{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,1,16]],"date-time":"2026-01-16T14:01:25Z","timestamp":1768572085122,"version":"3.49.0"},"reference-count":32,"publisher":"Institute of Electrical and Electronics Engineers (IEEE)","license":[{"start":{"date-parts":[[2026,1,1]],"date-time":"2026-01-01T00:00:00Z","timestamp":1767225600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/legalcode"}],"funder":[{"DOI":"10.13039\/100019779","name":"Qatar National Library","doi-asserted-by":"crossref","id":[{"id":"10.13039\/100019779","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Qatar Research Development and Innovation Council","award":["ARG01-0522-230274"],"award-info":[{"award-number":["ARG01-0522-230274"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["IEEE Access"],"published-print":{"date-parts":[[2026]]},"DOI":"10.1109\/access.2026.3651297","type":"journal-article","created":{"date-parts":[[2026,1,6]],"date-time":"2026-01-06T18:36:49Z","timestamp":1767724609000},"page":"5541-5552","source":"Crossref","is-referenced-by-count":0,"title":["Behavioral Fingerprinting of IoT Devices for Forensic Identification Post-Attack"],"prefix":"10.1109","volume":"14","author":[{"ORCID":"https:\/\/orcid.org\/0009-0000-0590-9385","authenticated-orcid":false,"given":"Laveeza","family":"Tahir","sequence":"first","affiliation":[{"name":"Institute of Information Technology, Khwaja Fareed University of Engineering and Information Technology, Rahim Yar Khan, Pakistan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0009-0000-7383-2666","authenticated-orcid":false,"given":"Isha","family":"Bukhari","sequence":"additional","affiliation":[{"name":"Institute of Information Technology, Khwaja Fareed University of Engineering and Information Technology, Rahim Yar Khan, Pakistan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-5114-4213","authenticated-orcid":false,"given":"Kashif","family":"Munir","sequence":"additional","affiliation":[{"name":"Institute of Information Technology, Khwaja Fareed University of Engineering and Information Technology, Rahim Yar Khan, Pakistan"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0522-4348","authenticated-orcid":false,"given":"Hasan J.","family":"Alyamani","sequence":"additional","affiliation":[{"name":"Department of Information Systems, Faculty of Computing and Information Technology in Rabigh, King Abdulaziz University, Jeddah, Saudi Arabia"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-4984-6093","authenticated-orcid":false,"given":"Amine","family":"Bermak","sequence":"additional","affiliation":[{"name":"College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-0248-7919","authenticated-orcid":false,"given":"Atiq Ur","family":"Rehman","sequence":"additional","affiliation":[{"name":"College of Science and Engineering, Hamad Bin Khalifa University, Doha, Qatar"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"263","reference":[{"key":"ref1","doi-asserted-by":"publisher","DOI":"10.3390\/s24113571"},{"issue":"2","key":"ref2","first-page":"678","article-title":"Forensic logging architecture for edge devices in smart grid networks","volume":"19","author":"Lee","year":"2023","journal-title":"IEEE Trans. Depend. Sec. Comput."},{"issue":"4","key":"ref3","first-page":"1895","article-title":"TinyML enabled edge anomaly detector for industrial IoT","volume":"20","author":"Ahmad","year":"2024","journal-title":"IEEE Trans. Ind. Informat."},{"issue":"15","key":"ref4","first-page":"5300","article-title":"Detection of global anomalies on distributed IoT edges with device-to-device communication","volume":"24","author":"Ochiai","year":"2024","journal-title":"Sensors"},{"key":"ref5","article-title":"An explainable XGBoost-based model for network intrusion detection in IoT","volume":"235","author":"Dong","year":"2023","journal-title":"Comput. Netw."},{"key":"ref6","doi-asserted-by":"publisher","DOI":"10.1007\/s42452-024-06165-w"},{"key":"ref7","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2024.101420"},{"key":"ref8","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2025.104459"},{"key":"ref9","doi-asserted-by":"publisher","DOI":"10.1109\/jiot.2020.3004077"},{"key":"ref10","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3170449"},{"key":"ref11","doi-asserted-by":"publisher","DOI":"10.1109\/LCN60385.2024.10639633"},{"issue":"24","key":"ref12","first-page":"4181","article-title":"Forensic analysis on IoT device using M2M framework","volume":"11","author":"Mazhar","year":"2022","journal-title":"Electronics"},{"key":"ref13","article-title":"IoTDevID: Behaviour-based device identification method","volume":"132","author":"Kostas","year":"2022","journal-title":"Ad Hoc Netw."},{"key":"ref14","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2024.101351"},{"key":"ref15","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-87028-1"},{"key":"ref16","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-024-74822-6"},{"key":"ref17","doi-asserted-by":"publisher","DOI":"10.3390\/info15070404"},{"key":"ref18","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-03868-x"},{"key":"ref19","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2024.3383159"},{"key":"ref20","article-title":"Federated isolation forest for privacy preserving anomaly detection in IoT edge networks","volume":"641","author":"Gao","year":"2025","journal-title":"Inf. Sci."},{"key":"ref21","doi-asserted-by":"publisher","DOI":"10.1038\/s41598-025-93501-8"},{"key":"ref22","doi-asserted-by":"publisher","DOI":"10.1109\/CONIT61985.2024.10627334"},{"key":"ref23","doi-asserted-by":"publisher","DOI":"10.1016\/j.iot.2025.101631"},{"key":"ref24","doi-asserted-by":"crossref","first-page":"2857","DOI":"10.32604\/cmc.2023.042726","article-title":"Hybrid CNN-LSTM attention model for IoT attack detection using confusion matrices","volume":"75","author":"Kolhar","year":"2023","journal-title":"Comput. Mater. Continua"},{"key":"ref25","doi-asserted-by":"publisher","DOI":"10.32604\/cmc.2023.042726"},{"key":"ref26","doi-asserted-by":"publisher","DOI":"10.1109\/MPRV.2018.03367731"},{"key":"ref27","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2926365"},{"key":"ref28","doi-asserted-by":"publisher","DOI":"10.1109\/ICPADS60453.2023.00348"},{"key":"ref29","doi-asserted-by":"publisher","DOI":"10.1145\/3539736"},{"key":"ref30","doi-asserted-by":"publisher","DOI":"10.1145\/3266444.3266452"},{"key":"ref31","doi-asserted-by":"publisher","DOI":"10.1002\/widm.1337"},{"key":"ref32","doi-asserted-by":"publisher","DOI":"10.3390\/fi13050117"}],"container-title":["IEEE Access"],"original-title":[],"link":[{"URL":"http:\/\/xplorestaging.ieee.org\/ielx8\/6287639\/11323511\/11329442.pdf?arnumber=11329442","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,1,15]],"date-time":"2026-01-15T20:51:11Z","timestamp":1768510271000},"score":1,"resource":{"primary":{"URL":"https:\/\/ieeexplore.ieee.org\/document\/11329442\/"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026]]},"references-count":32,"URL":"https:\/\/doi.org\/10.1109\/access.2026.3651297","relation":{},"ISSN":["2169-3536"],"issn-type":[{"value":"2169-3536","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026]]}}}