{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T22:13:15Z","timestamp":1784931195444,"version":"3.55.0"},"reference-count":57,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,10,1]],"date-time":"2026-10-01T00:00:00Z","timestamp":1790812800000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Knowledge-Based Systems"],"published-print":{"date-parts":[[2026,10]]},"DOI":"10.1016\/j.knosys.2026.116670","type":"journal-article","created":{"date-parts":[[2026,7,17]],"date-time":"2026-07-17T06:51:00Z","timestamp":1784271060000},"page":"116670","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"PA","title":["SBERT-HCube: A hypercube-based multimodal graph transformer for semantic behavior analysis in IoT networks"],"prefix":"10.1016","volume":"351","author":[{"given":"Mahsa","family":"Abbasi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nahideh","family":"DerakhshanFard","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ali","family":"Ghaffari","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.knosys.2026.116670_bib0001","series-title":"2023 Int. Conf. Commun. Secur. Artif. Intell. ICCSAI 2023","first-page":"982","article-title":"Leveraging machine learning for real-time anomaly detection and self-repair in IoT devices","author":"Ali","year":"2023"},{"key":"10.1016\/j.knosys.2026.116670_bib0002","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2025.128700","article-title":"Enhancing ML-based anomaly detection in data management for security through integration of IoT, cloud, and edge computing","volume":"293","author":"Baimukhanov","year":"2025","journal-title":"Expert Syst. Appl."},{"issue":"17","key":"10.1016\/j.knosys.2026.116670_bib0003","doi-asserted-by":"crossref","first-page":"17929","DOI":"10.1007\/s11042-024-19176-x","article-title":"Anomaly detection using deep learning approach for IoT smart city applications","volume":"84","author":"Shibu","year":"2025","journal-title":"Multimed. Tools Appl."},{"key":"10.1016\/j.knosys.2026.116670_bib0004","doi-asserted-by":"crossref","DOI":"10.1016\/j.future.2025.108256","article-title":"Adaptively diagnosing system faults in microservice architecture: an autonomous predictive model construction framework","volume":"177","author":"Chen","year":"2026","journal-title":"Future Gener. Comput. Syst."},{"key":"10.1016\/j.knosys.2026.116670_bib0005","doi-asserted-by":"crossref","first-page":"14479","DOI":"10.1109\/TNNLS.2025.3542719","article-title":"Fusionformer: a novel adversarial transformer utilizing fusion attention for multivariate anomaly detection","volume":"36","author":"Wang","year":"2025","journal-title":"IEEE Trans. Neural Netw. Learn. Syst."},{"issue":"20","key":"10.1016\/j.knosys.2026.116670_bib0006","first-page":"58915","article-title":"Anomaly detection in WSN IoT (Internet of Things) environment through a consensus-based anomaly detection approach","volume":"83","author":"Anitha","year":"2024","journal-title":"Multimed. Tools Appl."},{"issue":"2","key":"10.1016\/j.knosys.2026.116670_bib0007","first-page":"173","article-title":"SiTYOLOv9: an efficient algorithm for learning behavior detection in the home environment","volume":"4","author":"Sun","year":"2024","journal-title":"J. Comput. Cogn. Eng."},{"issue":"5","key":"10.1016\/j.knosys.2026.116670_bib0008","doi-asserted-by":"crossref","first-page":"3416","DOI":"10.1109\/TCSS.2025.3543419","article-title":"HHG-bot: a hyperheterogeneous graph-based twitter bot detection model","volume":"12","author":"Wang","year":"2025","journal-title":"IEEE Trans. Comput. Soc. Syst."