{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T02:20:03Z","timestamp":1783045203222,"version":"3.54.6"},"reference-count":38,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"publisher","id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Information Fusion"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.inffus.2026.104398","type":"journal-article","created":{"date-parts":[[2026,4,23]],"date-time":"2026-04-23T23:07:14Z","timestamp":1776985634000},"page":"104398","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Protocol -agnostic network traffic anomaly detection via structural-temporal decoupling and adaptive fusion"],"prefix":"10.1016","volume":"134","author":[{"ORCID":"https:\/\/orcid.org\/0009-0009-9754-8198","authenticated-orcid":false,"given":"Tianzhu","family":"Hu","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6455-6866","authenticated-orcid":false,"given":"Zhiwei","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-3640-3488","authenticated-orcid":false,"given":"Ji","family":"He","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-8448-705X","authenticated-orcid":false,"given":"Yulong","family":"Shen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4251-1143","authenticated-orcid":false,"given":"Jianfeng","family":"Ma","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6860-8694","authenticated-orcid":false,"given":"Hao","family":"Yin","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-6524-0003","authenticated-orcid":false,"given":"Baoquan","family":"Ren","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.inffus.2026.104398_bib0001","unstructured":"European Union Agency for Cybersecurity, ENISA Threat landscape 2024,technical report, ENISA, reporting period: july 2023\u2013june 2024, 2024. https:\/\/www.enisa.europa.eu\/publications\/enisa-threat-landscape-2024."},{"issue":"4","key":"10.1016\/j.inffus.2026.104398_bib0002","doi-asserted-by":"crossref","first-page":"219","DOI":"10.1145\/1030194.1015492","article-title":"Diagnosing network-wide traffic anomalies","volume":"34","author":"Lakhina","year":"2004","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"10.1016\/j.inffus.2026.104398_bib0003","series-title":"Intrusion Detection with Unlabeled Data Using Clustering","author":"Portnoy","year":"2000"},{"key":"10.1016\/j.inffus.2026.104398_bib0004","series-title":"2008 Eighth IEEE International Conference on Data Mining","first-page":"413","article-title":"Isolation forest","author":"Liu","year":"2008"},{"key":"10.1016\/j.inffus.2026.104398_bib0005","doi-asserted-by":"crossref","unstructured":"Y. Mirsky, T. Doitshman, Y. Elovici, A. Shabtai, Kitsune: an ensemble of autoencoders for online network intrusion detection, arXiv: 1802.09089(2018).","DOI":"10.14722\/ndss.2018.23204"},{"key":"10.1016\/j.inffus.2026.104398_bib0006","series-title":"International Conference on Learning Representations","article-title":"Deep autoencoding gaussian mixture model for unsupervised anomaly detection","author":"Zong","year":"2018"},{"key":"10.1016\/j.inffus.2026.104398_bib0007","doi-asserted-by":"crossref","first-page":"97780","DOI":"10.1109\/ACCESS.2022.3200034","article-title":"Network intrusion detection via flow-to-image conversion and vision transformer classification","volume":"10","author":"Ho","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.inffus.2026.104398_bib0008","doi-asserted-by":"crossref","unstructured":"C. Bastian, T. Klieber, J. Livingood, J. Mills, R. Woundy, Comcast\u2019s protocol-agnostic congestion management system, 2010, (Request for comments (RFC) 6057). https:\/\/www.rfc-editor.org\/rfc\/rfc6057. 10.17487\/RFC6057.","DOI":"10.17487\/rfc6057"},{"key":"10.1016\/j.inffus.2026.104398_bib0009","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"7355","article-title":"Weakly supervised temporal anomaly segmentation with dynamic time warping","author":"Lee","year":"2021"},{"issue":"1","key":"10.1016\/j.inffus.2026.104398_bib0010","doi-asserted-by":"crossref","first-page":"303","DOI":"10.1109\/SURV.2013.052213.00046","article-title":"Network anomaly detection: methods, systems and tools","volume":"16","author":"Bhuyan","year":"2013","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"4","key":"10.1016\/j.inffus.2026.104398_bib0011","first-page":"8","article-title":"A survey on network security traffic analysis and anomaly detection techniques","volume":"1","author":"Zhang","year":"2024","journal-title":"Int. J. Emerg. Technol. Adv. Appl."