{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,23]],"date-time":"2026-08-23T17:35:49Z","timestamp":1787506549638,"version":"build-2736575974"},"reference-count":109,"publisher":"Springer Science and Business Media LLC","issue":"1","license":[{"start":{"date-parts":[[2018,12,1]],"date-time":"2018-12-01T00:00:00Z","timestamp":1543622400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J Cloud Comp"],"published-print":{"date-parts":[[2018,12]]},"DOI":"10.1186\/s13677-018-0123-6","type":"journal-article","created":{"date-parts":[[2018,12,3]],"date-time":"2018-12-03T22:44:01Z","timestamp":1543877041000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":353,"title":["Intrusion detection systems for IoT-based smart environments: a survey"],"prefix":"10.1186","volume":"7","author":[{"given":"Mohamed Faisal","family":"Elrawy","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3800-0757","authenticated-orcid":false,"given":"Ali Ismail","family":"Awad","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hesham F. A.","family":"Hamed","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2018,12,4]]},"reference":[{"issue":"1","key":"123_CR1","first-page":"133","volume":"40","author":"J King","year":"2016","unstructured":"King J, Awad AI (2016) A distributed security mechanism for resource-constrained IoT devices. Informatica (Slovenia) 40(1):133\u2013143.","journal-title":"Informatica (Slovenia)"},{"key":"123_CR2","doi-asserted-by":"publisher","first-page":"638","DOI":"10.1109\/MIPRO.2016.7522219","volume-title":"2016 39th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO)","author":"M Weber","year":"2016","unstructured":"Weber M, Boban M (2016) Security challenges of the internet of things In: 2016 39th International Convention on Information and Communication Technology, Electronics and Microelectronics (MIPRO), 638\u2013643.. IEEE, Opatija."},{"key":"123_CR3","doi-asserted-by":"publisher","first-page":"84","DOI":"10.1109\/FiCloud.2016.20","volume-title":"2016 IEEE 4th International Conference on Future Internet of Things and Cloud (FiCloud)","author":"AA Gendreau","year":"2016","unstructured":"Gendreau AA, Moorman M (2016) Survey of intrusion detection systems towards an end to end secure internet of things In: 2016 IEEE 4th International Conference on Future Internet of Things and Cloud (FiCloud), 84\u201390.. IEEE, Vienna."},{"issue":"9","key":"123_CR4","doi-asserted-by":"publisher","first-page":"43","DOI":"10.1109\/MCOM.2016.7565271","volume":"54","author":"VP Kafle","year":"2016","unstructured":"Kafle VP, Fukushima Y, Harai H (2016) Internet of things standardization in ITU and prospective networking technologies. IEEE Commun Mag 54(9):43\u201349.","journal-title":"IEEE Commun Mag"},{"issue":"1","key":"123_CR5","doi-asserted-by":"publisher","first-page":"22","DOI":"10.1109\/JIOT.2014.2306328","volume":"1","author":"A Zanella","year":"2014","unstructured":"Zanella A, Bui N, Castellani A, Vangelista L, Zorzi M (2014) Internet of things for smart cities. IEEE Internet Things J 1(1):22\u201332.","journal-title":"IEEE Internet Things J"},{"key":"123_CR6","unstructured":"IoT Bots Cause Massive Internet Outage. https:\/\/www.beyondtrust.com\/blog\/iot-bots-cause-october-21st-2016-massive-internet-outage\/ . Accessed 22 Oct 2016."},{"key":"123_CR7","doi-asserted-by":"publisher","first-page":"25","DOI":"10.1016\/j.jnca.2017.02.009","volume":"84","author":"BB Zarpel\u00e3o","year":"2017","unstructured":"Zarpel\u00e3o BB, Miani RS, Kawakani CT, de Alvarenga SC (2017) A survey of intrusion detection in internet of things. J Netw Comput Appl 84:25\u201337.","journal-title":"J Netw Comput Appl"},{"key":"123_CR8","doi-asserted-by":"publisher","first-page":"43","DOI":"10.1109\/DINWC.2018.8356993","volume-title":"2018 Sixth International Conference on Digital Information, Networking, and Wireless Communications (DINWC)","author":"W Ayoub","year":"2018","unstructured":"Ayoub W, Mroue M, Nouvel F, Samhat AE, Pr\u00e9votet J (2018) Towards IP over LPWANs technologies: LoRaWAN, DASH7, NB-IoT In: 2018 Sixth International Conference on Digital Information, Networking, and Wireless Communications (DINWC), 43\u201347.. IEEE, Beirut."},{"key":"123_CR9","first-page":"1","volume-title":"2017 3rd IEEE International Conference on Cybernetics (CYBCONF)","author":"E Aras","year":"2017","unstructured":"Aras E, Ramachandran GS, Lawrence P, Hughes D (2017) Exploring the security vulnerabilities of LoRa In: 2017 3rd IEEE International Conference on Cybernetics (CYBCONF), 1\u20136.. IEEE, Exeter."},{"key":"123_CR10","first-page":"5","volume-title":"Proceedings of the 4th ACM MobiHoc Workshop on Experiences with the Design and Implementation of Smart Objects, SMARTOBJECTS \u201918","author":"I Butun","year":"2018","unstructured":"Butun I, Pereira N, Gidlund M (2018) Analysis of LoRaWAN v1.1 security In: Proceedings of the 4th ACM MobiHoc Workshop on Experiences with the Design and Implementation of Smart Objects, SMARTOBJECTS \u201918, 5\u2013156.. ACM, New York."},{"key":"123_CR11","doi-asserted-by":"publisher","first-page":"17","DOI":"10.1016\/j.comnet.2018.07.017","volume":"144","author":"A \u010colakovi\u0107","year":"2018","unstructured":"\u010colakovi\u0107 A, Had\u017eiali\u0107 M (2018) Internet of things (IoT): A review of enabling technologies, challenges, and open research issues. Comput Netw 144:17\u201339.","journal-title":"Comput Netw"},{"key":"123_CR12","unstructured":"IEEEThe institute, Special Report:The Internet of Things. http:\/\/theinstitute.ieee.org\/static\/special-report-the-internet-of-things . Accessed 8 Jan 2017."