{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,21]],"date-time":"2026-05-21T17:38:15Z","timestamp":1779385095637,"version":"3.53.1"},"reference-count":44,"publisher":"Association for Computing Machinery (ACM)","issue":"1","license":[{"start":{"date-parts":[[2024,2,22]],"date-time":"2024-02-22T00:00:00Z","timestamp":1708560000000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.acm.org\/publications\/policies\/copyright_policy#Background"}],"funder":[{"DOI":"10.13039\/501100012166","name":"National Key R&D Program of China","doi-asserted-by":"crossref","award":["2021YFB3300200"],"award-info":[{"award-number":["2021YFB3300200"]}],"id":[{"id":"10.13039\/501100012166","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100001809","name":"National Natural Science Foundation of China","doi-asserted-by":"crossref","award":["92267105"],"award-info":[{"award-number":["92267105"]}],"id":[{"id":"10.13039\/501100001809","id-type":"DOI","asserted-by":"crossref"}]},{"DOI":"10.13039\/501100018601","name":"Guangdong Special Support Plan","doi-asserted-by":"crossref","award":["2021TQ06X990"],"award-info":[{"award-number":["2021TQ06X990"]}],"id":[{"id":"10.13039\/501100018601","id-type":"DOI","asserted-by":"crossref"}]},{"name":"Third Xinjiang Scientific Expedition Program","award":["2021XJKK1300"],"award-info":[{"award-number":["2021XJKK1300"]}]},{"name":"Shenzhen Science and Technology Plan Project","award":["SGDX20220530111001003"],"award-info":[{"award-number":["SGDX20220530111001003"]}]},{"name":"Key-Area Research and Development Program of Guangdong Province","award":["2021B010140005"],"award-info":[{"award-number":["2021B010140005"]}]},{"name":"Chinese Academy of Sciences President\u2019s International Fellowship Initiative","award":["2023VTA0001, 2023DT0003"],"award-info":[{"award-number":["2023VTA0001, 2023DT0003"]}]}],"content-domain":{"domain":["dl.acm.org"],"crossmark-restriction":true},"short-container-title":["ACM Trans. Internet Technol."],"published-print":{"date-parts":[[2024,2,29]]},"abstract":"<jats:p>As Internet of Things devices become widely used in the real-world, it is crucial to protect them from malicious intrusions. However, the data scarcity of IoT limits the applicability of traditional intrusion detection methods, which are highly data-dependent. To address this, in this article, we propose the Open-Set Dandelion Network (OSDN) based on unsupervised heterogeneous domain adaptation in an open-set manner. The OSDN model performs intrusion knowledge transfer from the knowledge-rich source network intrusion domain to facilitate more accurate intrusion detection for the data-scarce target IoT intrusion domain. Under the open-set setting, it can also detect newly-emerged target domain intrusions that are not observed in the source domain. To achieve this, the OSDN model forms the source domain into a dandelion-like feature space in which each intrusion category is compactly grouped and different intrusion categories are separated, i.e., simultaneously emphasising inter-category separability and intra-category compactness. The dandelion-based target membership mechanism then forms the target dandelion. Then, the dandelion angular separation mechanism achieves better inter-category separability, and the dandelion embedding alignment mechanism further aligns both dandelions in a finer manner. To promote intra-category compactness, the discriminating sampled dandelion mechanism is used. Assisted by the intrusion classifier trained using both known and generated unknown intrusion knowledge, a semantic dandelion correction mechanism emphasises easily-confused categories and guides better inter-category separability. Holistically, these mechanisms form the OSDN model that effectively performs intrusion knowledge transfer to benefit IoT intrusion detection. Comprehensive experiments on several intrusion datasets verify the effectiveness of the OSDN model, outperforming three state-of-the-art baseline methods by 16.9%. The contribution of each OSDN constituting component, the stability and the efficiency of the OSDN model are also verified.