{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T17:19:24Z","timestamp":1786123164983,"version":"build-2736575974"},"reference-count":44,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T00:00:00Z","timestamp":1784160000000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T00:00:00Z","timestamp":1786060800000},"content-version":"vor","delay-in-days":22,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"name":"The National Cybersecurity Authority","award":["CRPG-25-3295"],"award-info":[{"award-number":["CRPG-25-3295"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["Sci Rep"],"DOI":"10.1038\/s41598-026-61637-w","type":"journal-article","created":{"date-parts":[[2026,7,16]],"date-time":"2026-07-16T21:16:38Z","timestamp":1784236598000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A domain-agnostic explainable framework for network attack detection across diverse traffic datasets"],"prefix":"10.1038","volume":"16","author":[{"ORCID":"https:\/\/orcid.org\/0000-0001-8138-009X","authenticated-orcid":false,"given":"Abed","family":"Alanazi","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2026,7,16]]},"reference":[{"key":"61637_CR1","doi-asserted-by":"crossref","unstructured":"Gueriani, A., Kheddar, H. & Mazari, A.\u00a0C. Deep reinforcement learning for intrusion detection in iot: A survey. In 2023 2nd International Conference on Electronics, Energy and Measurement (IC2EM)\u00a01, 1\u20137 (IEEE, 2023).","DOI":"10.1109\/IC2EM59347.2023.10419560"},{"key":"61637_CR2","unstructured":"Xu, Z. Deep learning-based intrusion detection systems: A survey. arXiv:2504.07839 (2025)."},{"key":"61637_CR3","unstructured":"Kimanzi, R., Kimanga, P., Cherori, D. & Gikunda, P.\u00a0K. Deep learning algorithms used in intrusion detection systems\u2013a review. arXiv:2402.17020 (2024)."},{"key":"61637_CR4","doi-asserted-by":"publisher","first-page":"515","DOI":"10.3390\/drones8090515","volume":"8","author":"A Alanazi","year":"2024","unstructured":"Alanazi, A. Ssrl-uavs: A self-supervised deep representation learning approach for gps spoofing attack detection in small unmanned aerial vehicles. Drones 8, 515 (2024).","journal-title":"Drones"},{"key":"61637_CR5","doi-asserted-by":"publisher","DOI":"10.1016\/j.aei.2025.103355","volume":"65","author":"S Yin","year":"2025","unstructured":"Yin, S. & Xiang, Z. Adaptive collision avoidance strategy for usvs in perception-limited environments using dynamic priority guidance. Adv. Eng. Inform. 65, 103355 (2025).","journal-title":"Advanced Engineering Informatics"},{"key":"61637_CR6","doi-asserted-by":"publisher","first-page":"1136","DOI":"10.3390\/rs17071136","volume":"17","author":"J Wei","year":"2025","unstructured":"Wei, J., Song, M. & Yuan, Y. High precision navigation and positioning for multisource sensors based on bibliometric and contextual analysis. Remote Sens. 17, 1136 (2025).","journal-title":"Remote Sensing"},{"key":"61637_CR7","doi-asserted-by":"publisher","first-page":"6656","DOI":"10.1038\/s41598-025-90809-3","volume":"15","author":"A Almadhor","year":"2025","unstructured":"Almadhor, A. et al. Ctdnn-spoof: compact tiny deep learning architecture for detection and multi-label classification of gps spoofing attacks in small uavs. Sci. Rep. 15, 6656 (2025).","journal-title":"Scientific Reports"},{"key":"61637_CR8","doi-asserted-by":"publisher","first-page":"119","DOI":"10.1080\/01431161.2024.2391582","volume":"46","author":"J Ahmad","year":"2025","unstructured":"Ahmad, J., Sajjad, M. & Eisma, J. Small unmanned aerial vehicle (uav)-based detection of seasonal micro-urban heat islands for diverse land uses. Int. J. Remote Sens. 46, 119\u2013147 (2025).","journal-title":"International Journal of Remote Sensing"},{"key":"61637_CR9","doi-asserted-by":"crossref","unstructured":"Lan, Z., Ji, Y. & Zhang, H. Application research of small drones in future operations. In 2025 IEEE 8th Information Technology and Mechatronics Engineering Conference (ITOEC) 8, 381\u2013384 (IEEE, 2025).","DOI":"10.1109\/ITOEC63606.2025.10969066"},{"key":"61637_CR10","doi-asserted-by":"crossref","unstructured":"da Silva Ruffo, V.