{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T22:12:56Z","timestamp":1782943976460,"version":"3.54.5"},"reference-count":39,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,3,8]],"date-time":"2026-03-08T00:00:00Z","timestamp":1772928000000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","award":["62302203"],"award-info":[{"award-number":["62302203"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Computer Standards & Interfaces"],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1016\/j.csi.2026.104156","type":"journal-article","created":{"date-parts":[[2026,3,7]],"date-time":"2026-03-07T23:27:19Z","timestamp":1772926039000},"page":"104156","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":2,"special_numbering":"C","title":["CLU-ID: Contrastive learning based unsupervised intrusion detection for low-power IoT devices"],"prefix":"10.1016","volume":"98","author":[{"given":"Yi","family":"Chen","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Wenxi","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2735-2359","authenticated-orcid":false,"given":"Xu","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7800-2215","authenticated-orcid":false,"given":"Wencheng","family":"Yang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.csi.2026.104156_b1","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2022.107810","article-title":"Anomaly-based intrusion detection system for IoT networks through deep learning model","volume":"99","author":"Saba","year":"2022","journal-title":"Comput. Electr. Eng."},{"issue":"3","key":"10.1016\/j.csi.2026.104156_b2","article-title":"DL-IDS: a deep learning\u2013based intrusion detection framework for securing IoT","volume":"33","author":"Otoum","year":"2022","journal-title":"Trans. Emerg. Telecommun. Technol."},{"key":"10.1016\/j.csi.2026.104156_b3","series-title":"32nd USENIX Security Symposium","first-page":"571","article-title":"HorusEye: A realtime IoT malicious traffic detection framework using programmable switches","author":"Dong","year":"2023"},{"key":"10.1016\/j.csi.2026.104156_b4","doi-asserted-by":"crossref","unstructured":"Ruoyu Li, Qing Li, Yu Zhang, Dan Zhao, Xi Xiao, Yong Jiang, Genos: General In-Network Unsupervised Intrusion Detection by Rule Extraction, in: IEEE INFOCOM 2024 - IEEE Conference on Computer Communications, 2024, pp. 561\u2013570.","DOI":"10.1109\/INFOCOM52122.2024.10621157"},{"key":"10.1016\/j.csi.2026.104156_b5","doi-asserted-by":"crossref","unstructured":"Ning Wang, Yimin Chen, Yang Hu, Wenjing Lou, Y. Thomas Hou, FeCo: Boosting Intrusion Detection Capability in IoT Networks via Contrastive Learning, in: IEEE INFOCOM 2022 - IEEE Conference on Computer Communications, 2022, pp. 1409\u20131418.","DOI":"10.1109\/INFOCOM48880.2022.9796926"},{"issue":"2","key":"10.1016\/j.csi.2026.104156_b6","doi-asserted-by":"crossref","first-page":"432","DOI":"10.3390\/s22020432","article-title":"Realguard: A lightweight network intrusion detection system for IoT gateways","volume":"22","author":"Nguyen","year":"2022","journal-title":"Sensors"},{"key":"10.1016\/j.csi.2026.104156_b7","doi-asserted-by":"crossref","unstructured":"Sajjad Dadkhah, Hassan Mahdikhani, Priscilla Kyei Danso, Alireza Zohourian, Kevin Anh Truong, Ali A. Ghorbani, Towards the Development of a Realistic Multidimensional IoT Profiling Dataset, in: 2022 19th Annual International Conference on Privacy, Security & Trust, PST, 2022, pp. 1\u201311.","DOI":"10.1109\/PST55820.2022.9851966"},{"issue":"11","key":"10.1016\/j.csi.2026.104156_b8","first-page":"2579","article-title":"Visualizing data using t-SNE","volume":"9","author":"Van der Maaten","year":"2008","journal-title":"J. Mach. Learn. Res."},{"issue":"3","key":"10.1016\/j.csi.2026.104156_b9","doi-asserted-by":"crossref","first-page":"832","DOI":"10.1214\/aoms\/1177728190","article-title":"Remarks on some nonparametric estimates of a density function","volume":"27","author":"Rosenblatt","year":"1956","journal-title":"Ann. Math. Stat."