},{"issue":"2","key":"123_CR13","doi-asserted-by":"publisher","first-page":"101","DOI":"10.1108\/02602280610652677","volume":"26","author":"F Thiesse","year":"2006","unstructured":"Thiesse F, Michahelles F (2006) An overview of EPC technology. Sens Rev 26(2):101\u2013105.","journal-title":"Sens Rev"},{"key":"123_CR14","unstructured":"Minerva R, Biru A, Rotondi D (2015) Towards a definition of the internet of things (IoT). Technical report, IEEE, Internet of Things."},{"key":"123_CR15","unstructured":"SPU (2005) The internet of things executive summary. Technical report, The ITU Strategy & Policy Unit, (SPU)."},{"key":"123_CR16","doi-asserted-by":"publisher","first-page":"79","DOI":"10.1109\/WF-IoT.2014.6803124","volume-title":"2014 IEEE World Forum on Internet of Things (WF-IoT)","author":"S Kr\u010do","year":"2014","unstructured":"Kr\u010do S, Pokri\u0107 B, Carrez F (2014) Designing IoT architecture(s): A european perspective In: 2014 IEEE World Forum on Internet of Things (WF-IoT), 79\u201384.. IEEE, Seoul."},{"issue":"3","key":"123_CR17","doi-asserted-by":"crossref","first-page":"291","DOI":"10.1016\/j.jksuci.2016.10.003","volume":"30","author":"PP Ray","year":"2018","unstructured":"Ray PP (2018) A survey on Internet of Things architectures. J King Saud Univ Comput Inform Sci 30(3):291\u2013319.","journal-title":"J King Saud Univ Comput Inform Sci"},{"key":"123_CR18","unstructured":"Bradley J, Loucks J, Macaulay J, Noronha A (2013) Internet of everything (IoE) value index. Technical report, Cisco."},{"key":"123_CR19","unstructured":"IEEE (2015) Standards, Internet of Things, IEEE P2413. http:\/\/standards.ieee.org\/develop\/project\/2413.html . Accessed 8 Jan 2017."},{"issue":"1","key":"123_CR20","doi-asserted-by":"publisher","first-page":"49","DOI":"10.1007\/s11277-011-0288-5","volume":"58","author":"D Bandyopadhyay","year":"2011","unstructured":"Bandyopadhyay D, Sen J (2011) Internet of things: Applications and challenges in technology and standardization. Wirel Pers Commun 58(1):49\u201369.","journal-title":"Wirel Pers Commun"},{"issue":"3","key":"123_CR21","doi-asserted-by":"publisher","first-page":"622","DOI":"10.1016\/j.comnet.2012.10.003","volume":"57","author":"C Han","year":"2013","unstructured":"Han C, Jornet JM, Fadel E, Akyildiz IF (2013) A cross-layer communication module for the internet of things. Comput Netw 57(3):622\u2013633.","journal-title":"Comput Netw"},{"key":"123_CR22","doi-asserted-by":"publisher","first-page":"257","DOI":"10.1109\/FIT.2012.53","volume-title":"2012 10th International Conference on Frontiers of Information Technology","author":"R Khan","year":"2012","unstructured":"Khan R, Khan S, Zaheer R, Khan S (2012) Future internet: The internet of things architecture, possible applications and key challenges In: 2012 10th International Conference on Frontiers of Information Technology, 257\u2013260.. IEEE, Islamabad."},{"key":"123_CR23","doi-asserted-by":"publisher","first-page":"374","DOI":"10.1109\/ICSensT.2012.6461705","volume-title":"2012 Sixth International Conference on Sensing Technology (ICST)","author":"BBP Rao","year":"2012","unstructured":"Rao BBP, Saluia P, Sharma N, Mittal A, Sharma SV (2012) Cloud computing for internet of things & sensing based applications In: 2012 Sixth International Conference on Sensing Technology (ICST), 374\u2013380.. IEEE, Kolkata."},{"issue":"1","key":"123_CR24","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1186\/s13677-014-0014-4","volume":"3","author":"Z Khan","year":"2014","unstructured":"Khan Z, Kiani SL, Soomro K (2014) A framework for cloud-based context-aware information services for citizens in smart cities. J Cloud Comput 3(1):14.","journal-title":"J Cloud Comput"},{"issue":"4","key":"123_CR25","doi-asserted-by":"publisher","first-page":"2347","DOI":"10.1109\/COMST.2015.2444095","volume":"17","author":"A Al-Fuqaha","year":"2015","unstructured":"Al-Fuqaha A, Guizani M, Mohammadi M, Aledhari M, Ayyash M (2015) Internet of things: A survey on enabling technologies, protocols, and applications. IEEE Commun Surv Tutor 17(4):2347\u20132376.","journal-title":"IEEE Commun Surv Tutor"},{"key":"123_CR26","doi-asserted-by":"crossref","first-page":"492","DOI":"10.1007\/978-3-319-10840-7_59","volume-title":"Intelligent Data Engineering and Automated Learning \u2013 IDEAL 2014","author":"B Charif","year":"2014","unstructured":"Charif B, Awad AI (2014) Business and government organizations\u2019 adoption of cloud computing. In: Corchado E, Lozano JA, Quinti\u00e1n H, Yin H (eds)Intelligent Data Engineering and Automated Learning \u2013 IDEAL 2014, 492\u2013501.. Springer, Cham."},{"key":"123_CR27","unstructured":"Citron R, Maxwell K, Woods E (2017) Smart city services market. Technical report, Navigant Research."