},{"key":"10.1016\/j.inffus.2026.104398_bib0012","series-title":"Proceedings of the 2007 ACM SIGMETRICS International Conference on Measurement and Modeling of Computer Systems","first-page":"109","article-title":"Sensitivity of pca for traffic anomaly detection","author":"Ringberg","year":"2007"},{"key":"10.1016\/j.inffus.2026.104398_bib0013","series-title":"Applications of Data Mining in Computer Security","first-page":"77","article-title":"A geometric framework for unsupervised anomaly detection: detecting intrusions in unlabeled data","author":"Eskin","year":"2002"},{"issue":"18","key":"10.1016\/j.inffus.2026.104398_bib0014","doi-asserted-by":"crossref","first-page":"4203","DOI":"10.1002\/sec.1335","article-title":"Local outlier factor use for the network flow anomaly detection","volume":"8","author":"Paulauskas","year":"2015","journal-title":"Secur. Commun. Netw."},{"key":"10.1016\/j.inffus.2026.104398_bib0015","series-title":"2015 11th International Conference on Mobile Ad-hoc and Sensor Networks (MSN)","first-page":"102","article-title":"An anomaly detection model based on one-class svm to detect network intrusions","author":"Zhang","year":"2015"},{"issue":"1","key":"10.1016\/j.inffus.2026.104398_bib0016","doi-asserted-by":"crossref","DOI":"10.1093\/jigpal\/jzaf020","article-title":"A systematic literature review of unsupervised learning algorithms for anomalous traffic detection based on flows","volume":"34","author":"Miguel-Diez","year":"2026","journal-title":"Log. J. IGPL"},{"key":"10.1016\/j.inffus.2026.104398_bib0017","series-title":"Proceedings of the IEEE\/CVF International Conference on Computer Vision","first-page":"1705","article-title":"Memorizing normality to detect anomaly: memory-augmented deep autoencoder for unsupervised anomaly detection","author":"Gong","year":"2019"},{"key":"10.1016\/j.inffus.2026.104398_bib0018","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2023.103131","article-title":"Robust unsupervised network intrusion detection with self-supervised masked context reconstruction","volume":"128","author":"Wang","year":"2023","journal-title":"Comput. Secur."},{"issue":"5","key":"10.1016\/j.inffus.2026.104398_bib0019","doi-asserted-by":"crossref","first-page":"5106","DOI":"10.1109\/TNSM.2025.3591533","article-title":"Semi-supervised learning for anomaly traffic detection via bidirectional normalizing flows","volume":"22","author":"Dang","year":"2025","journal-title":"IEEE Trans. Netw. Serv. Manage."},{"key":"10.1016\/j.inffus.2026.104398_bib0020","series-title":"2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","first-page":"2559","article-title":"Payload level anomaly network traffic detection via semi-supervised contrastive learning","author":"Lian","year":"2024"},{"key":"10.1016\/j.inffus.2026.104398_bib0021","doi-asserted-by":"crossref","first-page":"3330","DOI":"10.1109\/TIFS.2025.3550060","article-title":"Unflows: an unsupervised construction scheme of flow spectrum for network traffic detection","volume":"20","author":"Yang","year":"2025","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"10.1016\/j.inffus.2026.104398_bib0022","series-title":"Proceedings of the 32nd ACM International Conference on Information and Knowledge Management","first-page":"4455","article-title":"A semi-supervised anomaly network traffic detection framework via multimodal traffic information fusion","author":"Zheng","year":"2023"},{"key":"10.1016\/j.inffus.2026.104398_bib0023","series-title":"Proceedings of the ACM on Web Conference 2025","first-page":"3908","article-title":"Facing anomalies head-on: network traffic anomaly detection via uncertainty-inspired inter-sample differences","author":"Lian","year":"2025"},{"key":"10.1016\/j.inffus.2026.104398_bib0024","doi-asserted-by":"crossref","unstructured":"M. Neri, S. Baldoni, Unsupervised network anomaly detection with autoencoders and traffic images, arXiv: 2505.16650(2025).","DOI":"10.23919\/EUSIPCO63237.2025.11226720"},{"key":"10.1016\/j.inffus.2026.104398_bib0025","series-title":"Workshops at the Twenty-Ninth AAAI Conference on Artificial Intelligence","first-page":"0000091","article-title":"Encoding time series as images for visual