossref","unstructured":"T. Akhlaghpasandi, A.M. Ghaleh, Detection of Attacks with an Adversarial Machine Learning Approach, in: 2025 11th International Conference on Web Research, ICWR, 2025, pp. 163\u2013168.","DOI":"10.1109\/ICWR65219.2025.11006177"},{"key":"10.1016\/j.comnet.2026.112467_b38","article-title":"Secured cyber-internet security in intrusion detection with machine learning techniques","author":"Aarthi","year":"2024","journal-title":"Int. J. Comput. Exp. Sci. Eng."},{"key":"10.1016\/j.comnet.2026.112467_b39","doi-asserted-by":"crossref","first-page":"2477","DOI":"10.1109\/TNSM.2024.3352586","article-title":"Reinforcement learning meets network intrusion detection: A transferable and adaptable framework for anomaly behavior identification","volume":"21","author":"He","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"13","key":"10.1016\/j.comnet.2026.112467_b40","doi-asserted-by":"crossref","first-page":"5941","DOI":"10.3390\/s23135941","article-title":"CICIoT2023: A real-time dataset and benchmark for large-scale attacks in IoT environment","volume":"23","author":"Neto","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.comnet.2026.112467_b41","doi-asserted-by":"crossref","first-page":"10754","DOI":"10.1109\/ACCESS.2022.3145002","article-title":"Robust network intrusion detection system based on machine-learning with early classification","volume":"10","author":"Kim","year":"2022","journal-title":"IEEE Access"},{"issue":"3","key":"10.1016\/j.comnet.2026.112467_b42","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1016\/j.cose.2011.12.012","article-title":"Toward developing a systematic approach to generate benchmark datasets for intrusion detection","volume":"31","author":"Shiravi","year":"2012","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112467_b43","doi-asserted-by":"crossref","first-page":"11705","DOI":"10.1007\/s10489-022-04076-0","article-title":"A novel hierarchical attention-based triplet network with unsupervised domain adaptation for network intrusion detection","volume":"53","author":"Lan","year":"2022","journal-title":"Appl. Intell."},{"key":"10.1016\/j.comnet.2026.112467_b44","doi-asserted-by":"crossref","first-page":"100","DOI":"10.1016\/j.cose.2014.05.011","article-title":"An empirical comparison of botnet detection methods","volume":"45","author":"Garcia","year":"2014","journal-title":"Comput. Secur."},{"key":"10.1016\/j.comnet.2026.112467_b45","doi-asserted-by":"crossref","unstructured":"A. Hannan, C. Gruhl, B. Sick, Anomaly based Resilient Network Intrusion Detection using Inferential Autoencoders, in: 2021 IEEE International Conference on Cyber Security and Resilience, CSR, 2021, pp. 1\u20137.","DOI":"10.1109\/CSR51186.2021.9527980"},{"key":"10.1016\/j.comnet.2026.112467_b46","doi-asserted-by":"crossref","first-page":"19723","DOI":"10.1109\/ACCESS.2021.3054688","article-title":"Towards effective network intrusion detection: From concept to creation on azure cloud","volume":"9","author":"Rajagopal","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112467_b47","series-title":"2019 International Carnahan Conference on Security Technology","first-page":"1","article-title":"Developing realistic distributed denial of service (DDoS) attack dataset and taxonomy","author":"Sharafaldin","year":"2019"},{"key":"10.1016\/j.comnet.2026.112467_b48","first-page":"1","article-title":"Cyber threat intelligence sharing scheme based on federated learning for network intrusion detection","volume":"31","author":"Sarhan","year":"2021","journal-title":"J. Netw. Syst. Manage."},{"key":"10.1016\/j.comnet.2026.112467_b49","series-title":"UQ IoT IDS dataset 2021","author":"He","year":"2022"},{"key":"10.1016\/j.comnet.2026.112467_b50","doi-asserted-by":"crossref","first-page":"5801","DOI":"10.1109\/ACCESS.2021.3137318","article-title":"Investigating the effect of traffic sampling on machine learning-based network intrusion detection approaches","volume":"10","author":"Alikhanov","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.comnet.2026.112467_b51","doi-asserted-by":"crossref","unstructured":"R. Desai, T.G. Venkatesh, Robust Network Intrusion Detection Systems for Outlier Detection, in: 2022 IEEE 27th International Workshop on Computer Aided Modeling and Design of Communication Links and Networks, CAMAD, 2022, pp. 140\u2013146.","DOI":"10.1109\/CAMAD55695.2022.9966883"},{"key":"10.1016\/j.comnet.2026.112467_b52","doi-asserted-by":"crossref","unstructured":"L. Gupta, J.P. Kushwaha, S. Bhadauria, S. Tapaswi, An