},{"issue":"5","key":"123_CR28","doi-asserted-by":"publisher","first-page":"10","DOI":"10.1109\/MWC.2016.7721736","volume":"23","author":"E Ahmed","year":"2016","unstructured":"Ahmed E, Yaqoob I, Gani A, Imran M, Guizani M (2016) Internet-of-things-based smart environments: state of the art, taxonomy, and open research challenges. IEEE Wirel Commun 23(5):10\u201316.","journal-title":"IEEE Wirel Commun"},{"key":"123_CR29","volume-title":"Smart Cities and the Future Internet: Towards Cooperation Frameworks for Open Innovation","author":"H Schaffers","year":"2011","unstructured":"Schaffers H, Komninos N, Pallot M, Trousse B, Nilsson M, Oliveira A (2011) Smart Cities and the Future Internet: Towards Cooperation Frameworks for Open Innovation. Springer, Berlin."},{"key":"123_CR30","first-page":"1","volume-title":"2016 IEEE International Conference on Pervasive Computing and Communication Workshops (PerCom Workshops)","author":"A Taherkordi","year":"2016","unstructured":"Taherkordi A, Eliassen F (2016) Scalable modeling of cloud-based IoT services for smart cities In: 2016 IEEE International Conference on Pervasive Computing and Communication Workshops (PerCom Workshops), 1\u20136.. IEEE, Sydney."},{"issue":"3","key":"123_CR31","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3390\/s18030817","volume":"18","author":"B Ali","year":"2018","unstructured":"Ali B, Awad AI (2018) Cyber and physical security vulnerability assessment for IoT-based smart homes. Sensors 18(3):1\u201317.","journal-title":"Sensors"},{"issue":"3","key":"123_CR32","doi-asserted-by":"publisher","first-page":"1294","DOI":"10.1109\/COMST.2015.2388550","volume":"17","author":"J Granjal","year":"2015","unstructured":"Granjal J, Monteiro E, S\u00e1Silva J (2015) Security for the internet of things: A survey of existing protocols and open research issues. IEEE Commun Surv Tutor 17(3):1294\u20131312.","journal-title":"IEEE Commun Surv Tutor"},{"key":"123_CR33","doi-asserted-by":"crossref","unstructured":"Kumar S, Vealey T, Srivastava H (2016) Security in internet of things: Challenges, solutions and future directions In: 2016 49th Hawaii International Conference on System Sciences (HICSS), 5772\u20135781, Koloa.","DOI":"10.1109\/HICSS.2016.714"},{"issue":"3","key":"123_CR34","doi-asserted-by":"publisher","first-page":"27","DOI":"10.3390\/fi9030027","volume":"9","author":"Xiruo Liu","year":"2017","unstructured":"Liu X, Zhao M, Li S, Zhang F, Trappe W (2017) A security framework for the internet of things in the future internet architecture. Future Internet 9(3).","journal-title":"Future Internet"},{"issue":"1","key":"123_CR35","doi-asserted-by":"publisher","first-page":"14","DOI":"10.1109\/MSP.2015.7","volume":"13","author":"W Trappe","year":"2015","unstructured":"Trappe W, Howard R, Moore RS (2015) Low-energy security: Limits and opportunities in the internet of things. IEEE Secur Priv 13(1):14\u201321.","journal-title":"IEEE Secur Priv"},{"key":"123_CR36","doi-asserted-by":"publisher","first-page":"36428","DOI":"10.1109\/ACCESS.2018.2838339","volume":"6","author":"AM Hassan","year":"2018","unstructured":"Hassan AM, Awad AI (2018) Urban transition in the era of the internet of things: Social implications and privacy challenges. IEEE Access 6:36428\u201336440.","journal-title":"IEEE Access"},{"key":"123_CR37","volume-title":"Attack Identification Framework for IoT Devices","author":"R Mohan","year":"2016","unstructured":"Mohan R, Danda J, Hota C (2016) Attack Identification Framework for IoT Devices. Springer, New Delhi."},{"issue":"8","key":"123_CR38","doi-asserted-by":"publisher","first-page":"2481","DOI":"10.1007\/s11276-014-0761-7","volume":"20","author":"Q Jing","year":"2014","unstructured":"Jing Q, Vasilakos AV, Wan J, Lu J, Qiu D (2014) Security of the internet of things: perspectives and challenges. Wirel Netw 20(8):2481\u20132501.","journal-title":"Wirel Netw"},{"key":"123_CR39","doi-asserted-by":"publisher","first-page":"218","DOI":"10.1109\/METROI4.2018.8428344","volume-title":"2018 Workshop on Metrology for Industry 4.0 and IoT","author":"S Forsstr\u00f6m","year":"2018","unstructured":"Forsstr\u00f6m S, Butun I, Eldefrawy M, Jennehag U, Gidlund M (2018) Challenges of securing the industrial internet of things value chain In: 2018 Workshop on Metrology for Industry 4.0 and IoT, 218\u2013223.. IEEE, Brescia."},{"key":"123_CR40","doi-asserted-by":"publisher","first-page":"884","DOI":"10.1109\/LCN.2008.4664298","volume-title":"2008 33rd IEEE Conference on Local Computer Networks (LCN)","author":"J Rubio-Loyola","year":"2008","unstructured":"Rubio-Loyola J, Sala D, Ali AI (2008) Accurate real-time monitoring of bottlenecks and performance of packet trace collection In: 2008 33rd IEEE Conference on Local Computer Networks (LCN), 884\u2013891.. IEEE, Montreal."},{"key":"123_CR41","doi-asserted-by":"publisher","first-page":"61","DOI":"10.1109\/LANMAN.2008.4675845","volume-title":"2008 16th IEEE Workshop on Local and Metropolitan Area Networks","author":"J Rubio-Loyola","year":"2008","unstructured":"Rubio-Loyola J, Sala D, Ali AI (2008) Maximizing packet loss monitoring accuracy for reliable trace collections In: 2008 16th IEEE Workshop on Local and Metropolitan Area Networks, 61\u201366.. IEEE, Chij-Napoca."},{"key":"123_CR42","doi-asserted-by":"publisher","DOI":"10.1007\/978-0-387-88771-5","volume-title":"Network Intrusion Detection and Prevention, Advances in Information Security, vol. 47","author":"AA Ghorbani","year":"2010","unstructured":"Ghorbani AA, Lu W, Tavallaee M (2010) Network Intrusion Detection and Prevention, Advances in Information Security, vol. 47. Springer, US."