},{"key":"10.1016\/j.knosys.2026.116670_bib0009","series-title":"2024 7th International Conference on Circuit Power and Computing Technologies (ICCPCT)","first-page":"1142","article-title":"IoT activity Symphony: harmonizing DBSCAN clustering and t-SNE visualization for enhanced recognition","author":"Vempali","year":"2024"},{"key":"10.1016\/j.knosys.2026.116670_bib0010","article-title":"Graph neural networks for IoT security: a comparative study","volume":"36","author":"Rosa","year":"2026","journal-title":"*Internet Things*"},{"key":"10.1016\/j.knosys.2026.116670_bib0011","first-page":"1","article-title":"Lightweight LLM-based anomaly detection framework for securing IoTMD enabled diabetes management control systems","author":"Pawana","year":"2025","journal-title":"IEEE J. Biomed, Heal, Inf.,"},{"issue":"January","key":"10.1016\/j.knosys.2026.116670_bib0012","doi-asserted-by":"crossref","first-page":"48758","DOI":"10.1109\/ACCESS.2025.3551207","article-title":"SwinIoT: a hierarchical transformer-based framework for behavioral anomaly detection in IoT-driven smart cities","volume":"13","author":"Mancy","year":"2025","journal-title":"IEEE Access"},{"issue":"5","key":"10.1016\/j.knosys.2026.116670_bib0013","first-page":"3035","article-title":"Edge-assisted federated learning for anomaly detection in diverse IoT network","volume":"17","author":"Sharma","year":"2025","journal-title":"Int. J. Inf. Technol."},{"key":"10.1016\/j.knosys.2026.116670_bib0014","author":"Rezakhani"},{"key":"10.1016\/j.knosys.2026.116670_bib0015","author":"Huang"},{"issue":"1","key":"10.1016\/j.knosys.2026.116670_bib0016","first-page":"133","article-title":"A study on Zeek IDS effectiveness for cybersecurity in agricultural IoT networks","volume":"5","author":"Huda","year":"2025","journal-title":"J. Comput. Cogn. Eng."},{"key":"10.1016\/j.knosys.2026.116670_bib0017","doi-asserted-by":"crossref","unstructured":"M. Boerger, \u201cAnomaly detection in IoT networks : a performance comparison of transformer, 1D-CNN, and GrowNet models on the bot-IoT dataset,\u201d no. Data, pp. 633\u2013643, 2025, doi: 10.5220\/0013637600003967.","DOI":"10.5220\/0013637600003967"},{"issue":"23","key":"10.1016\/j.knosys.2026.116670_bib0018","doi-asserted-by":"crossref","first-page":"51410","DOI":"10.1109\/JIOT.2025.3614857","article-title":"Safety-critical path planning for obstacle avoidance based on reinforcement learning and control barrier functions","volume":"12","author":"Xu","year":"2025","journal-title":"IEEE Internet Things J."},{"issue":"1","key":"10.1016\/j.knosys.2026.116670_bib0019","first-page":"463","article-title":"Feature reduction and anomaly detection in IoT using machine learning algorithms","volume":"16","author":"Hamdan","year":"2025","journal-title":"Int. J. Adv. Comput. Sci. Appl."},{"key":"10.1016\/j.knosys.2026.116670_bib0020","first-page":"1","article-title":"Layered resource sharing for distributed computing in IoT using hybrid MILPChameleon swarm optimization","volume":"5","author":"Samiappan","year":"2025","journal-title":"J. Comput. Cogn. Eng. Online First"},{"issue":"24","key":"10.1016\/j.knosys.2026.116670_bib0021","doi-asserted-by":"crossref","first-page":"21309","DOI":"10.1109\/JIOT.2023.3283408","article-title":"A few-shot-based model-agnostic meta-learning for intrusion detection in security of internet of things","volume":"10","author":"Lu","year":"2023","journal-title":"IEEE Internet Things J."},{"issue":"5","key":"10.1016\/j.knosys.2026.116670_bib0022","doi-asserted-by":"crossref","first-page":"3769","DOI":"10.1109\/TCYB.2020.3013416","article-title":"Learning latent representation for IoT anomaly detection","volume":"52","author":"Vu","year":"2022","journal-title":"IEEE Trans. Cybern."