Ensembled Multi-Model Approach for Multi-class Classification of Attacks in Network Intrusion Detection Systems, in: 2025 IEEE International Conference on Interdisciplinary Approaches in Technology and Management for Social Innovation, IATMSI, vol. 3, 2025, pp. 1\u20136.","DOI":"10.1109\/IATMSI64286.2025.10984747"},{"key":"10.1016\/j.comnet.2026.112467_b53","series-title":"Generative active adaptation for drifting and imbalanced network intrusion detection","author":"Gupta","year":"2025"},{"key":"10.1016\/j.comnet.2026.112467_b54","series-title":"Improving the robustness of DNNs-based network intrusion detection systems through adversarial training","first-page":"1","author":"Lella","year":"2023"},{"key":"10.1016\/j.comnet.2026.112467_b55","doi-asserted-by":"crossref","unstructured":"M. Catillo, A.D. Vecchio, A. Pecchia, U. Villano, A Case Study with CICIDS2017 on the Robustness of Machine Learning against Adversarial Attacks in Intrusion Detection, in: Proceedings of the 18th International Conference on Availability, Reliability and Security, 2023.","DOI":"10.1145\/3600160.3605031"},{"key":"10.1016\/j.comnet.2026.112467_b56","unstructured":"K. Roshan, A. Zafar, S.B.U. Haque, A Novel Deep Learning based Model to Defend Network Intrusion Detection System against Adversarial Attacks, in: 2023 10th International Conference on Computing for Sustainable Global Development, INDIACom, 2023, pp. 386\u2013391."},{"key":"10.1016\/j.comnet.2026.112467_b57","doi-asserted-by":"crossref","unstructured":"A. Venturi, M. Ferrari, M. Marchetti, M. Colajanni, ARGANIDS: A novel Network Intrusion Detection System based on adversarially Regularized Graph Autoencoder, in: Proceedings of the 38th ACM\/SIGAPP Symposium on Applied Computing, 2023.","DOI":"10.1145\/3555776.3577651"},{"key":"10.1016\/j.comnet.2026.112467_b58","series-title":"Detect and reject for transferability of black-box adversarial attacks against network intrusion detection systems","author":"Debicha","year":"2021"},{"key":"10.1016\/j.comnet.2026.112467_b59","doi-asserted-by":"crossref","unstructured":"S. Grierson, C. Thomson, P. Papadopoulos, B. Buchanan, Min-max Training: Adversarially Robust Learning Models for Network Intrusion Detection Systems, in: 2021 14th International Conference on Security of Information and Networks, SIN, vol. 1, 2021, pp. 1\u20138.","DOI":"10.1109\/SIN54109.2021.9699157"},{"key":"10.1016\/j.comnet.2026.112467_b60","doi-asserted-by":"crossref","DOI":"10.1038\/s41598-025-87028-1","article-title":"A hybrid machine learning model for intrusion detection in wireless sensor networks leveraging data balancing and dimensionality reduction","volume":"15","author":"Talukder","year":"2025","journal-title":"Sci. Rep."},{"key":"10.1016\/j.comnet.2026.112467_b61","doi-asserted-by":"crossref","first-page":"4731953:1","DOI":"10.1155\/2016\/4731953","article-title":"WSN-DS: A dataset for intrusion detection systems in wireless sensor networks","volume":"2016","author":"Almomani","year":"2016","journal-title":"J. Sens."},{"key":"10.1016\/j.comnet.2026.112467_b62","series-title":"XAI","article-title":"Evaluating feature relevance XAI in network intrusion detection","author":"Tritscher","year":"2023"},{"key":"10.1016\/j.comnet.2026.112467_b63","series-title":"2013 IEEE 21st International Symposium on Modelling, Analysis and Simulation of Computer and Telecommunication Systems","first-page":"80","article-title":"The continued evolution of web traffic","author":"Newton","year":"2013"},{"key":"10.1016\/j.comnet.2026.112467_b64","article-title":"TESSERACT: Eliminating experimental bias in malware classification across space and time","author":"Pendlebury","year":"2018","journal-title":"USENIX Secur. Symp."},{"key":"10.1016\/j.comnet.2026.112467_b65","doi-asserted-by":"crossref","first-page":"4197","DOI":"10.1109\/TNSM.2021.3120804","article-title":"Network abnormal traffic detection model based on semi-supervised deep reinforcement learning","volume":"18","author":"Dong","year":"2021","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.comnet.2026.112467_b66","article-title":"All models are wrong, but many are useful: Learning a variable\u2019s importance by studying an entire class of prediction models simultaneously","volume":"20","author":"Fisher","year":"2018","journal-title":"J. Mach. Learn. Res. : JMLR"},{"key":"10.1016\/j.comnet.2026.112467_b67","series-title":"Can you trust