\u00a0G. et al. Anomaly and intrusion detection using deep learning for software-defined networks: A survey. Expert Syst. Appl. 124982 (2024).","DOI":"10.1016\/j.eswa.2024.124982"},{"key":"61637_CR11","doi-asserted-by":"publisher","first-page":"297","DOI":"10.1007\/s10462-024-10890-4","volume":"57","author":"NHA Mutalib","year":"2024","unstructured":"Mutalib, N. H. A., Sabri, A. Q. M., Wahab, A. W. A., Abdullah, E. R. M. F. & AlDahoul, N. Explainable deep learning approach for advanced persistent threats (apts) detection in cybersecurity: a review. Artif. Intell. Rev. 57, 297 (2024).","journal-title":"Artificial Intelligence Review"},{"key":"61637_CR12","doi-asserted-by":"publisher","first-page":"377","DOI":"10.3390\/info16050377","volume":"16","author":"M Li","year":"2025","unstructured":"Li, M., Qiao, Y. & Lee, B. Multi-view intrusion detection framework using deep learning and knowledge graphs. Information 16, 377 (2025).","journal-title":"Information"},{"key":"61637_CR13","doi-asserted-by":"crossref","unstructured":"Lian, X. Contextual masking distillation for network traffic anomaly detection. IEEE Trans. Inf. For. Secur. (2026).","DOI":"10.1109\/TIFS.2026.3655514"},{"key":"61637_CR14","doi-asserted-by":"crossref","unstructured":"Lian, X. Decompose to understand, fuse to detect: Frequency-decoupled anomaly detection for encrypted network traffic. arXiv:2605.02970 (2026).","DOI":"10.1109\/INFOCOM59046.2026.11571273"},{"key":"61637_CR15","first-page":"3908","volume":"2025","author":"X Lian","year":"2025","unstructured":"Lian, X. et al. Facing anomalies head-on: Network traffic anomaly detection via uncertainty-inspired inter-sample differences. In Proceedings of the ACM on Web Conference 2025, 3908\u20133917 (2025).","journal-title":"In Proceedings of the ACM on Web Conference"},{"key":"61637_CR16","doi-asserted-by":"publisher","DOI":"10.1016\/j.patcog.2024.111215","volume":"161","author":"X Lian","year":"2025","unstructured":"Lian, X., Zheng, Y., Dang, Z., Peng, C. & Gao, X. Semi-supervised anomaly traffic detection via multi-frequency reconstruction. Pattern Recogn. 161, 111215 (2025).","journal-title":"Pattern Recognition"},{"key":"61637_CR17","doi-asserted-by":"crossref","unstructured":"Lian, X., Liu, Y., Wang, S. & Zheng, Y. Payload level anomaly network traffic detection via semi-supervised contrastive learning. In 2024 IEEE 23rd International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), 2559\u20132566 (IEEE, 2024).","DOI":"10.1109\/TrustCom63139.2024.00357"},{"key":"61637_CR18","doi-asserted-by":"crossref","unstructured":"Panchal, R.\u00a0K., Snehkunj, R. & Panchal, V.\u00a0V. A survey on network-based intrusion detection system using learning techniques. In 2024 5th International Conference on Image Processing and Capsule Networks (ICIPCN), 740\u2013747 (IEEE, 2024).","DOI":"10.1109\/ICIPCN63822.2024.00128"},{"key":"61637_CR19","doi-asserted-by":"publisher","first-page":"3079","DOI":"10.3390\/electronics11193079","volume":"11","author":"S Patil","year":"2022","unstructured":"Patil, S. et al. Explainable artificial intelligence for intrusion detection system. Electronics 11, 3079 (2022).","journal-title":"Electronics"},{"key":"61637_CR20","doi-asserted-by":"publisher","first-page":"30532","DOI":"10.1038\/s41598-024-81151-1","volume":"14","author":"U Ahmed","year":"2024","unstructured":"Ahmed, U. et al. Hybrid bagging and boosting with shap based feature selection for enhanced predictive modeling in intrusion detection systems. Sci. Rep. 14, 30532 (2024).","journal-title":"Scientific Reports"},{"key":"61637_CR21","doi-asserted-by":"publisher","first-page":"33","DOI":"10.1186\/s40537-024-00886-w","volume":"11","author":"MA Talukder","year":"2024","unstructured":"Talukder, M. A. et al. Machine learning-based network intrusion detection for big and imbalanced data using oversampling, stacking feature embedding and feature extraction. J. Big Data 11, 33 (2024).","journal-title":"Journal of big data"},{"key":"61637_CR22","unstructured":"Javed, S. et al. Secure and interpretable intrusion detection through federated and ensemble machine learning with xai. J. Comput. Biomed. Inform. (2025)."