},{"issue":"2","key":"123_CR43","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3390\/a10020039","volume":"10","author":"S Anwar","year":"2017","unstructured":"Anwar S, Mohamad Zain J, Zolkipli MF, Inayat Z, Khan S, Anthony B, Chang V (2017) From intrusion detection to an intrusion response system: Fundamentals, requirements, and future directions. Algorithms 10(2):1\u201324.","journal-title":"Algorithms"},{"issue":"2","key":"123_CR44","doi-asserted-by":"publisher","first-page":"222","DOI":"10.1109\/TSE.1987.232894","volume":"SE-13","author":"DE Denning","year":"1987","unstructured":"Denning DE (1987) An intrusion-detection model. IEEE Trans Softw Eng SE-13(2):222\u2013232.","journal-title":"IEEE Trans Softw Eng"},{"key":"123_CR45","unstructured":"Stefan A (2000) Intrusion detection systems: A survey and taxonomy. Technical report, Chalmers University of Technology G\u00f6teborg, Sweden."},{"issue":"1","key":"123_CR46","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1186\/1687-1499-2013-271","volume":"2013","author":"S Ganapathy","year":"2013","unstructured":"Ganapathy S, Kulothungan K, Muthurajkumar S, Vijayalakshmi M, Yogesh P, Kannan A (2013) Intelligent feature selection and classification techniques for intrusion detection in networks: a survey. EURASIP J Wirel Commun Netw 2013(1):1\u201316.","journal-title":"EURASIP J Wirel Commun Netw"},{"key":"123_CR47","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1016\/j.comcom.2014.01.012","volume":"42","author":"R Mitchell","year":"2014","unstructured":"Mitchell R, Chen I-R (2014) A survey of intrusion detection in wireless network applications. Comput Commun 42:1\u201323.","journal-title":"Comput Commun"},{"issue":"1","key":"123_CR48","doi-asserted-by":"publisher","first-page":"266","DOI":"10.1109\/SURV.2013.050113.00191","volume":"16","author":"I Butun","year":"2014","unstructured":"Butun I, Morgera SD, Sankar R (2014) A survey of intrusion detection systems in wireless sensor networks. IEEE Commun Surv Tutor 16(1):266\u2013282.","journal-title":"IEEE Commun Surv Tutor"},{"issue":"4","key":"123_CR49","doi-asserted-by":"publisher","first-page":"807","DOI":"10.1109\/TC.2013.13","volume":"63","author":"G Creech","year":"2014","unstructured":"Creech G, Hu J (2014) A semantic approach to host-based intrusion detection systems using contiguousand discontiguous system call patterns. IEEE Trans Comput 63(4):807\u2013819.","journal-title":"IEEE Trans Comput"},{"key":"123_CR50","doi-asserted-by":"publisher","first-page":"93","DOI":"10.1016\/j.pisc.2016.04.005","volume":"8","author":"S Kumar","year":"2016","unstructured":"Kumar S, Gautam, Om H (2016) Computational neural network regression model for host based intrusion detection system. Perspect Sci 8:93\u201395.","journal-title":"Perspect Sci"},{"key":"123_CR51","unstructured":"SnortThe Open Source Network Intrusion Detection System. https:\/\/www.snort.org . Accessed 1 Nov 2016."},{"issue":"3","key":"123_CR52","doi-asserted-by":"publisher","first-page":"722","DOI":"10.1109\/TIE.2010.2052533","volume":"58","author":"F Macia-Perez","year":"2011","unstructured":"Macia-Perez F, Mora-Gimeno FJ, Marcos-Jorquera D, Gil-Martinez-Abarca JA, Ramos-Morillo H, Lorenzo-Fonseca I (2011) Network intrusion detection system embedded on a smart sensor. IEEE Trans Ind Electron 58(3):722\u2013732.","journal-title":"IEEE Trans Ind Electron"},{"issue":"11","key":"123_CR53","doi-asserted-by":"publisher","first-page":"2322","DOI":"10.1109\/TC.2012.105","volume":"62","author":"S Pontarelli","year":"2013","unstructured":"Pontarelli S, Bianchi G, Teofili S (2013) Traffic-aware design of a high-speed fpga network intrusion detection system. IEEE Trans Comput 62(11):2322\u20132334.","journal-title":"IEEE Trans Comput"},{"key":"123_CR54","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-0159-8","volume-title":"Nonlinear Principal Component Analysis and Its Applications, JSS Research Series in Statistics","author":"Y Mori","year":"2016","unstructured":"Mori Y, Kuroda M, Makino N (2016) Nonlinear Principal Component Analysis and Its Applications, JSS Research Series in Statistics. Springer, Singapore."},{"key":"123_CR55","volume-title":"Principal Component Analysis, Springer Series in Statistics, vol. 2","author":"IT Jolliffe","year":"2002","unstructured":"Jolliffe IT (2002) Principal Component Analysis, Springer Series in Statistics, vol. 2. Springer, New York."},{"key":"123_CR56","first-page":"1","volume-title":"2016 23rd International Conference on Telecommunications (ICT)","author":"MF Elrawy","year":"2016","unstructured":"Elrawy MF, Awad AI, Hamed HFA (2016) Flow-based features for a robust intrusion detection system targeting mobile traffic In: 2016 23rd International Conference on Telecommunications (ICT), 1\u20136.. IEEE, Thessaloniki."},{"key":"123_CR57","first-page":"1","volume-title":"MILCOM 2009 - 2009 IEEE Military Communications Conference","author":"N Nwanze","year":"2009","unstructured":"Nwanze N, i. Kim S, Summerville DH (2009) Payload modeling for network intrusion detection systems In: MILCOM 2009 - 2009 IEEE Military Communications Conference, 1\u20137.. IEEE, Boston."