{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T18:13:13Z","timestamp":1778868793785,"version":"3.51.4"},"reference-count":20,"publisher":"Public Library of Science (PLoS)","issue":"5","license":[{"start":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T00:00:00Z","timestamp":1778803200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["www.plosone.org"],"crossmark-restriction":false},"short-container-title":["PLoS One"],"abstract":"<jats:p>As the domain of network security keeps on evolving rapidly, especially in sensitive areas such as healthcare systems, the demand for reliable device verification, controlling access, and spotting threats is growing sharply. This paper presents the design, implementation, and systematic evaluation of an improved Intent-Based Networking (IBN) system that integrates post-quantum cryptography, certificate-based identity management, and machine learning-based anomaly detection within a unified framework. The system incorporates SPHINCS+ post-quantum digital signatures for quantum-resilient authentication, X.509 certificate lifecycle management for establishing device trust, and hardware-aware cryptographic operations to maintain efficiency. It further enforces fine-grained access policies using Role-Based Access Control (RBAC) augmented with Multi-Factor Authentication (MFA), ensuring strong access governance across network segments. For early threat detection, machine learning models such as Isolation Forest and MiniBatch KMeans are employed to learn communication patterns and detect anomalous device behavior. Additionally, event logs are maintained using asynchronous, hash-chained logging mechanisms inspired by blockchain principles, ensuring auditability and data integrity. To address evaluation transparency and rigor, the framework is assessed using a controlled prototype testbed with explicitly defined traffic features and reproducible experimental settings. The evaluation considers cryptographic correctness, access control performance, anomaly detection capability, and scalability under increasing workloads. Experimental results demonstrate 100% success in post-quantum signature generation and verification, effective anomaly detection with no observed false negatives in the evaluated scenarios, and stable log-processing throughput as the number of events grows. Importantly, this work does not claim novelty in individual components, but contributes through the system-level integration and empirical evaluation of a quantum-safe, ML-assisted IBN security architecture. The findings highlight key trade-offs between security enforcement and usability, while also identifying limitations such as certificate expiry handling gaps, conservative policy behavior, and lack of large-scale statistical validation. These observations establish a reproducible baseline and motivate future work toward statistically rigorous validation, real-world deployment, and adaptive policy optimization.<\/jats:p>","DOI":"10.1371\/journal.pone.0348293","type":"journal-article","created":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T17:36:50Z","timestamp":1778866610000},"page":"e0348293","update-policy":"https:\/\/doi.org\/10.1371\/journal.pone.corrections_policy","source":"Crossref","is-referenced-by-count":0,"title":["Design and evaluation of a resilient IBN architecture: Integrating post-quantum cryptography with adaptive threat detection using machine learning"],"prefix":"10.1371","volume":"21","author":[{"given":"Kumar Sekhar","family":"Roy","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Shweta","family":"Singh","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Hemangi","family":"Goswami","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Soumyashree","family":"Panchal","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-3714-9453","authenticated-orcid":true,"given":"Sk Mahmudul","family":"Hassan","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"340","published-online":{"date-parts":[[2026,5,15]]},"reference":[{"key":"pone.0348293.ref001","doi-asserted-by":"crossref","unstructured":"Shor PW. Algorithms for quantum computation: discrete logarithms and factoring. In: Proceedings 35th annual symposium on foundations of computer science. IEEE; 1994. p. 124\u201334.","DOI":"10.1109\/SFCS.1994.365700"},{"key":"pone.0348293.ref002","unstructured":"Bernstein D, Dobraunig C, Eichlseder M, Fluhrer S, Gazdag SL, H\u00fclsing A, et al. SPHINCS+ - Submission to the NIST post-quantum cryptography project [Other]. 2017. Submission Available at https:\/\/sphincs.org"},{"issue":"2","key":"pone.0348293.ref003","doi-asserted-by":"crossref","first-page":"62","DOI":"10.1109\/MIC.2003.1189190","article-title":"Role-based access control with X.509 attribute certificates","volume":"7","author":"DW Chadwick","year":"2003","journal-title":"IEEE Internet Comput"},{"key":"pone.0348293.ref004","doi-asserted-by":"crossref","first-page":"136565","DOI":"10.1109\/ACCESS.2023.3338189","article-title":"Toward Intent-Based Network Automation for Smart Environments: A Healthcare 4.0 Use Case","volume":"11","author":"Y Njah","year":"2023","journal-title":"IEEE Access"},{"issue":"8","key":"pone.0348293.ref005","doi-asserted-by":"crossref","first-page":"5310","DOI":"10.1109\/TITS.2020.3002349","article-title":"Intent-Based Network for Data Dissemination in Software-Defined Vehicular Edge