},{"issue":"March","key":"10.1016\/j.knosys.2026.116670_bib0023","doi-asserted-by":"crossref","first-page":"53171","DOI":"10.1109\/ACCESS.2025.3554301","article-title":"Federated learning with Sailfish-optimized ensemble models for anomaly detection in IoT edge computing environment","volume":"13","author":"Babu","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.knosys.2026.116670_bib0024","series-title":"2nd IEEE Int. Conf. IoT, Commun. Autom. Technol. ICICAT 2024","first-page":"1319","article-title":"Detecting anomalies in IoT sensor data with robust principal component analysis (RPCA)","author":"Sharma","year":"2024"},{"key":"10.1016\/j.knosys.2026.116670_bib0025","series-title":"2024 IEEE Conf. Commun. Netw. Secur. CNS 2024","first-page":"1","article-title":"Device-specific anomaly detection models for IoT systems","author":"Golestani","year":"2024"},{"issue":"1","key":"10.1016\/j.knosys.2026.116670_bib0026","doi-asserted-by":"crossref","first-page":"642","DOI":"10.1007\/s11227-023-05503-w","article-title":"Hybrid graph transformer networks for multivariate time series anomaly detection","volume":"80","author":"Gao","year":"2024","journal-title":"J. Supercomput."},{"issue":"10","key":"10.1016\/j.knosys.2026.116670_bib0027","doi-asserted-by":"crossref","first-page":"2435","DOI":"10.3390\/en18102435","article-title":"An evolutionary deep reinforcement learning-based framework for efficient anomaly detection in smart power distribution grids","volume":"18","author":"Nevisi","year":"2025","journal-title":"Energies"},{"issue":"6","key":"10.1016\/j.knosys.2026.116670_bib0028","article-title":"Combining generative adversarial networks (GANs) with gaussian noise for anomaly detection in Internet of things (IoT) traffic","volume":"7","author":"Morshedi","year":"2025","journal-title":"Eng. Rep."},{"issue":"April","key":"10.1016\/j.knosys.2026.116670_bib0029","article-title":"A deep reinforcement learning-based robust intrusion Detection system for securing IoMT Healthcare Networks","volume":"12","author":"Shaikh","year":"2025","journal-title":"Front. Med."},{"issue":"5","key":"10.1016\/j.knosys.2026.116670_bib0030","first-page":"406","article-title":"Internet of things-based anomaly detection hybrid framework simulation integration of Deep learning and blockchain","volume":"16","author":"Almasabi","year":"2025","journal-title":"Inf"},{"key":"10.1016\/j.knosys.2026.116670_bib0031","doi-asserted-by":"crossref","unstructured":"M. Ahmed, R. Seraj, S. Mohammed, and S. Islam, \u201cThe k-means algorithm: a comprehensive survey and performance evaluation,\u201d pp. 1295, 2020, doi: 10.3390\/electronics9081295.","DOI":"10.3390\/electronics9081295"},{"key":"10.1016\/j.knosys.2026.116670_bib0032","series-title":"2025 IEEE\/ACM International Workshop on Natural Language-Based Software Engineering (NLBSE)","first-page":"21","article-title":"Evaluating the performance and efficiency of sentence-BERT for code comment classification","author":"Pe\u00f1a","year":"2025"},{"issue":"6","key":"10.1016\/j.knosys.2026.116670_bib0033","doi-asserted-by":"crossref","DOI":"10.1007\/s10462-025-11162-5","article-title":"BERT applications in natural language processing: a review","volume":"58","author":"Gardazi","year":"2025","journal-title":"Artif. Intell. Rev."},{"issue":"4","key":"10.1016\/j.knosys.2026.116670_bib0034","doi-asserted-by":"crossref","first-page":"2003","DOI":"10.1007\/s00500-025-10534-x","article-title":"Exploring diversity and time-aware recommendations: an LSTM-DNN model with novel bidirectional dynamic time warping algorithm","volume":"29","author":"Li","year":"2025","journal-title":"Soft. Comput."},{"key":"10.1016\/j.knosys.2026.116670_bib0035","article-title":"file:\/\/\/C:\/users\/Dr.Stock\/downloads\/S0360835224009525.Ris","volume":"104","author":"Chen","year":"2024","journal-title":"Inf. Fusion"},{"key":"10.1016\/j.knosys.2026.116670_bib0036","doi-asserted-by":"crossref","DOI":"10.1016\/j.cie.2024.110830","article-title":"GAT-AD: graph attention networks for contextual anomaly detection in network monitoring","volume":"200","author":"Latif-Mart\u00ednez","year":"2025","journal-title":"Comput. Ind. Eng."},{"issue":"20","key":"10.1016\/j.knosys.2026.116670_bib0037","doi-asserted-by":"crossref","first-page":"19886","DOI":"10.1109\/JSEN.2022.3205017","article-title":"Energy consumption minimization for data collection from wirelessly-powered IoT sensors: session-specific optimal design with DRL","volume":"22","author":"Xu","year":"2022","journal-title":"IEEE Sens. J."