},{"key":"123_CR58","first-page":"1","volume-title":"2015 3rd International Conference on Signal Processing, Communication and Networking (ICSCN)","author":"KJ Chabathula","year":"2015","unstructured":"Chabathula KJ, Jaidhar CD, Kumara MAA (2015) Comparative study of principal component analysis based intrusion detection approach using machine learning algorithms In: 2015 3rd International Conference on Signal Processing, Communication and Networking (ICSCN), 1\u20136.. IEEE, Chennai."},{"issue":"6","key":"123_CR59","doi-asserted-by":"publisher","first-page":"981","DOI":"10.1016\/j.jcss.2014.12.012","volume":"81","author":"W Bul\u2019ajoul","year":"2015","unstructured":"Bul\u2019ajoul W, James A, Pannu M (2015) Improving network intrusion detection system performance through quality of service configuration and parallel technology. J Comput Syst Sci 81(6):981\u2013999.","journal-title":"J Comput Syst Sci"},{"key":"123_CR60","doi-asserted-by":"publisher","first-page":"189","DOI":"10.1016\/j.cose.2014.02.006","volume":"43","author":"W Meng","year":"2014","unstructured":"Meng W, Li W, Kwok L-F (2014) Efm: Enhancing the performance of signature-based network intrusion detection systems using enhanced filter mechanism. Comput Secur 43:189\u2013204.","journal-title":"Comput Secur"},{"issue":"3","key":"123_CR61","doi-asserted-by":"publisher","first-page":"1223","DOI":"10.1109\/SURV.2012.121912.00006","volume":"15","author":"A Abduvaliyev","year":"2013","unstructured":"Abduvaliyev A, Pathan ASK, Zhou J, Roman R, Wong WC (2013) On the vital areas of intrusion detection systems in wireless sensor networks. IEEE Commun Surv Tutor 15(3):1223\u20131237.","journal-title":"IEEE Commun Surv Tutor"},{"issue":"1","key":"123_CR62","doi-asserted-by":"publisher","first-page":"303","DOI":"10.1109\/SURV.2013.052213.00046","volume":"16","author":"MH Bhuyan","year":"2014","unstructured":"Bhuyan MH, Bhattacharyya DK, Kalita JK (2014) Network anomaly detection: Methods, systems and tools. IEEE Commun Surv Tutor 16(1):303\u2013336.","journal-title":"IEEE Commun Surv Tutor"},{"issue":"4","key":"123_CR63","doi-asserted-by":"publisher","first-page":"1643","DOI":"10.1109\/TSG.2013.2294473","volume":"5","author":"J Hong","year":"2014","unstructured":"Hong J, Liu C, Govindarasu M (2014) Integrated anomaly detection for cyber security of the substations. IEEE Trans Smart Grid 5(4):1643\u20131653.","journal-title":"IEEE Trans Smart Grid"},{"key":"123_CR64","doi-asserted-by":"publisher","first-page":"18","DOI":"10.1016\/j.jnca.2016.10.015","volume":"77","author":"P Mishra","year":"2017","unstructured":"Mishra P, Pilli ES, Varadharajan V, Tupakula U (2017) Intrusion detection techniques in cloud environment: A survey. J Netw Comput Appl 77:18\u201347.","journal-title":"J Netw Comput Appl"},{"key":"123_CR65","volume-title":"Data mining: concepts and techniques","year":"2012","unstructured":"Han J, Kamber M, Pei J (eds)2012. Data mining: concepts and techniques. Morgan Kaufmann, Boston."},{"key":"123_CR66","doi-asserted-by":"publisher","first-page":"46","DOI":"10.1016\/j.procs.2015.09.145","volume":"61","author":"S Duque","year":"2015","unstructured":"Duque S, bin Omar MN (2015) Using data mining algorithms for developing a model for intrusion detection system (IDS). Procedia Comput Sci 61:46\u201351.","journal-title":"Procedia Comput Sci"},{"key":"123_CR67","doi-asserted-by":"publisher","first-page":"127","DOI":"10.1016\/j.future.2013.06.027","volume":"37","author":"W Feng","year":"2014","unstructured":"Feng W, Zhang Q, Hu G, Huang JX (2014) Mining network data for intrusion detection through combining SVMs with ant colony networks. Futur Gener Comput Syst 37:127\u2013140.","journal-title":"Futur Gener Comput Syst"},{"key":"123_CR68","doi-asserted-by":"publisher","first-page":"148","DOI":"10.1109\/ICSGCE.2015.7454287","volume-title":"2015 International Conference on Smart Grid and Clean Energy Technologies (ICSGCE)","author":"FAA Alseiari","year":"2015","unstructured":"Alseiari FAA, Aung Z (2015) Real-time anomaly-based distributed intrusion detection systems for advanced metering infrastructure utilizing stream data mining In: 2015 International Conference on Smart Grid and Clean Energy Technologies (ICSGCE), 148\u2013153.. IEEE, Offenburg."},{"key":"123_CR69","volume-title":"Machine Learning in Cyber Trust: Security, Privacy, and Reliability.","year":"2009","unstructured":"Tsai JJP, Yu PS (eds)2009. Machine Learning in Cyber Trust: Security, Privacy, and Reliability. First edn. Springer US, Springer-Verlag US. pp 1\u2013362."},{"issue":"2","key":"123_CR70","doi-asserted-by":"publisher","first-page":"391","DOI":"10.1007\/s10844-015-0387-y","volume":"46","author":"L Nishani","year":"2016","unstructured":"Nishani L, Biba M (2016) Machine learning for intrusion detection in MANET: a state-of-the-art survey. J Intell Inf Syst 46(2):391\u2013407.","journal-title":"J Intell Inf Syst"},{"key":"123_CR71","doi-asserted-by":"publisher","first-page":"784","DOI":"10.1016\/j.procs.2015.08.238","volume":"60","author":"N Namdev","year":"2015","unstructured":"Namdev N, Agrawal S, Silkari S (2015) Recent advancement in machine learning based internet traffic classification. Procedia Comput Sci 60:784\u2013791.","journal-title":"Procedia Comput Sci"},{"issue":"10","key":"123_CR72","doi-asserted-by":"publisher","first-page":"11994","DOI":"10.1016\/j.eswa.2009.05.029","volume":"36","author":"C-F Tsai","year":"2009","unstructured":"Tsai