{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T22:54:03Z","timestamp":1785884043092,"version":"3.56.0"},"reference-count":177,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,7,1]],"date-time":"2026-07-01T00:00:00Z","timestamp":1782864000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,6,5]],"date-time":"2026-06-05T00:00:00Z","timestamp":1780617600000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Internet of Things"],"published-print":{"date-parts":[[2026,7]]},"DOI":"10.1016\/j.iot.2026.101997","type":"journal-article","created":{"date-parts":[[2026,6,8]],"date-time":"2026-06-08T05:46:18Z","timestamp":1780897578000},"page":"101997","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["Adversarial attacks against network intrusion detection systems: Bridging the gap between theoretical vulnerabilities and practical constraints"],"prefix":"10.1016","volume":"38","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-2081-6125","authenticated-orcid":false,"given":"Md Mehedi","family":"Hasan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8317-5727","authenticated-orcid":false,"given":"Rafiqul","family":"Islam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2196-7651","authenticated-orcid":false,"given":"Quazi","family":"Mamun","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-4868-4945","authenticated-orcid":false,"given":"Md Zahidul","family":"Islam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9803-0256","authenticated-orcid":false,"given":"Junbin","family":"Gao","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0001","doi-asserted-by":"crossref","first-page":"30","DOI":"10.3390\/fi17010030","article-title":"A survey on cybersecurity in IoT","volume":"17","author":"Dritsas","year":"2025","journal-title":"Future Internet"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0002","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1186\/s42400-019-0038-7","article-title":"Survey of intrusion detection systems: techniques, datasets and challenges","volume":"2","author":"Khraisat","year":"2019","journal-title":"Cybersecurity"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0003","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3545574","article-title":"The role of machine learning in cybersecurity","volume":"4","author":"Apruzzese","year":"2023","journal-title":"Digit. Threats: Res. Pract."},{"key":"10.1016\/j.iot.2026.101997_bib0004","doi-asserted-by":"crossref","unstructured":"B. Biggio, F. Roli, Wild patterns: ten years after the rise of adversarial machine learning (2018) 2154\u20132156.","DOI":"10.1145\/3243734.3264418"},{"key":"10.1016\/j.iot.2026.101997_bib0005","unstructured":"C. Szegedy, W. Zaremba, I. Sutskever, J. Bruna, D. Erhan, I. Goodfellow, R. Fergus, Intriguing properties of neural networks, arXiv preprint arXiv: 1312.6199(2013)."},{"key":"10.1016\/j.iot.2026.101997_bib0006","doi-asserted-by":"crossref","first-page":"3225","DOI":"10.1109\/TIFS.2022.3201377","article-title":"Tantra: timing-based adversarial network traffic reshaping attack","volume":"17","author":"Sharon","year":"2022","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"2","key":"10.1016\/j.iot.2026.101997_bib0007","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3712307","article-title":"Deep packgen: a deep reinforcement learning framework for adversarial network packet generation","volume":"28","author":"Hore","year":"2025","journal-title":"ACM Trans. Priv. Secur."},{"key":"10.1016\/j.iot.2026.101997_bib0008","unstructured":"I.J. Goodfellow, J. Shlens, C. Szegedy, Explaining and harnessing adversarial examples, arXiv preprint arXiv: 1412.6572(2014)."},{"key":"10.1016\/j.iot.2026.101997_bib0009","doi-asserted-by":"crossref","first-page":"201","DOI":"10.1016\/j.ins.2013.03.022","article-title":"Adversarial attacks against intrusion detection systems: taxonomy, solutions and open issues","volume":"239","author":"Corona","year":"2013","journal-title":"Inf. Sci."},{"key":"10.1016\/j.iot.2026.101997_bib0010","doi-asserted-by":"crossref","unstructured":"F. Pierazzi, F. Pendlebury, J. Cortellazzi, L. Cavallaro, Intriguing properties of adversarial ml attacks in the problem space (2020) 1332\u20131349.","DOI":"10.1109\/SP40000.2020.00073"},{"key":"10.1016\/j.iot.2026.101997_bib0011","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2025.113546","article-title":"TransfficFormer: a novel transformer-based framework to generate evasive malicious traffic","volume":"319","author":"Du","year":"2025","journal-title":"Knowl.-Based Syst."},{"issue":"3","key":"10.1016\/j.iot.2026.101997_sbref0012","doi-asserted-by":"crossref","first-page":"2847","DOI":"10.1109\/TNSM.2024.3357316","article-title":"Constraining adversarial attacks on network intrusion detection systems: transferability and defense analysis","volume":"21","author":"Alhussien","year":"2024","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"10.1016\/j.iot.2026.101997_bib0013","doi-asserted-by":"crossref","first-page":"101574","DOI":"10.1109\/ACCESS.2021.3097247","article-title":"Deep learning-based intrusion detection systems: a systematic review","volume":"9","author":"Lansky","year":"2021","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101997_sbref0014","doi-asserted-by":"crossref","DOI":"10.1016\/j.cosrev.2020.100317","article-title":"Deep learning algorithms for cybersecurity applications: a technological and status review","volume":"39","author":"Dixit","year":"2021","journal-title":"Comput. Sci. Rev."},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0015","doi-asserted-by":"crossref","first-page":"1294","DOI":"10.1109\/TNET.2021.3137084","article-title":"Adversarial attacks against deep learning-based network intrusion detection systems and defense mechanisms","volume":"30","author":"Zhang","year":"2022","journal-title":"IEEE\/ACM Trans. Netw."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0016","doi-asserted-by":"crossref","first-page":"538","DOI":"10.1109\/COMST.2022.3233793","article-title":"Adversarial machine learning for network intrusion detection systems: a comprehensive survey","volume":"25","author":"He","year":"2023","journal-title":"Commun. Surveys Tuts."},{"issue":"10","key":"10.1016\/j.iot.2026.101997_bib0017","doi-asserted-by":"crossref","DOI":"10.3390\/computers12100209","article-title":"On the robustness of ML-based network intrusion detection systems: an adversarial and distribution shift perspective","volume":"12","author":"Wang","year":"2023","journal-title":"Computers"},{"key":"10.1016\/j.iot.2026.101997_bib0018","article-title":"NIDS-Vis: improving the generalized adversarial robustness of network intrusion detection system","volume":"145","author":"He","year":"2023","journal-title":"Comput. Secur."