<\/jats:p>","DOI":"10.1145\/3639822","type":"journal-article","created":{"date-parts":[[2024,1,9]],"date-time":"2024-01-09T15:13:44Z","timestamp":1704813224000},"page":"1-26","update-policy":"https:\/\/doi.org\/10.1145\/crossmark-policy","source":"Crossref","is-referenced-by-count":7,"title":["Open Set Dandelion Network for IoT Intrusion Detection"],"prefix":"10.1145","volume":"24","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-1347-1974","authenticated-orcid":false,"given":"Jiashu","family":"Wu","sequence":"first","affiliation":[{"name":"Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, China and University of Chinese Academy of Sciences, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-1018-2162","authenticated-orcid":false,"given":"Hao","family":"Dai","sequence":"additional","affiliation":[{"name":"Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, China and University of Chinese Academy of Sciences, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0003-2764-823X","authenticated-orcid":false,"given":"Kenneth B.","family":"Kent","sequence":"additional","affiliation":[{"name":"University of New Brunswick, Fredericton, Canada"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8541-4437","authenticated-orcid":false,"given":"Jerome","family":"Yen","sequence":"additional","affiliation":[{"name":"University of Macau, Taipa, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9480-0356","authenticated-orcid":false,"given":"Chengzhong","family":"Xu","sequence":"additional","affiliation":[{"name":"University of Macau, Taipa, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-9438-6060","authenticated-orcid":false,"given":"Yang","family":"Wang","sequence":"additional","affiliation":[{"name":"Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, Shenzhen, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"320","published-online":{"date-parts":[[2024,2,22]]},"reference":[{"key":"e_1_3_3_2_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3103829"},{"key":"e_1_3_3_3_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2926365"},{"key":"e_1_3_3_4_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2021.3085194"},{"key":"e_1_3_3_5_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103167"},{"key":"e_1_3_3_6_2","doi-asserted-by":"publisher","DOI":"10.1109\/GLOBECOM42002.2020.9348167"},{"key":"e_1_3_3_7_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSC.2023.3247049"},{"key":"e_1_3_3_8_2","doi-asserted-by":"publisher","DOI":"10.1109\/NOF.2018.8598138"},{"key":"e_1_3_3_9_2","doi-asserted-by":"publisher","DOI":"10.1109\/TDSC.2020.2973992"},{"key":"e_1_3_3_10_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.2970501"},{"key":"e_1_3_3_11_2","doi-asserted-by":"publisher","DOI":"10.1109\/TNNLS.2020.3017213"},{"issue":"1","key":"e_1_3_3_12_2","article-title":"Domain-adversarial training of neural networks","volume":"17","author":"Ganin Yaroslav","year":"2016","unstructured":"Yaroslav Ganin, Evgeniya Ustinova, Hana Ajakan, Pascal Germain, Hugo Larochelle, Fran\u00e7ois Laviolette, Mario Marchand, and Victor Lempitsky. 2016. Domain-adversarial training of neural networks. The Journal of Machine Learning Research 17, 1 (2016), 2096\u20132030.","journal-title":"The Journal of Machine Learning Research"},{"issue":"2","key":"e_1_3_3_13_2","first-page":"179","article-title":"Selecting optimal subset of features for intrusion detection systems","volume":"4","author":"Harb Hany M.","year":"2011","unstructured":"Hany M. Harb, Afaf A. Zaghrot, Mohamed A. Gomaa, and Abeer S. Desuky. 2011. Selecting optimal subset of features for intrusion detection systems. Advances in Computational Sciences and Technology 4, 2 (2011), 179\u2013192.","journal-title":"Advances in Computational Sciences and Technology"},{"key":"e_1_3_3_14_2","unstructured":"Setz Hettich. 1999. The uci kdd archive. http:\/\/kdd.ics.uci.edu (1999)."},{"key":"e_1_3_3_15_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV48922.2021.00919"},{"key":"e_1_3_3_16_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.future.2019.05.041"},{"key":"e_1_3_3_17_2","first-page":"12376","volume-title":"Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition","author":"Kundu Jogendra Nath","year":"2020","unstructured":"Jogendra Nath Kundu, Naveen Venkat, Ambareesh Revanur, R Venkatesh Babu, et\u00a0al. 2020. Towards inheritable models for open-set domain adaptation. In Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition. 12376\u201312385."},{"key":"e_1_3_3_18_2","doi-asserted-by":"publisher","DOI":"10.1145\/3394171.3413995"},{"key":"e_1_3_3_19_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-3-031-19830-4_1"},{"key":"e_1_3_3_20_2","first-page":"12917","article-title":"Pareto domain adaptation","volume":"34","author":"Liang Jian","year":"2021","unstructured":"Jian Liang, Kaixiong Gong, Shuang Li, Chi Harold Liu, Han Li, Di Liu, Guoren Wang, et\u00a0al. 2021. Pareto domain adaptation. Advances in Neural Information Processing Systems 34 (2021), 12917\u201312929.","journal-title":"Advances in Neural Information Processing Systems"},{"key":"e_1_3_3_21_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2018.2869847"},{"key":"e_1_3_3_22_2","first-page":"6468","volume-title":"Proceedings of the International Conference on Machine Learning","author":"Luo Yadan","year":"2020","unstructured":"Yadan Luo, Zijian Wang, Zi Huang, and Mahsa Baktashmotlagh. 