},{"key":"61637_CR23","unstructured":"Ullah, Z. Hybrid cnn-lstm model for ddos attack detection in internet of things-based healthcare industry 5.0. IEEE Internet Things J. (2025)."},{"key":"61637_CR24","doi-asserted-by":"crossref","unstructured":"Maftoun, M., Ranjbar, A.\u00a0M., Ghavitan, H. & Khademi, M. Attention-based deep learning models for fraud detection in imbalanced transaction datasets. In 2025 11th International Conference on Web Research (ICWR), 130\u2013136 (IEEE, 2025).","DOI":"10.1109\/ICWR65219.2025.11006225"},{"key":"61637_CR25","doi-asserted-by":"publisher","first-page":"234","DOI":"10.3390\/fi17060234","volume":"17","author":"K Fatema","year":"2025","unstructured":"Fatema, K. et al. Federated xai ids: An explainable and safeguarding privacy approach to detect intrusion combining federated learning and shap. Fut. Internet 17, 234 (2025).","journal-title":"Future Internet"},{"key":"61637_CR26","doi-asserted-by":"publisher","first-page":"1526221","DOI":"10.3389\/frai.2025.1526221","volume":"8","author":"VZ Mohale","year":"2025","unstructured":"Mohale, V. Z. & Obagbuwa, I. C. A systematic review on the integration of explainable artificial intelligence in intrusion detection systems to enhancing transparency and interpretability in cybersecurity. Front. Artif. Intell. 8, 1526221 (2025).","journal-title":"Frontiers in Artificial Intelligence"},{"key":"61637_CR27","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10586-024-04989-0","volume":"28","author":"D Mahesh","year":"2025","unstructured":"Mahesh, D. & Tallapally, S. K. Advanced sdn-based network security: an ensemble optimized deep learning-based framework for mitigating ddos attacks with intrusion detection. Cluster Comput. 28, 1\u201327 (2025).","journal-title":"Cluster Computing"},{"key":"61637_CR28","doi-asserted-by":"publisher","first-page":"1088","DOI":"10.3390\/math13071088","volume":"13","author":"K Noor","year":"2025","unstructured":"Noor, K., Imoize, A. L., Li, C.-T. & Weng, C.-Y. A review of machine learning and transfer learning strategies for intrusion detection systems in 5g and beyond. Mathematics 13, 1088 (2025).","journal-title":"Mathematics"},{"key":"61637_CR29","doi-asserted-by":"crossref","unstructured":"Rahman, A. et al. Stacked ensemble method: An advanced machine learning approach for anomaly-based intrusion detection system. Optim. Inf. Comput. Stat. (2025).","DOI":"10.19139\/soic-2310-5070-2352"},{"key":"61637_CR30","unstructured":"Yang, W., Acuto, A., Zhou, Y. & Wojtczak, D. A survey for deep reinforcement learning based network intrusion detection. arXiv:2410.07612 (2024)."},{"key":"61637_CR31","doi-asserted-by":"crossref","unstructured":"Al-Ajlan, M. & Ykhlef, M. A review of generative adversarial networks for intrusion detection systems: Advances, challenges, and future directions. Comput. Mater. Continua 81 (2024).","DOI":"10.32604\/cmc.2024.055891"},{"key":"61637_CR32","doi-asserted-by":"crossref","unstructured":"Kalakoti, R., Vaarandi, R., Bahsi, H. & N\u00f5mm, S. Evaluating explainable ai for deep learning-based network intrusion detection system alert classification. arXiv:2506.07882 (2025).","DOI":"10.5220\/0013180700003899"},{"key":"61637_CR33","doi-asserted-by":"crossref","unstructured":"AsSadhan, B., Bashaiwth, A. & Binsalleeh, H. Enhancing explanation of lstm-based ddos attack classification using shap with pattern dependency. IEEE Access (2024).","DOI":"10.1109\/ACCESS.2024.3421299"},{"key":"61637_CR34","first-page":"44","volume":"7","author":"T Wang","year":"2024","unstructured":"Wang, T. Research on intrusion detection classification methods based on pca-decision tree. Acad. J. Comput. Inf. Sci. 7, 44\u201350 (2024).","journal-title":"Academic Journal of Computing & Information Science"},{"key":"61637_CR35","doi-asserted-by":"crossref","unstructured":"Ogab, M., Zaidi, S., Bourouis, A. & Calafate, C.