inspection and classification using tiled convolutional neural networks","volume":"1","author":"Wang","year":"2015"},{"key":"10.1016\/j.inffus.2026.104398_bib0026","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"770","article-title":"Deep residual learning for image recognition","author":"He","year":"2016"},{"key":"10.1016\/j.inffus.2026.104398_bib0027","series-title":"Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition","first-page":"7132","article-title":"Squeeze-and-excitation networks","author":"Hu","year":"2018"},{"key":"10.1016\/j.inffus.2026.104398_bib0028","series-title":"International Conference on Medical Image Computing and Computer-Assisted Intervention","first-page":"234","article-title":"U-Net: convolutional networks for biomedical image segmentation","author":"Ronneberger","year":"2015"},{"key":"10.1016\/j.inffus.2026.104398_bib0029","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"16000","article-title":"Masked autoencoders are scalable vision learners","author":"He","year":"2022"},{"issue":"1","key":"10.1016\/j.inffus.2026.104398_bib0030","doi-asserted-by":"crossref","first-page":"184","DOI":"10.1109\/COMST.2015.2402161","article-title":"Intrusion detection in 802.11 networks: empirical evaluation of threats and a public dataset","volume":"18","author":"Kolias","year":"2015","journal-title":"IEEE Commun. Surv. Tutor."},{"issue":"10","key":"10.1016\/j.inffus.2026.104398_bib0031","doi-asserted-by":"crossref","first-page":"13625","DOI":"10.1109\/JIOT.2024.3522863","article-title":"Device identification and anomaly detection in iot environments","volume":"12","author":"Rabbani","year":"2024","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.inffus.2026.104398_bib0032","series-title":"ICISSp","first-page":"108","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","volume":"1","author":"Sharafaldin","year":"2018"},{"key":"10.1016\/j.inffus.2026.104398_bib0033","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"14318","article-title":"Towards total recall in industrial anomaly detection","author":"Roth","year":"2022"},{"key":"10.1016\/j.inffus.2026.104398_bib0034","series-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","first-page":"10619","article-title":"Diffusion autoencoders: toward a meaningful and decodable representation","author":"Preechakul","year":"2022"},{"key":"10.1016\/j.inffus.2026.104398_bib0035","series-title":"Proceedings of the AAAI Conference on Artificial Intelligence","first-page":"4027","article-title":"Graph neural network-based anomaly detection in multivariate time series","volume":"35","author":"Deng","year":"2021"},{"key":"10.1016\/j.inffus.2026.104398_bib0036","unstructured":"H. Wu, T. Hu, Y. Liu, H. Zhou, J. Wang, M. Long, TimesNet: temporal 2D-variation modeling for general time series analysis (2022). 2210.02186."},{"key":"10.1016\/j.inffus.2026.104398_bib0037","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2024.111215","article-title":"Semi-supervised anomaly traffic detection via multi-frequency reconstruction","volume":"161","author":"Lian","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.inffus.2026.104398_bib0038","series-title":"Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining","first-page":"2623","article-title":"Optuna: a next-generation hyperparameter optimization framework","author":"Akiba","year":"2019"}],"container-title":["Information Fusion"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1566253526002770?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S1566253526002770?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,3]],"date-time":"2026-07-03T02:03:49Z","timestamp":1783044229000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S1566253526002770"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":38,"alternative-id":["S1566253526002770"],"URL":"https:\/\/doi.org\/10.1016\/j.inffus.2026.104398","relation":{},"ISSN":["1566-2535"],"issn-type":[{"value":"1566-2535","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Protocol -agnostic network traffic anomaly detection via structural-temporal decoupling and adaptive fusion","name":"articletitle","label":"Article Title"},{"value":"Information Fusion","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.inffus.2026.104398","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"104398"}}