},{"issue":"2","key":"10.1016\/j.iot.2026.101997_bib0019","doi-asserted-by":"crossref","first-page":"62","DOI":"10.3390\/fi15020062","article-title":"Adversarial machine learning attacks against intrusion detection systems: a survey on strategies and defense","volume":"15","author":"Alotaibi","year":"2023","journal-title":"Future Internet"},{"key":"10.1016\/j.iot.2026.101997_bib0020","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.103988","article-title":"Adversarial machine learning in industry: a systematic literature review","volume":"145","author":"Jedrzejewski","year":"2024","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101997_sbref0021","doi-asserted-by":"crossref","first-page":"144489","DOI":"10.1109\/ACCESS.2024.3472907","article-title":"Machine learning in network intrusion detection: a cross-dataset generalization study","volume":"12","author":"Cantone","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101997_bib0022","doi-asserted-by":"crossref","unstructured":"K. Rani, S. Dhingra, A comprehensive survey of deep learning-based adversarial network intrusion detection systems (2025) 830\u2013837.","DOI":"10.1109\/ICIRCA65293.2025.11089572"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0023","doi-asserted-by":"crossref","DOI":"10.1038\/s41598-025-94023-z","article-title":"An enhanced ensemble defense framework for boosting adversarial robustness of intrusion detection systems","volume":"15","author":"Awad","year":"2025","journal-title":"Sci. Rep."},{"issue":"94","key":"10.1016\/j.iot.2026.101997_bib0024","first-page":"1","article-title":"Guide to intrusion detection and prevention systems (IDPS)","volume":"800","author":"Scarfone","year":"2007","journal-title":"NIST Spec. Publ."},{"key":"10.1016\/j.iot.2026.101997_bib0025","doi-asserted-by":"crossref","unstructured":"A.K. Dalai, S.K. Jena, Hybrid network intrusion detection systems: a decade\u2019s perspective (2016) 341\u2013349.","DOI":"10.1007\/978-81-322-3592-7_35"},{"key":"10.1016\/j.iot.2026.101997_bib0026","unstructured":"M. Roesch, et al., Snort: lightweight intrusion detection for networks, 1999."},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0027","doi-asserted-by":"crossref","first-page":"3900","DOI":"10.1109\/TNSM.2023.3251282","article-title":"Automated, reliable zero-day malware detection based on autoencoding architecture","volume":"20","author":"Kim","year":"2023","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0028","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1541880.1541882","article-title":"Anomaly detection: a survey","volume":"41","author":"Chandola","year":"2009","journal-title":"ACM Comput. Surv."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0029","doi-asserted-by":"crossref","first-page":"111","DOI":"10.1007\/s40745-015-0035-y","article-title":"Novel approach for network traffic pattern analysis using clustering-based collective anomaly detection","volume":"2","author":"Ahmed","year":"2015","journal-title":"Ann. Data Sci."},{"issue":"2","key":"10.1016\/j.iot.2026.101997_bib0030","doi-asserted-by":"crossref","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","article-title":"A survey of data mining and machine learning methods for cyber security intrusion detection","volume":"18","author":"Buczak","year":"2015","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.iot.2026.101997_bib0031","doi-asserted-by":"crossref","first-page":"41525","DOI":"10.1109\/ACCESS.2019.2895334","article-title":"Deep learning approach for intelligent intrusion detection system","volume":"7","author":"Vinayakumar","year":"2019","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101997_bib0032","doi-asserted-by":"crossref","unstructured":"S. Mohandas, N. Manwani, D.P. Dhulipudi, Momentum iterative gradient sign method outperforms PGD attacks (2022) 913\u2013916.","DOI":"10.5220\/0010938400003116"},{"key":"10.1016\/j.iot.2026.101997_bib0033","doi-asserted-by":"crossref","unstructured":"N. Carlini, D. Wagner, Towards evaluating the robustness of neural networks(2017) 39\u201357.","DOI":"10.1109\/SP.2017.49"},{"key":"10.1016\/j.iot.2026.101997_bib0034","doi-asserted-by":"crossref","unstructured":"P.-Y. Chen, H. Zhang, Y. Sharma, J. Yi, C.-J. Hsieh, Zoo: zeroth order optimization based black-box attacks to deep neural networks without training substitute models(2017) 15\u201326.","DOI":"10.1145\/3128572.3140448"},{"key":"10.1016\/j.iot.2026.101997_bib0035","unstructured":"N. Papernot, P. McDaniel, I. Goodfellow, Transferability in machine learning: from phenomena to black-box attacks using adversarial samples, arXiv preprint arXiv: 1605.07277."},{"key":"10.1016\/j.iot.2026.101997_bib0036","doi-asserted-by":"crossref","unstructured":"M. Usama, M. Asim, S. Latif, J. Qadir, et al., Generative adversarial networks for launching and thwarting adversarial attacks on network intrusion detection systems(2019) 78\u201383.","DOI":"10.1109\/IWCMC.2019.8766353"},{"key":"10.1016\/j.iot.2026.101997_bib0037","doi-asserted-by":"crossref","unstructured":"P. Varga, G. Kathareios, \u00c1. M\u00e1t\u00e9, R. Clauberg, A. Anghel, P. Orosz, B. Nagy, T. T\u00f3thfalusi, L. Kov\u00e1cs, M. Gusat, Real-time security services for SDN-based datacenters (2017) 1\u20139.","DOI":"10.23919\/CNSM.2017.8256030"},{"key":"10.1016\/j.iot.2026.101997_bib0038","doi-asserted-by":"crossref","unstructured":"T. Seshapriyan, S.M. Dinesh, J.G. Ponsam, SentinelScan: advanced network scanner and packet detection suite (2024) 253\u2013258.","DOI":"10.1109\/ICISC62624.2024.00050"},{"key":"10.1016\/j.iot.2026.101997_bib0039","unstructured":"H. Xu, P. He, J. Ren, Y. Wan, Z. Liu, H. Liu, J. Tang, Probabilistic categorical adversarial attack and adversarial training (2023) 38428\u201338442."},{"key":"10.1016\/j.iot.2026.101997_sbref0040","doi-asserted-by":"crossref","first-page":"476","DOI":"10.1109\/MMAR62187.2024.10680816","article-title":"Acceptance tests of BIM models using the IDS standards within openBIM","author":"Owerko","year":"2024","journal-title":"2024 28th Int. Conf. Methods Models Autom. Robot."},{"key":"10.1016\/j.iot.2026.101997_bib0041","doi-asserted-by":"crossref","unstructured":"S.-M. Moosavi-Dezfooli, A. Fawzi, P. Frossard, Deepfool: a simple and accurate method to fool deep neural networks (2016) 2574\u20132582.","DOI":"10.1109\/CVPR.2016.282"},{"issue":"4","key":"10.1016\/j.iot.2026.101997_bib0042","doi-asserted-by":"crossref","first-page":"558","DOI":"10.3390\/make2040030","article-title":"Probabilistic jacobian-based saliency maps attacks","volume":"2","author":"Combey","year":"2020","journal-title":"Mach. Learn. Knowl. Extr."