},{"key":"10.1016\/j.csi.2026.104156_b10","series-title":"Proceedings of the 33rd ACM International Conference on Information and Knowledge Management","first-page":"2910","article-title":"TrafCL: Robust encrypted malicious traffic detection via contrastive learning","author":"Yang","year":"2024"},{"key":"10.1016\/j.csi.2026.104156_b11","doi-asserted-by":"crossref","first-page":"4228","DOI":"10.1109\/TIFS.2025.3560560","article-title":"Robust detection of malicious encrypted traffic via contrastive learning","volume":"20","author":"Shen","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"13","key":"10.1016\/j.csi.2026.104156_b12","doi-asserted-by":"crossref","first-page":"5941","DOI":"10.3390\/s23135941","article-title":"CICIoT2023: A real-time dataset and benchmark for large-scale attacks in IoT environment","volume":"23","author":"Neto","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.csi.2026.104156_b13","series-title":"Proceedings of the 37th International Conference on Machine Learning","first-page":"1597","article-title":"A simple framework for contrastive learning of visual representations","volume":"Vol. 119","author":"Chen","year":"2020"},{"key":"10.1016\/j.csi.2026.104156_b14","series-title":"IoT-23: A Labeled Dataset with Malicious and Benign Iot Network Traffic","author":"Garcia","year":"2020"},{"issue":"3","key":"10.1016\/j.csi.2026.104156_b15","doi-asserted-by":"crossref","first-page":"12","DOI":"10.1109\/MPRV.2018.03367731","article-title":"N-BaIoT: Network-based detection of IoT botnet attacks using deep autoencoders","volume":"17","author":"Meidan","year":"2018","journal-title":"IEEE Pervasive Comput."},{"key":"10.1016\/j.csi.2026.104156_b16","series-title":"Proceedings of the 35th International Conference on Machine Learning","first-page":"4393","article-title":"Deep one-class classification","volume":"vol. 80","author":"Ruff","year":"2018"},{"key":"10.1016\/j.csi.2026.104156_b17","series-title":"Kitsune: An ensemble of autoencoders for online network intrusion detection","author":"Mirsky","year":"2018"},{"key":"10.1016\/j.csi.2026.104156_b18","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2019.100122","article-title":"Cost-sensitive stacked auto-encoders for intrusion detection in the internet of things","volume":"14","author":"Telikani","year":"2021","journal-title":"Internet Things"},{"key":"10.1016\/j.csi.2026.104156_b19","doi-asserted-by":"crossref","first-page":"57","DOI":"10.1016\/j.ins.2022.03.065","article-title":"PDAE: Efficient network intrusion detection in IoT using parallel deep auto-encoders","volume":"598","author":"Basati","year":"2022","journal-title":"Inform. Sci."},{"key":"10.1016\/j.csi.2026.104156_b20","series-title":"Proceedings of the 27th International Symposium on Research in Attacks, Intrusions and Defenses","first-page":"215","article-title":"Mateen: Adaptive ensemble learning for network anomaly detection","author":"Alotaibi","year":"2024"},{"key":"10.1016\/j.csi.2026.104156_b21","series-title":"Proceedings of the ACM Web Conference 2024","first-page":"1608","article-title":"Trident: A universal framework for fine-grained and class-incremental unknown traffic detection","author":"Zhao","year":"2024"},{"key":"10.1016\/j.csi.2026.104156_b22","doi-asserted-by":"crossref","unstructured":"Xinchen Zhang, Running Zhao, Zhihan Jiang, Zhicong Sun, Yulong Ding, Edith C.H. Ngai, Shuang-Hua Yang, AOC-IDS: Autonomous Online Framework with Contrastive Learning for Intrusion Detection, in: IEEE INFOCOM 2024 - IEEE Conference on Computer Communications, 2024, pp. 581\u2013590.","DOI":"10.1109\/INFOCOM52122.2024.10621346"},{"key":"10.1016\/j.csi.2026.104156_b23","doi-asserted-by":"crossref","unstructured":"Sharmin Aktar, Abdullah Yasin Nur, Robust Anomaly Detection in IoT Networks using Deep SVDD and Contractive Autoencoder, in: 2024 IEEE International Systems Conference, SysCon, 2024, pp. 1\u20138.","DOI":"10.1109\/SysCon61195.2024.10553592"},{"issue":"9","key":"10.1016\/j.csi.2026.104156_b24","doi-asserted-by":"crossref","first-page":"2048","DOI":"10.3390\/math11092048","article-title":"Robust intrusion detection for industrial control systems using improved autoencoder and Bayesian Gaussian mixture model","volume":"11","author":"Wang","year":"2023","journal-title":"Mathematics"},{"issue":"2","key":"10.1016\/j.csi.2026.104156_b25","doi-asserted-by":"crossref","first-page":"427","DOI":"10.1145\/335191.335437","article-title":"Efficient algorithms for mining outliers from large data sets","volume":"29","author":"Ramaswamy","year":"2000","journal-title":"SIGMOD Rec."},{"key":"10.1016\/j.csi.2026.104156_b26","series-title":"Histogram-based outlier score (hbos): A fast unsupervised anomaly detection algorithm","first-page":"59","author":"Goldstein","year":"2012"},{"issue":"2","key":"10.1016\/j.csi.2026.104156_b27","doi-asserted-by":"crossref","first-page":"93","DOI":"10.1145\/335191.335388","article-title":"LOF: identifying density-based local outliers","volume":"29","author":"Breunig","year":"2000","journal-title":"SIGMOD Rec."},{"key":"10.1016\/j.csi.2026.104156_b28","doi-asserted-by":"crossref","unstructured":"Fei Tony Liu, Kai Ming Ting, Zhi-Hua Zhou, Isolation Forest, in: 2008 Eighth IEEE International Conference on Data Mining, 2008, pp. 413\u2013422.","DOI":"10.1109\/ICDM.2008.17"},{"key":"10.1016\/j.csi.2026.104156_b29","doi-asserted-by":"crossref","first-page":"275","DOI":"10.1007\/s10994-015-5521-0","article-title":"Loda: Lightweight on-line detector of anomalies","volume":"102","author":"Pevn\u1ef3","year":"2016","journal-title":"Mach. Learn."