C-F, Hsu Y-F, Lin C-Y, Lin W-Y (2009) Intrusion detection by machine learning: A review. Expert Syst Appl 36(10):11994\u201312000.","journal-title":"Expert Syst Appl"},{"issue":"1","key":"123_CR73","doi-asserted-by":"publisher","first-page":"70","DOI":"10.1109\/COMST.2014.2336610","volume":"17","author":"DJ Weller-Fahy","year":"2015","unstructured":"Weller-Fahy DJ, Borghetti BJ, Sodemann AA (2015) A survey of distance and similarity measures used within network intrusion anomaly detection. IEEE Commun Surv Tutor 17(1):70\u201391.","journal-title":"IEEE Commun Surv Tutor"},{"issue":"5","key":"123_CR74","doi-asserted-by":"publisher","first-page":"3447","DOI":"10.3390\/s90503447","volume":"9","author":"SO Amin","year":"2009","unstructured":"Amin SO, Siddiqui MS, Hong CS, Lee S (2009) RIDES: Robust intrusion detection system for ip-based ubiquitous sensor networks. Sensors 9(5):3447.","journal-title":"Sensors"},{"key":"123_CR75","doi-asserted-by":"crossref","unstructured":"Muzammil MJ, Qazi S, Ali T (2013) Comparative analysis of classification algorithms performance for statistical based intrusion detection system In: 2013 3rd IEEE International Conference on Computer, Control and Communication (IC4), 1\u20136, Karachi.","DOI":"10.1109\/IC4.2013.6653738"},{"key":"123_CR76","doi-asserted-by":"crossref","unstructured":"Mabu S, Chen C, Lu N, Shimada K, Hirasawa K2011. An intrusion-detection model based on fuzzy class-association-rule mining using genetic network programming, Vol. 41.","DOI":"10.1109\/TSMCC.2010.2050685"},{"issue":"4","key":"123_CR77","doi-asserted-by":"publisher","first-page":"2991","DOI":"10.1109\/COMST.2016.2566669","volume":"18","author":"C Xu","year":"2016","unstructured":"Xu C, Chen S, Su J, Yiu SM, Hui LCK (2016) A survey on regular expression matching for deep packet inspection: Applications, algorithms, and hardware platforms. IEEE Commun Surv Tutor 18(4):2991\u20133029.","journal-title":"IEEE Commun Surv Tutor"},{"issue":"6\u20137","key":"123_CR78","doi-asserted-by":"publisher","first-page":"353","DOI":"10.1016\/j.cose.2011.05.008","volume":"30","author":"JJ Davis","year":"2011","unstructured":"Davis JJ, Clark AJ (2011) Data preprocessing for anomaly based network intrusion detection: A review. Comput Secur 30(6\u20137):353\u2013375.","journal-title":"Comput Secur"},{"key":"123_CR79","doi-asserted-by":"publisher","first-page":"113","DOI":"10.1109\/TSP.2015.7296234","volume-title":"2015 38th International Conference on Telecommunications and Signal Processing (TSP)","author":"F Vancea","year":"2015","unstructured":"Vancea F, Vancea C (2015) Some results on intrusion and anomaly detection using signal processing and NEAR system In: 2015 38th International Conference on Telecommunications and Signal Processing (TSP), 113\u2013116.. IEEE, Prague."},{"key":"123_CR80","doi-asserted-by":"crossref","unstructured":"Ko C, Ruschitzka M, Levitt K (1997) Execution monitoring of security-critical programs in distributed systems: a specification-based approach In: 1997 IEEE Symposium on Security and Privacy, 175\u2013187, Oakland.","DOI":"10.1109\/SECPRI.1997.601332"},{"key":"123_CR81","doi-asserted-by":"publisher","first-page":"184","DOI":"10.1109\/PRDC.2011.30","volume-title":"2011 IEEE 17th Pacific Rim International Symposium on Dependable Computing","author":"R Berthier","year":"2011","unstructured":"Berthier R, Sanders WH (2011) Specification-based intrusion detection for advanced metering infrastructures In: 2011 IEEE 17th Pacific Rim International Symposium on Dependable Computing, 184\u2013193.. IEEE, Pasadena."},{"key":"123_CR82","doi-asserted-by":"crossref","unstructured":"Surendar M, Umamakeswari A (2016) InDReS: An intrusion detection and response system for internet of things with 6LoWPAN In: 2016 International Conference on Wireless Communications, Signal Processing and Networking (WiSPNET), 1903\u20131908, Chennai.","DOI":"10.1109\/WiSPNET.2016.7566473"},{"issue":"2","key":"123_CR83","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3390\/info7020025","volume":"7","author":"A Le","year":"2016","unstructured":"Le A, Loo J, Chai KK, Aiash M (2016) A specification-based IDS for detecting attacks on RPL-based network topology. Information 7(2):1\u201319.","journal-title":"Information"},{"key":"123_CR84","doi-asserted-by":"publisher","first-page":"52","DOI":"10.1016\/j.comcom.2016.12.001","volume":"98","author":"H Bostani","year":"2017","unstructured":"Bostani H, Sheikhan M (2017) Hybrid of anomaly-based and specification-based IDS for internet of things using unsupervised OPF based on MapReduce approach. Comput Commun 98:52\u201371.","journal-title":"Comput Commun"},{"key":"123_CR85","doi-asserted-by":"publisher","first-page":"824","DOI":"10.1016\/j.procs.2016.07.238","volume":"93","author":"GP Gupta","year":"2016","unstructured":"Gupta GP, Kulariya M (2016) A framework for fast and efficient cyber security network intrusion detection using apache spark. Procedia Comput Sci 93:824\u2013831.","journal-title":"Procedia Comput Sci"},{"key":"123_CR86","doi-asserted-by":"publisher","first-page":"145","DOI":"10.1109\/CIST.2016.7805032","volume-title":"2016 4th IEEE International Colloquium on Information Science and Technology (CiSt)","author":"IE Farissi","year":"2016","unstructured":"Farissi IE, Saber M, Chadli S, Emharraf M, Belkasmi MG (2016) The analysis performance of an intrusion detection systems based on neural network In: 2016 4th IEEE International Colloquium on Information Science and Technology (CiSt), 145\u2013151.. IEEE, Tangier."