},{"key":"10.1016\/j.iot.2026.101997_bib0043","doi-asserted-by":"crossref","first-page":"84992","DOI":"10.1109\/ACCESS.2025.3567038","article-title":"Adversarial threats to cloud IDS: robust defense with adversarial training and feature selection","volume":"13","author":"Holla","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101997_bib0044","doi-asserted-by":"crossref","unstructured":"Y. Dong, F. Liao, T. Pang, H. Su, J. Zhu, X. Hu, J. Li, Boosting adversarial attacks with momentum(2018) 9185\u20139193. 10.1109\/CVPR.2018.00957.","DOI":"10.1109\/CVPR.2018.00957"},{"issue":"5","key":"10.1016\/j.iot.2026.101997_bib0045","doi-asserted-by":"crossref","first-page":"5090","DOI":"10.1109\/TDSC.2025.3560486","article-title":"Explainable and transferable adversarial attack for ml-based network intrusion detectors","volume":"22","author":"Zhang","year":"2025","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"10.1016\/j.iot.2026.101997_sbref0046","series-title":"Proceedings of the 35th International Conference on Machine Learning","first-page":"2137","article-title":"Black-box adversarial attacks with limited queries and information","volume":"80","author":"Ilyas","year":"2018"},{"key":"10.1016\/j.iot.2026.101997_bib0047","unstructured":"W. Brendel, J. Rauber, M. Bethge, Decision-based adversarial attacks: Reliable attacks against black-box machine learning models, arXiv preprint arXiv: 1712.04248(2017)."},{"key":"10.1016\/j.iot.2026.101997_bib0048","doi-asserted-by":"crossref","unstructured":"J. Chen, M.I. Jordan, M.J. Wainwright, HopSkipJumpAttack: a query-efficient decision-Based attack (2020) 1277\u20131294. 10.1109\/SP40000.2020.00045.","DOI":"10.1109\/SP40000.2020.00045"},{"key":"10.1016\/j.iot.2026.101997_bib0049","doi-asserted-by":"crossref","unstructured":"W. Hu, Y. Tan, Generating adversarial malware examples for black-box attacks based on GAN (2022) 409\u2013423.","DOI":"10.1007\/978-981-19-8991-9_29"},{"key":"10.1016\/j.iot.2026.101997_bib0050","doi-asserted-by":"crossref","unstructured":"L. Yu, W. Zhang, J. Wang, Y. Yu, SeqGAN: sequence generative adversarial nets with policy gradient (2017) 2852\u20132858.","DOI":"10.1609\/aaai.v31i1.10804"},{"key":"10.1016\/j.iot.2026.101997_bib0051","doi-asserted-by":"crossref","unstructured":"Z. Lin, Y. Shi, Z. Xue, IDSGAN: generative adversarial networks for attack generation against intrusion detection (2022) 79\u201391. 10.1007\/978-3-031-05981-0_7.","DOI":"10.1007\/978-3-031-05981-0_7"},{"key":"10.1016\/j.iot.2026.101997_bib0052","unstructured":"I. Gulrajani, F. Ahmed, M. Arjovsky, V. Dumoulin, A. Courville, Improved training of wasserstein GANs(2017) 5769\u20135779."},{"key":"10.1016\/j.iot.2026.101997_bib0053","doi-asserted-by":"crossref","unstructured":"S. Cai, W. Zhao, H. Tang, J. Chen, W. Guo, CGSA-RNN: abnormal network traffic detection model based on CycleGAN and self-attention mechanism (2023) 541\u2013549. 10.1109\/QRS60937.2023.00059.","DOI":"10.1109\/QRS60937.2023.00059"},{"key":"10.1016\/j.iot.2026.101997_sbref0054","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2021.115782","article-title":"Adversarial machine learning in network intrusion detection systems","volume":"186","author":"Alhajjar","year":"2021","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.iot.2026.101997_bib0055","doi-asserted-by":"crossref","unstructured":"B. Hitaj, P. Gasti, G. Ateniese, F. Perez-Cruz, PassGAN: a deep learning approach for password guessing (2019) 217\u2013237. 10.1007\/978-3-030-21568-2_11.","DOI":"10.1007\/978-3-030-21568-2_11"},{"key":"10.1016\/j.iot.2026.101997_bib0056","first-page":"2672","article-title":"Generative adversarial nets","volume":"27","author":"Goodfellow","year":"2014","journal-title":"Adv. Neural Inf. Process. Syst."},{"issue":"12","key":"10.1016\/j.iot.2026.101997_bib0057","doi-asserted-by":"crossref","first-page":"1923","DOI":"10.3390\/math13121923","article-title":"Enhanced intrusion detection using conditional-tabular-generative-adversarial-network-augmented data and a convolutional neural network: a robust approach to addressing imbalanced cybersecurity datasets","volume":"13","author":"Allagi","year":"2025","journal-title":"Mathematics"},{"key":"10.1016\/j.iot.2026.101997_bib0058","doi-asserted-by":"crossref","unstructured":"I. Tsingenopoulos, D. Preuveneers, W. Joosen, AutoAttacker: a reinforcement learning approach for black-box adversarial attacks (2019) 229\u2013237. 10.1109\/EuroSPW.2019.00032.","DOI":"10.1109\/EuroSPW.2019.00032"},{"key":"10.1016\/j.iot.2026.101997_bib0059","series-title":"2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom)","first-page":"2436","article-title":"A defensive framework against adversarial attacks on machine learning-based network intrusion detection systems","author":"Tafreshian","year":"2024"},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0060","doi-asserted-by":"crossref","DOI":"10.3390\/electronics8030322","article-title":"Features dimensionality reduction approaches for machine learning based network intrusion detection","volume":"8","author":"Abdulhammed","year":"2019","journal-title":"Electronics"},{"key":"10.1016\/j.iot.2026.101997_bib0061","article-title":"Evolutionary algorithms for solving multi-objective problems","author":"Coello","year":"2007","journal-title":"Springer Sci. Bus. Media"},{"issue":"6","key":"10.1016\/j.iot.2026.101997_bib0062","doi-asserted-by":"crossref","DOI":"10.3390\/sym12061046","article-title":"A feature selection model for network intrusion detection system based on PSO, GWO, FFA and GA algorithms","volume":"12","author":"Almomani","year":"2020","journal-title":"Symmetry"},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0063","doi-asserted-by":"crossref","first-page":"161","DOI":"10.1007\/s12083-025-01947-4","article-title":"A feature selection-driven machine learning framework for anomaly-based intrusion detection systems","volume":"18","author":"Emirmahmuto\u011flu","year":"2025","journal-title":"Peer-to-Peer Netw. Appl."},{"key":"10.1016\/j.iot.2026.101997_sbref0064","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104515","article-title":"ARLHNIDS-IoT: an accurate and robust lightweight hybrid-NIDS for IoT network security","volume":"156","author":"Srivastava","year":"2025","journal-title":"Comput. Secur."