your explanations? A robustness test for feature attribution methods","author":"Vascotto","year":"2024"},{"key":"10.1016\/j.comnet.2026.112467_b68","doi-asserted-by":"crossref","unstructured":"M.T. Jahangir, M. Wakeel, H. Asif, A. Ateeq, Systematic Approach to Analyze The Avast IOT-23 Challenge Dataset For Malware Detection Using Machine Learning, in: 2023 18th International Conference on Emerging Technologies, ICET, 2023, pp. 234\u2013239.","DOI":"10.1109\/ICET59753.2023.10374768"},{"key":"10.1016\/j.comnet.2026.112467_b69","doi-asserted-by":"crossref","first-page":"139","DOI":"10.1145\/3422622","article-title":"Generative adversarial networks","volume":"63","author":"Goodfellow","year":"2014","journal-title":"Commun. ACM"},{"key":"10.1016\/j.comnet.2026.112467_b70","series-title":"Long short-term memory-networks for machine reading","author":"Cheng","year":"2016"},{"key":"10.1016\/j.comnet.2026.112467_b71","series-title":"Explaining and harnessing adversarial examples","author":"Goodfellow","year":"2015"},{"key":"10.1016\/j.comnet.2026.112467_b72","doi-asserted-by":"crossref","unstructured":"N. Papernot, P. Mcdaniel, S. Jha, M. Fredrikson, Z.B. Celik, A. Swami, The Limitations of Deep Learning in Adversarial Settings, in: 2016 IEEE European Symposium on Security and Privacy (Euro Security and Privacy), 2015, pp. 372\u2013387.","DOI":"10.1109\/EuroSP.2016.36"},{"key":"10.1016\/j.comnet.2026.112467_b73","series-title":"Towards deep learning models resistant to adversarial attacks","author":"Madry","year":"2017"},{"key":"10.1016\/j.comnet.2026.112467_b74","doi-asserted-by":"crossref","unstructured":"N. Carlini, D.A. Wagner, Towards Evaluating the Robustness of Neural Networks, in: 2017 IEEE Symposium on Security and Privacy, SP, 2016, pp. 39\u201357.","DOI":"10.1109\/SP.2017.49"},{"key":"10.1016\/j.comnet.2026.112467_b75","series-title":"GitHub - Canadianinstituteforcybersecurity\/CICFlowMeter: CICFlowmeter-V4.0","author":"Canadian Institute For Cybersecurity","year":"2025"},{"key":"10.1016\/j.comnet.2026.112467_b76","series-title":"Data Mining: Concepts and Techniques","author":"Han","year":"2012"},{"key":"10.1016\/j.comnet.2026.112467_b77","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2021.115782","article-title":"Adversarial machine learning in network intrusion detection systems","volume":"186","author":"Alhajjar","year":"2021","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.comnet.2026.112467_b78","unstructured":"D.H. Ballard, Modular learning in neural networks, in: Proceedings of the Sixth National Conference on Artificial Intelligence-Volume 1, 1987, pp. 279\u2013284."},{"key":"10.1016\/j.comnet.2026.112467_b79","doi-asserted-by":"crossref","first-page":"507","DOI":"10.52202\/068431-0037","article-title":"Why do tree-based models still outperform deep learning on typical tabular data?","volume":"35","author":"Grinsztajn","year":"2022","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.comnet.2026.112467_b80","doi-asserted-by":"crossref","first-page":"1735","DOI":"10.1162\/neco.1997.9.8.1735","article-title":"Long short-term memory","volume":"9","author":"Hochreiter","year":"1997","journal-title":"Neural Comput."},{"key":"10.1016\/j.comnet.2026.112467_b81","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1109\/TNN.2008.2005605","article-title":"The graph neural network model","volume":"20","author":"Scarselli","year":"2009","journal-title":"IEEE Trans. Neural Netw."}],"container-title":["Computer Networks"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626004792?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1389128626004792?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,8,10]],"date-time":"2026-08-10T15:14:16Z","timestamp":1786374856000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1389128626004792"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":81,"alternative-id":["S1389128626004792"],"URL":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112467","relation":{},"ISSN":["1389-1286"],"issn-type":[{"value":"1389-1286","type":"print"}],"subject":[],"published":{"date-parts":[[2026,9]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"A review on robustness in Machine Learning based Network Intrusion Detection Systems","name":"articletitle","label":"Article Title"},{"value":"Computer Networks","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.comnet.2026.112467","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"112467"}}