},{"key":"10.1016\/j.csi.2026.104156_b30","series-title":"Proceedings of the Third IEEE International Conference on Data Mining","first-page":"353","article-title":"A novel anomaly detection scheme based on principal component classifier","author":"Shyu","year":"2003"},{"key":"10.1016\/j.csi.2026.104156_b31","doi-asserted-by":"crossref","unstructured":"Yan Naung Soe, Yaokai Feng, Paulus Insap Santosa, Rudy Hartanto, Kouichi Sakurai, A Sequential Scheme for Detecting Cyber Attacks in IoT Environment, in: 2019 IEEE Intl Conf on Dependable, Autonomic and Secure Computing, Intl Conf on Pervasive Intelligence and Computing, Intl Conf on Cloud and Big Data Computing, Intl Conf on Cyber Science and Technology Congress, DASC\/PiCom\/CBDCom\/CyberSciTech, 2019, pp. 238\u2013244.","DOI":"10.1109\/DASC\/PiCom\/CBDCom\/CyberSciTech.2019.00051"},{"key":"10.1016\/j.csi.2026.104156_b32","doi-asserted-by":"crossref","first-page":"147","DOI":"10.1016\/j.ins.2021.03.060","article-title":"A novel IoT network intrusion detection approach based on adaptive particle swarm optimization convolutional neural network","volume":"568","author":"Kan","year":"2021","journal-title":"Inform. Sci."},{"key":"10.1016\/j.csi.2026.104156_b33","doi-asserted-by":"crossref","first-page":"7783","DOI":"10.1109\/TIFS.2024.3441862","article-title":"Early network intrusion detection enabled by attention mechanisms and RNNs","volume":"19","author":"Djaidja","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.csi.2026.104156_b34","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103171","article-title":"Network intrusion detection based on n-gram frequency and time-aware transformer","volume":"128","author":"Han","year":"2023","journal-title":"Comput. Secur."},{"key":"10.1016\/j.csi.2026.104156_b35","doi-asserted-by":"crossref","first-page":"1156","DOI":"10.1109\/TIFS.2023.3331240","article-title":"TMG-GAN: Generative adversarial networks-based imbalanced learning for network intrusion detection","volume":"19","author":"Ding","year":"2024","journal-title":"Trans. Info. For. Sec."},{"key":"10.1016\/j.csi.2026.104156_b36","doi-asserted-by":"crossref","unstructured":"Xiang Li, Juncheng Guo, Qige Song, Jiang Xie, Yafei Sang, Shuyuan Zhao, Yongzheng Zhang, Listen to Minority: Encrypted Traffic Classification for Class Imbalance with Contrastive Pre-Training, in: 2023 20th Annual IEEE International Conference on Sensing, Communication, and Networking, SECON, 2023, pp. 447\u2013455.","DOI":"10.1109\/SECON58729.2023.10287449"},{"key":"10.1016\/j.csi.2026.104156_b37","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103892","article-title":"CETP: A novel semi-supervised framework based on contrastive pre-training for imbalanced encrypted traffic classification","volume":"143","author":"Lin","year":"2024","journal-title":"Comput. Secur."},{"issue":"4","key":"10.1016\/j.csi.2026.104156_b38","doi-asserted-by":"crossref","first-page":"4232","DOI":"10.1109\/TNSM.2022.3218843","article-title":"Contrastive learning enhanced intrusion detection","volume":"19","author":"Yue","year":"2022","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"5","key":"10.1016\/j.csi.2026.104156_b39","doi-asserted-by":"crossref","first-page":"4456","DOI":"10.1109\/TNET.2024.3423780","article-title":"Federated PCA on grassmann manifold for IoT anomaly detection","volume":"32","author":"Nguyen","year":"2024","journal-title":"IEEE\/ACM Trans. Netw."}],"container-title":["Computer Standards & Interfaces"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0920548926000309?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0920548926000309?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,5,27]],"date-time":"2026-05-27T23:09:11Z","timestamp":1779923351000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0920548926000309"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":39,"alternative-id":["S0920548926000309"],"URL":"https:\/\/doi.org\/10.1016\/j.csi.2026.104156","relation":{},"ISSN":["0920-5489"],"issn-type":[{"value":"0920-5489","type":"print"}],"subject":[],"published":{"date-parts":[[2026,8]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"CLU-ID: Contrastive learning based unsupervised intrusion detection for low-power IoT devices","name":"articletitle","label":"Article Title"},{"value":"Computer Standards & Interfaces","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.csi.2026.104156","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"104156"}}