},{"issue":"2","key":"10.1016\/j.iot.2026.101997_bib0065","doi-asserted-by":"crossref","first-page":"182","DOI":"10.1109\/4235.996017","article-title":"A fast and elitist multiobjective genetic algorithm: NSGA-II","volume":"6","author":"Deb","year":"2002","journal-title":"IEEE Trans. Evol. Comput."},{"key":"10.1016\/j.iot.2026.101997_bib0066","unstructured":"A. Kurakin, D. Boneh, F. Tram\u00e9r, I. Goodfellow, N. Papernot, P. McDaniel, Ensemble adversarial training: attacks and defenses(2018). https:\/\/openreview.net\/pdf?id=rkZvSe-RZ."},{"key":"10.1016\/j.iot.2026.101997_bib0067","series-title":"Proceedings of the First Workshop on Hot Topics in Software Defined Networks","first-page":"127","article-title":"OpenFlow random host mutation: transparent moving target defense using software defined networking","author":"Jafarian","year":"2012"},{"key":"10.1016\/j.iot.2026.101997_bib0068","unstructured":"M. Rigaki, Adversarial deep learning against intrusion detection classifiers (2017)."},{"key":"10.1016\/j.iot.2026.101997_bib0069","unstructured":"X. Ma, B. Li, Y. Wang, S.M. Erfani, S. Wijewickrema, G. Schoenebeck, D. Song, M.E. Houle, J. Bailey, Characterizing adversarial subspaces using local intrinsic dimensionality, arXiv preprint arXiv: 1801.02613(2018)."},{"key":"10.1016\/j.iot.2026.101997_bib0070","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104005","article-title":"Enhancing network intrusion detection performance using generative adversarial networks","volume":"145","author":"Zhao","year":"2024","journal-title":"Comput. Secur."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0071","doi-asserted-by":"crossref","first-page":"35","DOI":"10.1186\/s42400-023-00171-y","article-title":"FMSA: a meta-learning framework-based fast model stealing attack technique against intelligent network intrusion detection systems","volume":"6","author":"Fan","year":"2023","journal-title":"Cybersecurity"},{"issue":"2","key":"10.1016\/j.iot.2026.101997_bib0072","doi-asserted-by":"crossref","DOI":"10.3390\/s24020479","article-title":"Methodology for the detection of contaminated training datasets for machine learning-Based network intrusion-Detection systems","volume":"24","author":"Medina-Arco","year":"2024","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101997_bib0073","series-title":"Computer Security \u2013 ESORICS 2020","first-page":"480","article-title":"Data poisoning attacks against federated learning systems","author":"Tolpegin","year":"2020"},{"key":"10.1016\/j.iot.2026.101997_sbref0074","doi-asserted-by":"crossref","first-page":"701","DOI":"10.1109\/ICESC54411.2022.9885569","article-title":"Network security with network intrusion detection system using machine learning deployed in a cloud infrastructure","author":"Kaushik","year":"2022","journal-title":"2022 3rd Int. Conf. Electron. Sustain. Commun. Syst."},{"key":"10.1016\/j.iot.2026.101997_bib0075","first-page":"7333","article-title":"Modeling tabular data using conditional GAN","volume":"32","author":"Xu","year":"2019","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.iot.2026.101997_bib0076","unstructured":"J.H. Metzen, T. Genewein, V. Fischer, B. Bischoff, On detecting adversarial perturbations, arXiv preprint arXiv: 1702.04267(2017)."},{"key":"10.1016\/j.iot.2026.101997_bib0077","series-title":"2017 IEEE International Conference on Computer Vision (ICCV)","first-page":"5775","article-title":"Adversarial examples detection in deep networks with convolutional filter statistics","author":"Li","year":"2017"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0078","doi-asserted-by":"crossref","DOI":"10.1038\/s41598-025-12775-0","article-title":"An optimized anomaly detection framework in industrial control systems through grey wolf optimizer and autoencoder integration","volume":"15","author":"Aslam","year":"2025","journal-title":"Sci. Rep."},{"key":"10.1016\/j.iot.2026.101997_bib0079","series-title":"Proceedings of the 10th ACM Workshop on Artificial Intelligence and Security","first-page":"3","article-title":"Adversarial examples are not easily detected: bypassing ten detection methods","author":"Carlini","year":"2017"},{"key":"10.1016\/j.iot.2026.101997_bib0080","unstructured":"Y. Song, T. Kim, S. Nowozin, S. Ermon, N. Kushman, PixelDefend: leveraging generative models to understand and defend against adversarial examples, arXiv preprint arXiv: 1710.10766 (2017)."},{"key":"10.1016\/j.iot.2026.101997_bib0081","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2025.126513","article-title":"NIDS-DA: detecting functionally preserved adversarial examples for network intrusion detection system using deep autoencoders","volume":"270","author":"Kumar","year":"2025","journal-title":"Expert Syst. Appl."},{"key":"10.1016\/j.iot.2026.101997_sbref0082","article-title":"RAIDS: robust autoencoder-based intrusion detection system model against adversarial attacks","volume":"135","year":"2023","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101997_bib0083","doi-asserted-by":"crossref","DOI":"10.1016\/j.neunet.2024.106276","article-title":"A dual robust graph neural network against graph adversarial attacks","volume":"175","author":"Tao","year":"2024","journal-title":"Neural Netw."},{"key":"10.1016\/j.iot.2026.101997_bib0084","doi-asserted-by":"crossref","DOI":"10.1016\/j.engappai.2025.110546","article-title":"Graph neural networks with scattering transform for network anomaly detection","volume":"150","author":"Zoubir","year":"2025","journal-title":"Eng. Appl. Artif. Intell."},{"key":"10.1016\/j.iot.2026.101997_bib0085","first-page":"1024","article-title":"Inductive representation learning on large graphs","volume":"30","author":"Hamilton","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.iot.2026.101997_bib0086","unstructured":"H. Zhang, Y. Yu, J. Jiao, E. Xing, L. El Ghaoui, M. Jordan, Theoretically principled trade-off between robustness and accuracy (2019) 7472\u20137482."},{"key":"10.1016\/j.iot.2026.101997_bib0087","unstructured":"Y. Wang, D. Zou, J. Yi, J. Bailey, X. Ma, Q. Gu, Improving adversarial robustness requires revisiting misclassified examples (2019)."},{"key":"10.1016\/j.iot.2026.101997_bib0088","unstructured":"R. Feinman, R.R. Curtin, S. Shintre, A.B. Gardner, Detecting adversarial samples from artifacts in deep neural networks, arXiv preprint arXiv: 1703.00410(2017)."},{"key":"10.1016\/j.iot.2026.101997_bib0089","series-title":"Proc. 2017 ACM SIGSAC Conf. Comput. Commun. Secur.","first-page":"135","article-title":"MagNet: a two-pronged defense against adversarial examples","author":"Meng","year":"2017"},{"key":"10.1016\/j.iot.2026.101997_bib0090","article-title":"A novel perturb-ability score to mitigate evasion adversarial attacks on flow-based ML-NIDS","volume":"99","author":"ElShehaby","year":"2026","journal-title":"J. Inf. Secur. Appl."