2020. Progressive graph learning for open-set domain adaptation. In Proceedings of the International Conference on Machine Learning. PMLR, 6468\u20136478."},{"key":"e_1_3_3_23_2","doi-asserted-by":"publisher","DOI":"10.1145\/3394504"},{"key":"e_1_3_3_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/TII.2022.3164770"},{"key":"e_1_3_3_25_2","doi-asserted-by":"crossref","unstructured":"Yisroel Mirsky Tomer Doitshman Yuval Elovici and Asaf Shabtai. 2018. Kitsune: An ensemble of autoencoders for online network intrusion detection. In Proceedings of the 2018 Network and Distributed Systems Security Symposium. 1\u201315.","DOI":"10.14722\/ndss.2018.23204"},{"key":"e_1_3_3_26_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSMC.2013.2265083"},{"key":"e_1_3_3_27_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSG.2013.2258948"},{"key":"e_1_3_3_28_2","doi-asserted-by":"publisher","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"e_1_3_3_29_2","article-title":"Stacked autoencoder-based intrusion detection system to combat financial fraudulent","author":"Muhammad Ghulam","year":"2020","unstructured":"Ghulam Muhammad, M. Shamim Hossain, and Sahil Garg. 2020. Stacked autoencoder-based intrusion detection system to combat financial fraudulent. IEEE Internet of Things Journal 10, 3 (2020), 2071\u20132078.","journal-title":"IEEE Internet of Things Journal"},{"key":"e_1_3_3_30_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2948149"},{"key":"e_1_3_3_31_2","doi-asserted-by":"publisher","DOI":"10.1109\/ICCV.2017.88"},{"key":"e_1_3_3_32_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2020.3048038"},{"key":"e_1_3_3_33_2","doi-asserted-by":"publisher","DOI":"10.1145\/3340531.3411866"},{"key":"e_1_3_3_34_2","doi-asserted-by":"publisher","DOI":"10.1109\/TNSM.2020.3036138"},{"key":"e_1_3_3_35_2","first-page":"108","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization.","volume":"1","author":"Sharafaldin Iman","year":"2018","unstructured":"Iman Sharafaldin, Arash Habibi Lashkari, and Ali A. Ghorbani. 2018. Toward generating a new intrusion detection dataset and intrusion traffic characterization. ICISSP 1 (2018), 108\u2013116.","journal-title":"ICISSP"},{"key":"e_1_3_3_36_2","doi-asserted-by":"publisher","DOI":"10.1109\/ACCESS.2020.3009843"},{"key":"e_1_3_3_37_2","doi-asserted-by":"publisher","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"e_1_3_3_38_2","doi-asserted-by":"publisher","DOI":"10.1109\/TSMCC.2010.2048428"},{"key":"e_1_3_3_39_2","doi-asserted-by":"publisher","DOI":"10.1109\/TCSS.2019.2924442"},{"key":"e_1_3_3_40_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3239872"},{"key":"e_1_3_3_41_2","doi-asserted-by":"publisher","DOI":"10.1109\/TC.2022.3191969"},{"key":"e_1_3_3_42_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2023.3262458"},{"key":"e_1_3_3_43_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2022.3218339"},{"key":"e_1_3_3_44_2","doi-asserted-by":"publisher","DOI":"10.1109\/TKDE.2022.3185233"},{"key":"e_1_3_3_45_2","doi-asserted-by":"publisher","DOI":"10.1109\/JIOT.2019.2901348"}],"container-title":["ACM Transactions on Internet Technology"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3639822","content-type":"unspecified","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/dl.acm.org\/doi\/pdf\/10.1145\/3639822","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,6,19]],"date-time":"2025-06-19T00:03:50Z","timestamp":1750291430000},"score":1,"resource":{"primary":{"URL":"https:\/\/dl.acm.org\/doi\/10.1145\/3639822"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,2,22]]},"references-count":44,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2024,2,29]]}},"alternative-id":["10.1145\/3639822"],"URL":"https:\/\/doi.org\/10.1145\/3639822","relation":{},"ISSN":["1533-5399","1557-6051"],"issn-type":[{"value":"1533-5399","type":"print"},{"value":"1557-6051","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,2,22]]},"assertion":[{"value":"2023-03-28","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-01-04","order":1,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2024-02-22","order":2,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}]}}