\u00a0T. Machine learning-based intrusion detection systems for the internet of drones: A systematic literature review. IEEE Access (2025).","DOI":"10.1007\/978-3-031-90758-6_1"},{"key":"61637_CR36","doi-asserted-by":"publisher","first-page":"3353","DOI":"10.1007\/s40747-023-01313-y","volume":"10","author":"Y Imrana","year":"2024","unstructured":"Imrana, Y. et al. Cnn-gru-ff: a double-layer feature fusion-based network intrusion detection system using convolutional neural network and gated recurrent units. Complex Intell. Syst. 10, 3353\u20133370 (2024).","journal-title":"Complex & Intelligent Systems"},{"key":"61637_CR37","doi-asserted-by":"publisher","first-page":"584","DOI":"10.37394\/23203.2021.16.54","volume":"16","author":"S Sumathi","year":"2021","unstructured":"Sumathi, S. & Rajesh, R. Comparative study on tcp syn flood ddos attack detection: a machine learning algorithm based approach. WSEAS Trans. Syst. Control 16, 584\u2013591 (2021).","journal-title":"WSEAS Transactions on Systems and Control"},{"key":"61637_CR38","doi-asserted-by":"publisher","first-page":"3890","DOI":"10.17485\/IJST\/v16i43.1718","volume":"16","author":"S Sumathi","year":"2023","unstructured":"Sumathi, S. & Rajesh, R. A dynamic bpn-mlp neural network ddos detection model using hybrid swarm intelligent framework. Indian J. Sci. Technol. 16, 3890\u20133904 (2023).","journal-title":"Indian J. Sci. Technol"},{"key":"61637_CR39","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.7334","volume":"34","author":"S Sokkalingam","year":"2022","unstructured":"Sokkalingam, S. & Ramakrishnan, R. An intelligent intrusion detection system for distributed denial of service attacks: A support vector machine with hybrid optimization algorithm based approach. Concurr. Comput. Pract. Exp. 34, e7334. https:\/\/doi.org\/10.1002\/cpe.7334 (2022).","journal-title":"Concurrency and Computation: Practice and Experience"},{"key":"61637_CR40","doi-asserted-by":"publisher","DOI":"10.1002\/cpe.8264","volume":"36","author":"S Sumathi","year":"2024","unstructured":"Sumathi, S. & Rajesh, R. Hybgbs: A hybrid neural network and grey wolf optimizer for intrusion detection in a cloud computing environment. Concurr. Comput. Pract. Exp. 36, e8264 (2024).","journal-title":"Concurrency and Computation: Practice and Experience"},{"key":"61637_CR41","doi-asserted-by":"publisher","first-page":"8530312","DOI":"10.1155\/2022\/8530312","volume":"2022","author":"S Sumathi","year":"2022","unstructured":"Sumathi, S., Rajesh, R. & Lim, S. Recurrent and deep learning neural network models for ddos attack detection. J. Sens. 2022, 8530312. https:\/\/doi.org\/10.1155\/2022\/8530312 (2022).","journal-title":"Journal of Sensors"},{"key":"61637_CR42","unstructured":"Mirsky, Y. Network attack dataset - kitsune. https:\/\/www.kaggle.com\/datasets\/ymirsky\/network-attack-dataset-kitsune (2024)."},{"key":"61637_CR43","unstructured":"Lab, S. Malware traffic analysis \u2013 capture facility dataset. https:\/\/data.mendeley.com\/datasets\/g3pcpm92jr\/1 (2024)."},{"key":"61637_CR44","unstructured":"Pambudi, A. Network malware detection - connection analysis dataset. https:\/\/www.kaggle.com\/datasets\/agungpambudi\/network-malware-detection-connection-analysis (2024)."}],"container-title":["Scientific Reports"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.nature.com\/articles\/s41598-026-61637-w","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-026-61637-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/www.nature.com\/articles\/s41598-026-61637-w.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,7]],"date-time":"2026-08-07T13:56:17Z","timestamp":1786110977000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.nature.com\/articles\/s41598-026-61637-w"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,16]]},"references-count":44,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2026,12]]}},"alternative-id":["61637"],"URL":"https:\/\/doi.org\/10.1038\/s41598-026-61637-w","relation":{},"ISSN":["2045-2322"],"issn-type":[{"value":"2045-2322","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,16]]},"assertion":[{"value":"27 April 2026","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"6 July 2026","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"16 July 2026","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare no competing interests.","order":1,"name":"Ethics","label":"Competing interests","group":{"name":"EthicsHeading","label":"Declarations"}}],"article-number":"24512"}}