},{"key":"10.1016\/j.iot.2026.101997_bib0091","doi-asserted-by":"crossref","unstructured":"D. Z\u00fcgner, A. Akbarnejad, S. G\u00fcnnemann, Adversarial attacks on neural networks for graph data (2018) 2847\u20132856.","DOI":"10.1145\/3219819.3220078"},{"key":"10.1016\/j.iot.2026.101997_bib0092","unstructured":"Y. Gal, Z. Ghahramani, Dropout as a bayesian approximation: representing model uncertainty in deep learning (2016) 1050\u20131059."},{"issue":"4","key":"10.1016\/j.iot.2026.101997_bib0093","doi-asserted-by":"crossref","first-page":"571","DOI":"10.24425\/ijet.2019.129814","article-title":"Network topology mutation as moving target defense for corporate networks","volume":"65","author":"Rawski","year":"2019","journal-title":"Int. J. Electron. Telecommun."},{"key":"10.1016\/j.iot.2026.101997_bib0094","doi-asserted-by":"crossref","first-page":"154","DOI":"10.1016\/j.future.2022.04.010","article-title":"SecFedNIDS: robust defense for poisoning attack against federated learning-based network intrusion detection system","volume":"134","author":"Zhang","year":"2022","journal-title":"Future Gener. Comput. Syst."},{"issue":"20","key":"10.1016\/j.iot.2026.101997_bib0095","doi-asserted-by":"crossref","first-page":"3194","DOI":"10.3390\/math12203194","article-title":"Privacy-preserving federated learning-based intrusion detection technique for cyber-physical systems","volume":"12","author":"Mahmud","year":"2024","journal-title":"Mathematics"},{"key":"10.1016\/j.iot.2026.101997_bib0096","first-page":"119","article-title":"Machine learning with adversaries: byzantine tolerant gradient descent","volume":"30","author":"Blanchard","year":"2017","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.iot.2026.101997_bib0097","doi-asserted-by":"crossref","first-page":"4561","DOI":"10.1109\/TIFS.2023.3297369","article-title":"FedDef: defense against gradient leakage in federated learning-based network intrusion detection systems","volume":"18","author":"Chen","year":"2023","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0098","doi-asserted-by":"crossref","first-page":"127","DOI":"10.3390\/s24010127","article-title":"Enhancing network intrusion detection using an ensemble voting classifier for internet of things","volume":"24","author":"Farooqi","year":"2023","journal-title":"Sensors"},{"key":"10.1016\/j.iot.2026.101997_sbref0099","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104289","article-title":"Optimizing network security: weighted average ensemble of BPNN and RELM in EPRN-WPS intrusion detection","volume":"150","author":"Pavithra","year":"2025","journal-title":"Comput. Secur."},{"key":"10.1016\/j.iot.2026.101997_bib0100","doi-asserted-by":"crossref","DOI":"10.1016\/j.adhoc.2025.103982","article-title":"Hierarchical classification for intrusion detection system: effective design and empirical analysis","volume":"178","author":"Uddin","year":"2025","journal-title":"Ad Hoc Netw."},{"key":"10.1016\/j.iot.2026.101997_bib0101","series-title":"Proceedings of the 2020ACM SIGSAC Conference on Cloud Computing Security Workshop","first-page":"27","article-title":"Tiki-Taka: attacking and defending deep learning-based intrusion detection systems","author":"Zhang","year":"2020"},{"key":"10.1016\/j.iot.2026.101997_bib0102","unstructured":"J. Cohen, E. Rosenfeld, Z. Kolter, Certified adversarial robustness via randomized smoothing (2019) 1310\u20131320."},{"key":"10.1016\/j.iot.2026.101997_bib0103","unstructured":"S. Gowal, K. Dvijotham, R. Stanforth, R. Bunel, C. Qin, J. Uesato, R. Arandjelovic, T. Mann, P. Kohli, On the effectiveness of interval bound propagation for training verifiably robust models, arXiv preprint arXiv: 1810.12715(2018)."},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0104","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2480741.2480742","article-title":"Game theory meets network security and privacy","volume":"45","author":"Manshaei","year":"2013","journal-title":"Acm Comput. Surv."},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0105","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/1516512.1516516","article-title":"Settling the complexity of computing two-player nash equilibria","volume":"56","author":"Chen","year":"2009","journal-title":"J. ACM"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0106","doi-asserted-by":"crossref","first-page":"6420","DOI":"10.1038\/s41598-024-56259-z","article-title":"Defense against adversarial attacks: robust and efficient compressed optimized neural networks","volume":"14","author":"Kraidia","year":"2024","journal-title":"Sci. Rep."},{"issue":"9","key":"10.1016\/j.iot.2026.101997_bib0107","doi-asserted-by":"crossref","first-page":"5012","DOI":"10.3390\/app15095012","article-title":"Design of a heterogeneous-based network intrusion detection system and compiler","volume":"15","author":"Lin","year":"2025","journal-title":"Appl. Sci."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0108","doi-asserted-by":"crossref","first-page":"1916","DOI":"10.1038\/s41598-024-81147-x","article-title":"Enhanced grey wolf optimization (EGWO) and random forest based mechanism for intrusion detection in IoT networks","volume":"15","author":"Alqahtany","year":"2025","journal-title":"Sci. Rep."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0109","doi-asserted-by":"crossref","first-page":"61","DOI":"10.1109\/TNN.2008.2005605","article-title":"The graph neural network model","volume":"20","author":"Scarselli","year":"2008","journal-title":"IEEE Trans. Neural Netw."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0110","doi-asserted-by":"crossref","first-page":"207","DOI":"10.1007\/s11390-019-1906-z","article-title":"A survey on the moving target defense strategies: an architectural perspective","volume":"34","author":"Zheng","year":"2019","journal-title":"J. Comput. Sci. Technol."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0111","doi-asserted-by":"crossref","first-page":"709","DOI":"10.1109\/COMST.2019.2963791","article-title":"Toward proactive, adaptive defense: a survey on moving target defense","volume":"22","author":"Cho","year":"2020","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.iot.2026.101997_bib0112","series-title":"2016 International Conference on Computing, Networking and Communications (ICNC)","first-page":"1","article-title":"Frequency-minimal moving target defense using software-defined networking","author":"Debroy","year":"2016"},{"key":"10.1016\/j.iot.2026.101997_sbref0113","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2025.111711","article-title":"A comprehensive survey of DDoS attack defense systems for different SDN architectures","volume":"272","author":"Sinha","year":"2025","journal-title":"Comput. Netw."