},{"key":"123_CR87","doi-asserted-by":"publisher","first-page":"212","DOI":"10.1109\/ICNC.2011.6022060","volume-title":"2011 Seventh International Conference on Natural Computation, vol. 1.","author":"C Liu","year":"2011","unstructured":"Liu C, Yang J, Chen R, Zhang Y, Zeng J (2011) Research on immunity-based intrusion detection technology for the internet of things In: 2011 Seventh International Conference on Natural Computation, vol. 1. 212\u2013216.. IEEE, Shanghai."},{"key":"123_CR88","doi-asserted-by":"publisher","first-page":"600","DOI":"10.1109\/WiMOB.2013.6673419","volume-title":"2013 IEEE 9th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob)","author":"P Kasinathan","year":"2013","unstructured":"Kasinathan P, Pastrone C, Spirito MA, Vinkovits M (2013) Denial-of-service detection in 6LoWPAN based internet of things In: 2013 IEEE 9th International Conference on Wireless and Mobile Computing, Networking and Communications (WiMob), 600\u2013607.. IEEE, Lyon."},{"key":"123_CR89","unstructured":"SuricataThe Next Generation Intrusion Detection System. https:\/\/oisf.net\/ . Accessed 5 Dec 2017."},{"key":"123_CR90","doi-asserted-by":"crossref","unstructured":"Kasinathan P, Costamagna G, Khaleel H, Pastrone C, Spirito MA (2013) DEMO: An IDS framework for internet of things empowered by 6LoWPAN In: Proceedings of the 2013 ACM SIGSAC Conference on Computer; Communications Security, CCS \u201913, 1337\u20131340, Berlin.","DOI":"10.1145\/2508859.2512494"},{"key":"123_CR91","doi-asserted-by":"publisher","first-page":"226","DOI":"10.1109\/ICMTMA.2014.57","volume-title":"2014 Sixth International Conference on Measuring Technology and Mechatronics Automation","author":"C Jun","year":"2014","unstructured":"Jun C, Chi C (2014) Design of complex event-processing IDS in internet of things In: 2014 Sixth International Conference on Measuring Technology and Mechatronics Automation, 226\u2013229.. IEEE, Zhangjiajie."},{"key":"123_CR92","doi-asserted-by":"crossref","first-page":"73","DOI":"10.1109\/CNS.2014.6997468","volume-title":"2014 IEEE Conference on Communications and Network Security","author":"J Krimmling","year":"2014","unstructured":"Krimmling J, Peter S (2014) Integration and evaluation of intrusion detection for CoAP in smart city applications In: 2014 IEEE Conference on Communications and Network Security, 73\u201378.. IEEE, San Francisco."},{"issue":"11","key":"123_CR93","doi-asserted-by":"publisher","first-page":"28960","DOI":"10.3390\/s151128960","volume":"15","author":"I Butun","year":"2015","unstructured":"Butun I, Ra I-H, Sankar R (2015) An intrusion detection system based on multi-level clustering for hierarchical wireless sensor networks. Sensors 15(11):28960\u201328978.","journal-title":"Sensors"},{"key":"123_CR94","doi-asserted-by":"publisher","first-page":"369","DOI":"10.1109\/ICITECH.2017.8080028","volume-title":"2017 8th International Conference on Information Technology (ICIT)","author":"M Alzubaidi","year":"2017","unstructured":"Alzubaidi M, Anbar M, Al-Saleem S, Al-Sarawi S, Alieyan K (2017) Review on mechanisms for detecting sinkhole attacks on RPLs In: 2017 8th International Conference on Information Technology (ICIT), 369\u2013374.. IEEE, Amman."},{"issue":"4","key":"123_CR95","doi-asserted-by":"publisher","first-page":"1","DOI":"10.3390\/s17040771","volume":"17","author":"V Garcia-Font","year":"2017","unstructured":"Garcia-Font V, Garrigues C, Rif\u00e0-Pous H (2017) Attack classification schema for smart city WSNs. Sensors 17(4):1\u201324.","journal-title":"Sensors"},{"key":"123_CR96","first-page":"13","volume":"2017","author":"Y Fu","year":"2017","unstructured":"Fu Y, Yan Z, Cao J, Ousmane K, Cao X (2017) An automata based intrusion detection method for internet of things. Mob Inf Syst 2017:13.","journal-title":"Mob Inf Syst"},{"key":"123_CR97","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10586-017-0882-8","volume":"21","author":"L Deng","year":"2018","unstructured":"Deng L, Li D, Yao X, Cox D, Wang H (2018) Mobile network intrusion detection for IoT system based on transfer learning algorithm. Clust Comput 21:1\u201316.","journal-title":"Clust Comput"},{"key":"123_CR98","unstructured":"KDD Cup 1999 Data. http:\/\/kdd.ics.uci.edu\/databases\/kddcup99\/kddcup99.html . Accessed 6 Oct 2018."},{"key":"123_CR99","first-page":"1","volume-title":"2018 IEEE 19th Wireless and Microwave Technology Conference (WAMICON)","author":"A Amouri","year":"2018","unstructured":"Amouri A, Alaparthy VT, Morgera SD (2018) Cross layer-based intrusion detection based on network behavior for IoT In: 2018 IEEE 19th Wireless and Microwave Technology Conference (WAMICON), 1\u20134.. IEEE, Sand Key."