},{"key":"10.1016\/j.knosys.2026.116670_bib0038","doi-asserted-by":"crossref","unstructured":"H.W. Herwanto, A.N. Handayani, A.P. Wibawa, K.L. Chandrika, and K. Arai, \u201cd,\u201d in 2021 7th International Conference on Electrical, Electronics and Information Engineering (ICEEIE), 2021, pp. 1\u20133. doi: 10.1109\/ICEEIE52663.2021.9616665.","DOI":"10.1109\/ICEEIE52663.2021.9616665"},{"issue":"1","key":"10.1016\/j.knosys.2026.116670_bib0039","doi-asserted-by":"crossref","first-page":"1059","DOI":"10.1007\/s11227-023-05511-w","article-title":"Comparative analysis of dimensionality reduction techniques for cybersecurity in the SWaT dataset","volume":"80","author":"Bozdal","year":"2024","journal-title":"J. Supercomput."},{"key":"10.1016\/j.knosys.2026.116670_bib0040","series-title":"2023 Innovations in Intelligent Systems and Applications Conference (ASYU)","first-page":"1","article-title":"A hybrid CNN-LSTM framework for unsupervised anomaly detection in water distribution plant","author":"Sahin","year":"2023"},{"key":"10.1016\/j.knosys.2026.116670_bib0041","series-title":"2021 IEEE 37th International Conference on Data Engineering (ICDE)","first-page":"2225","article-title":"DAEMON: unsupervised anomaly detection and interpretation for multivariate time Series","author":"Chen","year":"2021"},{"issue":"6","key":"10.1016\/j.knosys.2026.116670_bib0042","doi-asserted-by":"crossref","first-page":"2508","DOI":"10.1109\/TNNLS.2021.3105827","article-title":"An evaluation of anomaly detection and diagnosis in multivariate time series","volume":"33","author":"Garg","year":"2022","journal-title":"IEEE Trans. Neural Netw., Learn Syst."},{"issue":"26","key":"10.1016\/j.knosys.2026.116670_bib0043","doi-asserted-by":"crossref","first-page":"37007","DOI":"10.1007\/s11042-021-11255-7","article-title":"Effects of similarity\/distance metrics on k-means algorithm with respect to its applications in IoT and multimedia: a review","volume":"81","author":"Gupta","year":"2022","journal-title":"Multimed. Tools Appl."},{"issue":"5","key":"10.1016\/j.knosys.2026.116670_bib0044","doi-asserted-by":"crossref","first-page":"253","DOI":"10.1007\/s12243-021-00835-1","article-title":"Estimating and predicting link quality in wireless IoT networks","volume":"77","author":"Sindjoung","year":"2022","journal-title":"Ann. Telecommun."},{"key":"10.1016\/j.knosys.2026.116670_bib0045","doi-asserted-by":"crossref","first-page":"103906","DOI":"10.1109\/ACCESS.2021.3094024","article-title":"Design and development of a deep learning-based model for anomaly detection in IoT networks","volume":"9","author":"Ullah","year":"2021","journal-title":"IEEE Access"},{"issue":"1","key":"10.1016\/j.knosys.2026.116670_bib0046","doi-asserted-by":"crossref","first-page":"15","DOI":"10.1007\/s10586-024-04707-w","article-title":"Dynamic deep graph convolution with enhanced transformer networks for time series anomaly detection in IoT","volume":"28","author":"Gao","year":"2025","journal-title":"Clust. Comput."},{"key":"10.1016\/j.knosys.2026.116670_bib0047","series-title":"MAD-GAN: Multivariate Anomaly Detection for Time Series Data with Generative Adversarial Networks BT - Artificial Neural Networks and Machine Learning \u2013 ICANN 2019: Text and Time Series","first-page":"703","author":"Li","year":"2019"},{"key":"10.1016\/j.knosys.2026.116670_bib0048","series-title":"Proceedings of the 25th ACM SIGKDD International Conference on Knowledge Discovery \\& Data Mining","first-page":"2828","article-title":"Robust anomaly detection for multivariate time series through stochastic recurrent neural network","author":"Su","year":"2019"},{"key":"10.1016\/j.knosys.2026.116670_bib0049","series-title":"2020 IEEE International Conference on Data Mining (ICDM)","first-page":"841","article-title":"Multivariate time-series anomaly detection via graph attention network","author":"Zhao","year":"2020"},{"key":"10.1016\/j.knosys.2026.116670_bib0050","doi-asserted-by":"crossref","first-page":"101","DOI":"10.1016\/j.aiopen.2022.07.001","article-title":"StackVAE-G: an efficient and interpretable model for time series anomaly detection","volume":"3","author":"Li","year":"2022","journal-title":"AI Open"},{"issue":"20","key":"10.1016\/j.knosys.2026.116670_bib0051","doi-asserted-by":"crossref","first-page":"19886","DOI":"10.1109\/JSEN.2022.3205017","article-title":"Energy consumption minimization for data collection from wirelessly-powered IoT sensors: session-specific optimal design with DRL","volume":"22","author":"Xu","year":"2022","journal-title":"IEEE Sens. J."},{"issue":"3","key":"10.1016\/j.knosys.2026.116670_bib0052","doi-asserted-by":"crossref","first-page":"1544","DOI":"10.1109\/LRA.2018.2801475","article-title":"A multimodal anomaly detector for robot-assisted feeding using an LSTM-based variational autoencoder","volume":"3","author":"Park","year":"2018","journal-title":"IEEE Robot. Autom. Lett."},{"key":"10.1016\/j.knosys.2026.116670_bib0053","doi-asserted-by":"crossref","first-page":"178006","DOI":"10.1109\/ACCESS.2025.3616597","article-title":"STAD: self-supervised transformer for anomaly detection in multi-variate time series data","volume":"13","author":"Arshad","year":"2025","journal-title":"IEEE Access"},{"issue":"August 2024","key":"10.1016\/j.knosys.2026.116670_bib0054","article-title":"CARLA: self-supervised contrastive representation learning for time series anomaly detection","volume":"157","author":"Darban","year":"2025","journal-title":"Pattern Recognit."},{"key":"10.1016\/j.knosys.2026.116670_bib0055","doi-asserted-by":"crossref","DOI":"10.1016\/j.iot.2019.100059","article-title":"Attack and anomaly detection in IoT sensors in IoT sites using machine learning approaches","volume":"7","author":"Hasan","year":"2019","journal-title":"Internet Things"},{"key":"10.1016\/j.knosys.2026.116670_bib0056","doi-asserted-by":"crossref","first-page":"121300","DOI":"10.1109\/ACCESS.2025.3581267","article-title":"Optimizing access point placement in industrial IoT: a deep reinforcement learning approach with Q-learning verification and signal heatmap visualization","volume":"13","author":"Mahanta","year":"2025","journal-title":"IEEE Access"},{"key":"10.1016\/j.knosys.2026.116670_bib0057","series-title":"Lecture Notes in Computer Science, vol. 15444, in Structural, Syntactic, and Statistical Pattern Recognition (S+SSPR 2024)","first-page":"41","article-title":"Enhancing IoT network security with graph neural networks for node anomaly detection","author":"Carletti","year":"2024"}],"container-title":["Knowledge-Based Systems"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0950705126013961?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0950705126013961?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,7,24]],"date-time":"2026-07-24T21:59:22Z","timestamp":1784930362000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0950705126013961"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,10]]},"references-count":57,"alternative-id":["S0950705126013961"],"URL":"https:\/\/doi.org\/10.1016\/j.knosys.2026.116670","relation":{},"ISSN":["0950-7051"],"issn-type":[{"value":"0950-7051","type":"print"}],"subject":[],"published":{"date-parts":[[2026,10]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"SBERT-HCube: A hypercube-based multimodal graph transformer for semantic behavior analysis in IoT networks","name":"articletitle","label":"Article Title"},{"value":"Knowledge-Based Systems","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.knosys.2026.116670","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier B.V. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"116670"}}