},{"issue":"18","key":"10.1016\/j.iot.2026.101997_bib0114","doi-asserted-by":"crossref","first-page":"2886","DOI":"10.3390\/electronics11182886","article-title":"A survey on moving target defense for networks: a practical view","volume":"11","author":"Jalowski","year":"2022","journal-title":"Electronics"},{"key":"10.1016\/j.iot.2026.101997_bib0115","doi-asserted-by":"crossref","unstructured":"Q. Zhu, T. Ba\u015far, Game-theoretic approach to feedback-driven multi-stage moving target defense (2013) 246\u2013263.","DOI":"10.1007\/978-3-319-02786-9_15"},{"issue":"C","key":"10.1016\/j.iot.2026.101997_bib0116","article-title":"A survey: when moving target defense meets game theory","volume":"48","author":"Tan","year":"2023","journal-title":"Comput. Sci. Rev."},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0117","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1109\/MSP.2020.2975749","article-title":"Federated learning: challenges, methods, and future directions","volume":"37","author":"Li","year":"2020","journal-title":"IEEE Signal Process. Mag."},{"key":"10.1016\/j.iot.2026.101997_bib0118","doi-asserted-by":"crossref","first-page":"619","DOI":"10.1016\/j.future.2020.10.007","article-title":"A survey on security and privacy of federated learning","volume":"115","author":"Mothukuri","year":"2021","journal-title":"Future Gener. Comput. Syst."},{"issue":"1\u20132","key":"10.1016\/j.iot.2026.101997_bib0119","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1561\/2200000083","article-title":"Advances and open problems in federated learning","volume":"14","author":"Kairouz","year":"2021","journal-title":"Found. Trends Mach. Learn."},{"issue":"2","key":"10.1016\/j.iot.2026.101997_sbref0120","doi-asserted-by":"crossref","first-page":"401","DOI":"10.1016\/j.dcan.2024.02.001","article-title":"APFed: Adaptive personalized federated learning for intrusion detection in maritime meteorological sensor networks","volume":"11","author":"Su","year":"2025","journal-title":"Digit. Commun. Netw."},{"issue":"5","key":"10.1016\/j.iot.2026.101997_bib0121","doi-asserted-by":"crossref","first-page":"38","DOI":"10.1109\/MSP.2018.3761723","article-title":"Cybersecurity in an era with quantum computers: will we be ready?","volume":"16","author":"Mosca","year":"2018","journal-title":"IEEE Secur. Priv."},{"key":"10.1016\/j.iot.2026.101997_bib0122","first-page":"1633","article-title":"On adaptive attacks to adversarial example defenses","volume":"33","author":"Tramer","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.iot.2026.101997_bib0123","unstructured":"N. Carlini, A. Athalye, N. Papernot, W. Brendel, J. Rauber, D. Tsipras, I. Goodfellow, A. Madry, D. Wagner, On evaluating adversarial robustness, arXiv preprint arXiv: 1902.06705(2019)."},{"issue":"4","key":"10.1016\/j.iot.2026.101997_bib0124","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3337772","article-title":"A game-theoretic taxonomy and survey of defensive deception for cybersecurity and privacy","volume":"52","author":"Pawlick","year":"2019","journal-title":"ACM Comput. Surv."},{"key":"10.1016\/j.iot.2026.101997_bib0125","series-title":"Proceedings of the 2017 ACM on Asia Conference on Computer and Communications Security","first-page":"506","article-title":"Practical black-box attacks against machine learning","author":"Papernot","year":"2017"},{"key":"10.1016\/j.iot.2026.101997_bib0126","doi-asserted-by":"crossref","first-page":"9998","DOI":"10.1109\/ACCESS.2019.2891613","article-title":"Effectiveness evaluation model of moving target defense based on system attack surface","volume":"7","author":"Xiong","year":"2019","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101997_bib0127","series-title":"Proceedings of the 2010 43rd Hawaii International Conference on System Sciences","first-page":"1","article-title":"A survey of game theory as applied to network security","author":"Roy","year":"2010"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0128","doi-asserted-by":"crossref","first-page":"472","DOI":"10.1109\/SURV.2012.062612.00056","article-title":"Game theory for network security","volume":"15","author":"Liang","year":"2012","journal-title":"IEEE Commun. Surv. Tutor."},{"key":"10.1016\/j.iot.2026.101997_sbref0129","series-title":"Security and game theory: algorithms, deployed systems, lessons learned","author":"Tambe","year":"2011"},{"key":"10.1016\/j.iot.2026.101997_bib0130","series-title":"Proceedings of the Twenty-Fourth AAAI Conference on Artificial Intelligence","first-page":"805","article-title":"Complexity of computing optimal Stackelberg strategies in security resource allocation games","author":"Korzhyk","year":"2010"},{"key":"10.1016\/j.iot.2026.101997_sbref0131","article-title":"Equilibrium points in N-Person games","volume":"36 1","author":"Nash","year":"1950","journal-title":"Proc. Natl. Acad. Sci. U. S. a."},{"key":"10.1016\/j.iot.2026.101997_sbref0132","series-title":"An analysis of stochastic game theory for multiagent reinforcement learning","author":"Bowling","year":"2000"},{"issue":"9","key":"10.1016\/j.iot.2026.101997_bib0133","first-page":"5149","article-title":"Meta-learning in neural networks: a survey","volume":"44","author":"Hospedales","year":"2022","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"key":"10.1016\/j.iot.2026.101997_bib0134","series-title":"Proceedings of the 34th International Conference on Machine Learning - Volume 70","first-page":"1126","article-title":"Model-agnostic meta-learning for fast adaptation of deep networks","author":"Finn","year":"2017"},{"key":"10.1016\/j.iot.2026.101997_bib0135","first-page":"113","article-title":"Meta-learning with implicit gradients","volume":"32","author":"Rajeswaran","year":"2019","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"10.1016\/j.iot.2026.101997_bib0136","doi-asserted-by":"crossref","first-page":"54","DOI":"10.1016\/j.neunet.2019.01.012","article-title":"Continual lifelong learning with neural networks: a review","volume":"113","author":"Parisi","year":"2019","journal-title":"Neural Netw."},{"issue":"13","key":"10.1016\/j.iot.2026.101997_bib0137","doi-asserted-by":"crossref","first-page":"3521","DOI":"10.1073\/pnas.1611835114","article-title":"Overcoming catastrophic forgetting in neural networks","volume":"114","author":"Kirkpatrick","year":"2017","journal-title":"Proc. Natl. Acad. Sci."