Computing","volume":"22","author":"A Singh","year":"2021","journal-title":"IEEE Trans Intell Transport Syst"},{"issue":"11","key":"pone.0348293.ref006","doi-asserted-by":"crossref","first-page":"1947","DOI":"10.1109\/JPROC.2010.2065210","article-title":"Wireless sensor networks for healthcare","volume":"98","author":"J Ko","year":"2010","journal-title":"Proc IEEE"},{"issue":"2","key":"pone.0348293.ref007","doi-asserted-by":"crossref","first-page":"761","DOI":"10.1109\/TNSM.2018.2815280","article-title":"Towards Bayesian-Based Trust Management for Insider Attacks in Healthcare Software-Defined Networks","volume":"15","author":"W Meng","year":"2018","journal-title":"IEEE Trans Netw Serv Manage"},{"issue":"10","key":"pone.0348293.ref008","doi-asserted-by":"crossref","first-page":"106","DOI":"10.1109\/MCOM.101.2100141","article-title":"End-to-End Intent-Based Networking","volume":"59","author":"L Velasco","year":"2021","journal-title":"IEEE Commun Mag"},{"issue":"7","key":"pone.0348293.ref009","doi-asserted-by":"crossref","first-page":"56","DOI":"10.1145\/3639702","article-title":"Security Challenges of Intent-Based Networking","volume":"67","author":"J Kim","year":"2024","journal-title":"Commun ACM"},{"issue":"9","key":"pone.0348293.ref010","doi-asserted-by":"crossref","first-page":"48","DOI":"10.1109\/2.708450","article-title":"Security for virtual private intranets","volume":"31","author":"WA Arbaugh","year":"1998","journal-title":"Computer"},{"issue":"4","key":"pone.0348293.ref011","doi-asserted-by":"crossref","first-page":"659","DOI":"10.1007\/s00145-010-9078-6","article-title":"Efficient selective identity-based encryption without random oracles","volume":"24","author":"D Boneh","year":"2011","journal-title":"J Cryptol"},{"issue":"5","key":"pone.0348293.ref012","doi-asserted-by":"crossref","first-page":"2551","DOI":"10.1109\/TNSE.2022.3187861","article-title":"A Secure Information Transmission Protocol for Healthcare Cyber Based on Quantum Image Expansion and Grover Search Algorithm","volume":"10","author":"Z Qu","year":"2022","journal-title":"IEEE Trans Netw Sci Eng"},{"issue":"23","key":"pone.0348293.ref013","doi-asserted-by":"crossref","first-page":"38496","DOI":"10.1109\/JIOT.2024.3448212","article-title":"Quantum secure authentication scheme for internet of medical things using blockchain","volume":"11","author":"S Prajapat","year":"2024","journal-title":"IEEE Internet Things J"},{"key":"pone.0348293.ref014","doi-asserted-by":"crossref","first-page":"1073","DOI":"10.1109\/ACCESS.2017.2777869","article-title":"Robust encryption of quantum medical images","volume":"6","author":"AA Abd El-Latif","year":"2017","journal-title":"IEEE Access"},{"issue":"6","key":"pone.0348293.ref015","doi-asserted-by":"crossref","first-page":"3371","DOI":"10.1109\/JBHI.2023.3304326","article-title":"Quantum-Inspired Heuristic Algorithm for Secure Healthcare Prediction Using Blockchain Technology","volume":"28","author":"H Mazumdar","year":"2024","journal-title":"IEEE J Biomed Health Inform"},{"issue":"5","key":"pone.0348293.ref016","doi-asserted-by":"crossref","first-page":"643","DOI":"10.18576\/amis\/150513","article-title":"Analysis of the quantum algorithm based on entanglement measure for classifying Boolean multivariate function into novel hidden classes: Revisited","volume":"15","author":"SA MohammedZidan","year":"2021","journal-title":"Appl Math Inf Sci"},{"issue":"4","key":"pone.0348293.ref017","doi-asserted-by":"crossref","first-page":"437","DOI":"10.18576\/amis\/150405","article-title":"Quantum Approach to Starlike Functions","volume":"15","year":"2021","journal-title":"Appl Math Inf Sci"},{"key":"pone.0348293.ref018","doi-asserted-by":"crossref","first-page":"112572","DOI":"10.1016\/j.chaos.2022.112572","article-title":"Analysis of chaos-coherence peculiarities within the chaotic phenomena of fluid at finite temperature","volume":"164","author":"G Bary","year":"2022","journal-title":"Chaos Solitons Fractals"},{"issue":"8","key":"pone.0348293.ref019","doi-asserted-by":"crossref","DOI":"10.1140\/epjp\/s13360-023-04310-9","article-title":"A novel methodology in chaotification and coherence-based scientific applications under the influence of condensation","volume":"138","author":"G Bary","year":"2023","journal-title":"Eur Phys J Plus"},{"key":"pone.0348293.ref020","doi-asserted-by":"crossref","first-page":"238","DOI":"10.46586\/tches.v2018.i1.238-268","article-title":"CRYSTALS-Dilithium: A Lattice-Based Digital Signature Scheme","author":"L Ducas","year":"2018","journal-title":"TCHES"}],"container-title":["PLOS One"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/dx.plos.org\/10.1371\/journal.pone.0348293","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,15]],"date-time":"2026-05-15T17:36:54Z","timestamp":1778866614000},"score":1,"resource":{"primary":{"URL":"https:\/\/dx.plos.org\/10.1371\/journal.pone.0348293"}},"subtitle":[],"editor":[{"given":"Daniel Ioan","family":"Hunyadi","sequence":"first","affiliation":[],"role":[{"role":"editor","vocabulary":"crossref"}]}],"short-title":[],"issued":{"date-parts":[[2026,5,15]]},"references-count":20,"journal-issue":{"issue":"5","published-online":{"date-parts":[[2026,5,15]]}},"URL":"https:\/\/doi.org\/10.1371\/journal.pone.0348293","relation":{},"ISSN":["1932-6203"],"issn-type":[{"value":"1932-6203","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,5,15]]}}}