},{"issue":"1","key":"123_CR100","doi-asserted-by":"publisher","first-page":"113","DOI":"10.1186\/s13638-018-1128-z","volume":"2018","author":"L Liu","year":"2018","unstructured":"Liu L, Xu B, Zhang X, Wu X (2018) An intrusion detection method for internet of things based on suppressed fuzzy clustering. EURASIP J Wirel Commun Netw 2018(1):113.","journal-title":"EURASIP J Wirel Commun Netw"},{"key":"123_CR101","first-page":"1","volume-title":"2018 IEEE International Workshop Technical Committee on Communications Quality and Reliability (CQR)","author":"NV Abhishek","year":"2018","unstructured":"Abhishek NV, Lim TJ, Sikdar B, Tandon A (2018) An intrusion detection system for detecting compromised gateways in clustered IoT networks In: 2018 IEEE International Workshop Technical Committee on Communications Quality and Reliability (CQR), 1\u20136.. IEEE, Austin."},{"issue":"12","key":"123_CR102","doi-asserted-by":"publisher","first-page":"24188","DOI":"10.3390\/s141224188","volume":"14","author":"D Oh","year":"2014","unstructured":"Oh D, Kim D, Ro WW (2014) A malicious pattern detection engine for embedded security systems in the internet of things. Sensors 14(12):24188\u201324211.","journal-title":"Sensors"},{"key":"123_CR103","first-page":"1","volume-title":"2015 IEEE 34th International Performance Computing and Communications Conference (IPCCC)","author":"DH Summerville","year":"2015","unstructured":"Summerville DH, Zach KM, Chen Y (2015) Ultra-lightweight deep packet anomaly detection for internet of things devices In: 2015 IEEE 34th International Performance Computing and Communications Conference (IPCCC), 1\u20138.. IEEE, Nanjing."},{"key":"123_CR104","doi-asserted-by":"crossref","unstructured":"Arrington B, Barnett L, Rufus R, Esterline A (2016) Behavioral modeling intrusion detection system (BMIDS) using internet of things (IoT) behavior-based anomaly detection via immunity-inspired algorithms In: 2016 25th International Conference on Computer Communication and Networks (ICCCN), 1\u20136, Waikoloa.","DOI":"10.1109\/ICCCN.2016.7568495"},{"key":"123_CR105","first-page":"1","volume-title":"2013 IEEE International Conference on Computational Intelligence and Computing Research","author":"A Gupta","year":"2013","unstructured":"Gupta A, Pandey OJ, Shukla M, Dadhich A, Mathur S, Ingle A (2013) Computational intelligence based intrusion detection systems for wireless communication and pervasive computing networks In: 2013 IEEE International Conference on Computational Intelligence and Computing Research, 1\u20137.. IEEE, Enathi."},{"issue":"8","key":"123_CR106","doi-asserted-by":"publisher","first-page":"2661","DOI":"10.1016\/j.adhoc.2013.04.014","volume":"11","author":"S Raza","year":"2013","unstructured":"Raza S, Wallgren L, Voigt T (2013) SVELTE: Real-time intrusion detection in the internet of things. Ad Hoc Netw 11(8):2661\u20132674.","journal-title":"Ad Hoc Netw"},{"key":"123_CR107","doi-asserted-by":"publisher","first-page":"1169","DOI":"10.1109\/AINA.2017.161","volume-title":"2017 IEEE 31st International Conference on Advanced Information Networking and Applications (AINA)","author":"ZA Khan","year":"2017","unstructured":"Khan ZA, Herrmann P (2017) A trust based distributed intrusion detection mechanism for internet of things In: 2017 IEEE 31st International Conference on Advanced Information Networking and Applications (AINA), 1169\u20131176.. IEEE, Taipei."},{"key":"123_CR108","doi-asserted-by":"crossref","first-page":"92","DOI":"10.1007\/978-3-319-19156-0_10","volume-title":"Health Information Science","author":"E Okoh","year":"2015","unstructured":"Okoh E, Awad AI (2015) Biometrics applications in e-health security: A preliminary survey. In: Yin X, Ho K, Zeng D, Aickelin U, Zhou R, Wang H (eds)Health Information Science, 92\u2013103.. Springer, Cham."},{"key":"123_CR109","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s11036-017-0902-1","volume":"23","author":"M Noura","year":"2018","unstructured":"Noura M, Atiquzzaman M, Gaedke M (2018) Interoperability in internet of things: Taxonomies and open challenges. Mobile Networks and Applications 23:1\u201314.","journal-title":"Mobile Networks and Applications"}],"container-title":["Journal of Cloud Computing"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13677-018-0123-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/article\/10.1186\/s13677-018-0123-6\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/link.springer.com\/content\/pdf\/10.1186\/s13677-018-0123-6.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,4]],"date-time":"2026-04-04T08:36:34Z","timestamp":1775291794000},"score":1,"resource":{"primary":{"URL":"https:\/\/journalofcloudcomputing.springeropen.com\/articles\/10.1186\/s13677-018-0123-6"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2018,12]]},"references-count":109,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2018,12]]}},"alternative-id":["123"],"URL":"https:\/\/doi.org\/10.1186\/s13677-018-0123-6","relation":{},"ISSN":["2192-113X"],"issn-type":[{"value":"2192-113X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2018,12]]},"assertion":[{"value":"17 February 2018","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 November 2018","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"4 December 2018","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"The authors declare that they have no competing interests.","order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Competing interests"}},{"value":"Springer Nature remains neutral with regard to jurisdictional claims in published maps and institutional affiliations.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Publisher\u2019s Note"}}],"article-number":"21"}}