},{"key":"10.1016\/j.iot.2026.101997_bib0138","series-title":"Proceedings of the 4th International Conference on Information Systems Security and Privacy - ICISSP","first-page":"108","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","author":"Sharafaldin","year":"2018"},{"key":"10.1016\/j.iot.2026.101997_bib0139","doi-asserted-by":"crossref","unstructured":"L. Liu, G. Engelen, T. Lynar, D. Essam, W. Joosen, Error prevalence in NIDS datasets: a case study on CIC-IDS-2017 and CSE-CIC-IDS-2018 (2022) 254\u2013262. 10.1109\/CNS56114.2022.9947235.","DOI":"10.1109\/CNS56114.2022.9947235"},{"key":"10.1016\/j.iot.2026.101997_bib0140","series-title":"Mil. Commun. Inf. Syst. Conf.2015 Military Communications and Information Systems Conference (MilCIS)","first-page":"1","article-title":"UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)","author":"Moustafa","year":"2015"},{"key":"10.1016\/j.iot.2026.101997_bib0141","series-title":"2009 IEEE Symposium on Computational Intelligence for Security and Defense Applications (CISDA)","article-title":"A detailed analysis of the KDD CUP 99 data set","author":"Tavallaee","year":"2009"},{"key":"10.1016\/j.iot.2026.101997_bib0142","doi-asserted-by":"crossref","unstructured":"T. Seidler, M. Abel, Transition of model performance in dependence of the amount of data corruption with respect to network sizes(2024) 1084\u20131091. 10.5220\/0012435000003636.","DOI":"10.5220\/0012435000003636"},{"key":"10.1016\/j.iot.2026.101997_sbref0143","doi-asserted-by":"crossref","first-page":"50","DOI":"10.1109\/IEEEDATA.2024.3482286","article-title":"Meta: toward a unified, multimodal dataset for network intrusion detection systems","volume":"1","author":"Wali","year":"2024","journal-title":"IEEE Data Descr."},{"key":"10.1016\/j.iot.2026.101997_bib0144","doi-asserted-by":"crossref","unstructured":"M. Mohsin, A.I. Jony, A comparative analysis of medical iot device attacks using machine learning models, 2024. 10.56532\/mjsat.v4i4.318.","DOI":"10.56532\/mjsat.v4i4.318"},{"key":"10.1016\/j.iot.2026.101997_sbref0145","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2023.100819","article-title":"Intrusion detection system for large-scale IoT NetFlow networks using machine learning with modified arithmetic optimization algorithm","volume":"22","author":"Fraihat","year":"2023","journal-title":"Internet Things"},{"key":"10.1016\/j.iot.2026.101997_bib0146","unstructured":"S. Samarakoon, Y. Siriwardhana, P. Porambage, M. Liyanage, S.-Y. Chang, J. Kim, J.-H. Kim, M. Ylianttila, 5G-NIDD: a comprehensive network intrusion detection dataset generated over 5g wireless network, arxiv: 2212.01298(2022). https:\/\/api.semanticscholar.org\/CorpusID:254221144."},{"key":"10.1016\/j.iot.2026.101997_sbref0147","doi-asserted-by":"crossref","first-page":"539","DOI":"10.1109\/ICECA55336.2022.10009070","article-title":"TON-IoT: detection of attacks on internet of things in vehicular networks","author":"Sharma","year":"2022","journal-title":"2022 6th Int. Conf. Electron. Commun. Aerosp. Technol."},{"key":"10.1016\/j.iot.2026.101997_sbref0148","article-title":"Edge-IIoTset: a new comprehensive realistic cyber security dataset of IoT and IIoT applications for centralized and federated learning","volume":"PP","author":"Ferrag","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101997_bib0149","doi-asserted-by":"crossref","unstructured":"D.L. Applegate, T. Dasu, S. Krishnan, S. Urbanek, Unsupervised clustering of multidimensional distributions using earth mover distance (2011). https:\/\/api.semanticscholar.org\/CorpusID:17034073.","DOI":"10.1145\/2020408.2020508"},{"key":"10.1016\/j.iot.2026.101997_sbref0150","doi-asserted-by":"crossref","first-page":"59289","DOI":"10.1109\/ACCESS.2024.3392338","article-title":"From bytes to insights: a systematic literature review on unraveling IDS datasets for enhanced cybersecurity understanding","volume":"12","author":"Khanan","year":"2024","journal-title":"IEEE Access"},{"issue":"9","key":"10.1016\/j.iot.2026.101997_bib0151","doi-asserted-by":"crossref","first-page":"1294","DOI":"10.3390\/math12091294","article-title":"Improvement of distributed denial of service attack detection through machine learning and data processing","volume":"12","author":"Becerra-Suarez","year":"2024","journal-title":"Mathematics"},{"key":"10.1016\/j.iot.2026.101997_bib0152","doi-asserted-by":"crossref","first-page":"148613","DOI":"10.1109\/ACCESS.2025.3600984","article-title":"Adversarial challenges in network intrusion detection systems: research insights and future prospects","volume":"13","author":"Ennaji","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.iot.2026.101997_sbref0153","doi-asserted-by":"crossref","first-page":"14438","DOI":"10.1109\/JIOT.2021.3078292","article-title":"Stacked autoencoder-based probabilistic feature extraction for on-device network intrusion detection","volume":"9","author":"Dao","year":"2022","journal-title":"IEEE Internet Things J."},{"key":"10.1016\/j.iot.2026.101997_bib0154","series-title":"Proceedings of the 25th International Conference on Machine Learning","first-page":"1096","article-title":"Extracting and composing robust features with denoising autoencoders","author":"Vincent","year":"2008"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0155","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1007\/s10922-022-09698-w","article-title":"Network intrusion detection system based on an adversarial auto-encoder with few labeled training samples","volume":"31","author":"Shiomoto","year":"2023","journal-title":"J. Netw. Syst. Manag."},{"issue":"6","key":"10.1016\/j.iot.2026.101997_bib0156","doi-asserted-by":"crossref","first-page":"73","DOI":"10.3390\/jsan13060073","article-title":"Whale optimization algorithm-enhanced long short-term memory classifier with novel wrapped feature selection for intrusion detection","volume":"13","author":"Al-Husseini","year":"2024","journal-title":"J. Sens. Actuator Netw."},{"key":"10.1016\/j.iot.2026.101997_bib0157","series-title":"Proceedings of the 31st ACM SIGKDD Conference on Knowledge Discovery and Data Mining V. 1","first-page":"1599","article-title":"Feature selection for network intrusion detection","author":"Westphal","year":"2025"},{"issue":"2","key":"10.1016\/j.iot.2026.101997_bib0158","doi-asserted-by":"crossref","DOI":"10.1371\/journal.pone.0087357","article-title":"Mutual information between discrete and continuous data sets","volume":"9","author":"Ross","year":"2014","journal-title":"Plos One"},{"key":"10.1016\/j.iot.2026.101997_bib0159","first-page":"1531","article-title":"Fast binary feature selection with conditional mutual information","volume":"5","author":"Fleuret","year":"2004","journal-title":"J. Mach. Learn. Res."},{"key":"10.1016\/j.iot.2026.101997_bib0160","doi-asserted-by":"crossref","first-page":"255","DOI":"10.1016\/j.cose.2017.06.005","article-title":"A GA-LR wrapper approach for feature selection in network intrusion detection","volume":"70","author":"Khammassi","year":"2017","journal-title":"Comput. Secur."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0161","doi-asserted-by":"crossref","first-page":"175","DOI":"10.1007\/s00521-013-1368-0","article-title":"A review of feature selection methods based on mutual information","volume":"24","author":"Vergara","year":"2014","journal-title":"Neural Comput. Appl."},{"key":"10.1016\/j.iot.2026.101997_bib0162","doi-asserted-by":"crossref","unstructured":"M. Rahmati, Energy-aware federated learning for secure edge computing in 5G-enabled IoT networks, 2025.","DOI":"10.1186\/s43067-025-00203-2"},{"issue":"7784","key":"10.1016\/j.iot.2026.101997_bib0163","doi-asserted-by":"crossref","first-page":"607","DOI":"10.1038\/s41586-019-1677-2","article-title":"Towards spike-based machine intelligence with neuromorphic computing","volume":"575","author":"Roy","year":"2019","journal-title":"Nature"},{"key":"10.1016\/j.iot.2026.101997_bib0164","doi-asserted-by":"crossref","unstructured":"D. Schwartz, Y. Alparslan, E. Kim, Regularization and sparsity for adversarial robustness and stable attribution (2020) 3\u201314.","DOI":"10.1007\/978-3-030-64556-4_1"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0165","doi-asserted-by":"crossref","first-page":"267","DOI":"10.1111\/j.2517-6161.1996.tb02080.x","article-title":"Regression shrinkage and selection via the lasso","volume":"58","author":"Tibshirani","year":"1996","journal-title":"J. R. Stat. Soc. B: Stat. Methodol."},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0166","doi-asserted-by":"crossref","first-page":"17","DOI":"10.1007\/s12065-013-0102-2","article-title":"Swarm intelligence based algorithms: a critical analysis","volume":"7","author":"Yang","year":"2014","journal-title":"Evol. Intell."},{"key":"10.1016\/j.iot.2026.101997_bib0167","doi-asserted-by":"crossref","first-page":"46","DOI":"10.1016\/j.advengsoft.2013.12.007","article-title":"Grey wolf optimizer","volume":"69","author":"Mirjalili","year":"2014","journal-title":"Adv. Eng. Softw."},{"key":"10.1016\/j.iot.2026.101997_bib0168","first-page":"27","article-title":"Conditional likelihood maximisation: a unifying framework for information theoretic feature selection","volume":"13","author":"Brown","year":"2012","journal-title":"J. Mach. Learn. Res."},{"issue":"8","key":"10.1016\/j.iot.2026.101997_bib0169","doi-asserted-by":"crossref","first-page":"1226","DOI":"10.1109\/TPAMI.2005.159","article-title":"Feature selection based on mutual information criteria of max-dependency, max-relevance, and min-redundancy","volume":"27","author":"Peng","year":"2005","journal-title":"IEEE Trans. Pattern Anal. Mach. Intell."},{"issue":"6","key":"10.1016\/j.iot.2026.101997_bib0170","doi-asserted-by":"crossref","DOI":"10.1103\/PhysRevE.69.066138","article-title":"Estimating mutual information","volume":"69","author":"Kraskov","year":"2004","journal-title":"Phys. Rev. E\u2013Stat. Nonlinear Soft Matter Phys."},{"key":"10.1016\/j.iot.2026.101997_sbref0171","first-page":"339","article-title":"\u201cReal attackers don\u2019t compute gradients\u201d bridging the gap between adversarial ML research and practice","author":"Apruzzese","year":"2022","journal-title":"2023 IEEE Conf. Secure Trust. Mach. Learn."},{"issue":"3","key":"10.1016\/j.iot.2026.101997_bib0172","doi-asserted-by":"crossref","first-page":"668","DOI":"10.3390\/electronics12030668","article-title":"Fpga\/ai-powered architecture for anomaly network intrusion detection systems","volume":"12","author":"Pham-Quoc","year":"2023","journal-title":"Electronics"},{"key":"10.1016\/j.iot.2026.101997_bib0173","doi-asserted-by":"crossref","unstructured":"Y. Umuroglu, N.J. Fraser, G. Gambardella, M. Blott, P. Leong, M. Jahre, K. Vissers, FINN: a framework for fast, scalable binarized neural network inference (2017) 65\u201374. 10.1145\/3020078.3021744.","DOI":"10.1145\/3020078.3021744"},{"issue":"8","key":"10.1016\/j.iot.2026.101997_bib0174","doi-asserted-by":"crossref","first-page":"1697","DOI":"10.1109\/JPROC.2019.2915983","article-title":"Edge computing for autonomous driving: opportunities and challenges","volume":"107","author":"Chen","year":"2019","journal-title":"Proc. IEEE"},{"key":"10.1016\/j.iot.2026.101997_bib0175","doi-asserted-by":"crossref","unstructured":"D.J. Bernstein, Post-quantum cryptography (2025) 1846\u20131847.","DOI":"10.1007\/978-3-030-71522-9_386"},{"issue":"1","key":"10.1016\/j.iot.2026.101997_bib0176","doi-asserted-by":"crossref","first-page":"82","DOI":"10.1109\/MM.2018.112130359","article-title":"Loihi: a neuromorphic manycore processor with on-chip learning","volume":"38","author":"Davies","year":"2018","journal-title":"IEEE Micro"},{"issue":"4","key":"10.1016\/j.iot.2026.101997_bib0177","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/2523813","article-title":"A survey on concept drift adaptation","volume":"46","author":"Gama","year":"2014","journal-title":"ACM Comput. Surv."}],"container-title":["Internet of Things"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526001277?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2542660526001277?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,8,4]],"date-time":"2026-08-04T22:33:10Z","timestamp":1785882790000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2542660526001277"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7]]},"references-count":177,"alternative-id":["S2542660526001277"],"URL":"https:\/\/doi.org\/10.1016\/j.iot.2026.101997","relation":{},"ISSN":["2542-6605"],"issn-type":[{"value":"2542-6605","type":"print"}],"subject":[],"published":{"date-parts":[[2026,7]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"Adversarial attacks against network intrusion detection systems: Bridging the gap between theoretical vulnerabilities and practical constraints","name":"articletitle","label":"Article Title"},{"value":"Internet of Things","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.iot.2026.101997","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Author(s). Published by Elsevier B.V.","name":"copyright","label":"Copyright"}],"article-number":"101997"}}