{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T05:16:59Z","timestamp":1788239819607,"version":"build-2803163510"},"reference-count":34,"publisher":"Frontiers Media SA","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":["frontiersin.org"],"crossmark-restriction":true},"short-container-title":["Front. Big Data"],"abstract":"<jats:p>The unprecedented increase in the number of Internet of Things (IoT) devices has widened the attack surface of modern-day networks, making them vulnerable to various cyberattacks. Conventional intrusion detection mechanisms face challenges in identifying the subtle correlations between network traffic characteristics and providing consistent detection rates in varying heterogeneous environments. With this context, this research aims at introducing HyperIDS, an innovative Intrusion Detection System (IDS) which combines Hypergraph Learning, Quantum-Inspired Feature Selection and Optimization, and Transformer-based Ensemble Classifier for intelligent IoT cyberattack detection. First, Dual-Fitness Enhanced Gaussian Quantum Particle Swarm Optimization (DFE-GQPSO) approach is utilized to select the most relevant traffic characteristics while reducing feature space and computational cost. These selected traffic features are then converted to a hypergraph form, allowing higher order relations between different entities of the network to be captured. Following this step, Hypergraph Neural Networks (HGNN) is deployed to generate structural and relational representations from the hypergraph structure of the dataset. Long-term dependencies and attack patterns are subsequently extracted using a transformer encoder. The final classification process involves combining CatBoost and XGBoost using stacking ensemble method. In addition, a SHAP-based explainability module is incorporated to ensure transparency and trustworthiness of the developed system. In order to evaluate the proposed framework, HyperIDS is experimentally tested against two commonly used cyber security datasets, namely, TON_IoT and Bot-IoT. Experimental findings have shown superior effectiveness of HyperIDS in detecting cyber-attacks with 98.92, 98.81, 98.76, and 98.78% of accuracy, precision, recall, and F1 score, respectively on the TON_IoT dataset. Similarly, accuracy, precision, recall, and F1 scores of HyperIDS reach 99.14, 99.05, 99.01, and 99.03% on the Bot-IoT dataset. Comparison with conventional machine learning (ML), deep learning (DL), and hybrid intrusion detection techniques have proven HyperIDS's superiority in detecting cyberattacks on IoT infrastructure.<\/jats:p>","DOI":"10.3389\/fdata.2026.1901121","type":"journal-article","created":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T04:27:16Z","timestamp":1788236836000},"update-policy":"https:\/\/doi.org\/10.3389\/crossmark-policy","source":"Crossref","is-referenced-by-count":0,"title":["HyperIDS: a hypergraph learning and quantum-inspired transformer ensemble framework for IoT intrusion detection"],"prefix":"10.3389","volume":"9","author":[{"given":"Samayank","family":"Goel","sequence":"first","affiliation":[{"name":"School of Computer Science and Engineering, Vellore Institute of Technology, Chennai","place":["Tamil Nadu, India"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Logeswari","family":"Govindaraj","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Vellore Institute of Technology, Chennai","place":["Tamil Nadu, India"]}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tamilarasi","family":"Kathirvel Murugan","sequence":"additional","affiliation":[{"name":"School of Computer Science and Engineering, Vellore Institute of Technology, Chennai","place":["Tamil Nadu, India"]}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1965","published-online":{"date-parts":[[2026,9,1]]},"reference":[{"key":"B1","doi-asserted-by":"publisher","first-page":"1805","DOI":"10.1007\/s13369-021-06086-5","article-title":"A new ensemble-based intrusion detection system for internet of things","volume":"47","author":"Abbas","year":"2022","journal-title":"Arabian J. Sci. Eng."},{"key":"B2","first-page":"1","author":"AboulEla","year":"2025"},{"key":"B3","first-page":"1","author":"Agili","year":"2025"},{"key":"B4","doi-asserted-by":"publisher","first-page":"148","DOI":"10.3390\/computers12080148","article-title":"Toward improved machine learning-based intrusion detection for internet of things traffic","volume":"12","author":"Alkadi","year":"2023","journal-title":"Computers"},{"key":"B5","doi-asserted-by":"publisher","first-page":"165130","DOI":"10.1109\/ACCESS.2020.3022862","article-title":"TON_IoT telemetry dataset: a new generation dataset of IoT and IIoT for data-driven intrusion detection systems","volume":"8","author":"Alsaedi","year":"2020","journal-title":"IEEE Access"},{"key":"B6","doi-asserted-by":"publisher","first-page":"1039","DOI":"10.3390\/s25041039","article-title":"A heterogeneity-aware semi-decentralized model for a lightweight intrusion detection system for IoT networks based on federated learning and BiLSTM","volume":"25","author":"Alsaleh","year":"2025","journal-title":"Sensors"},{"key":"B7","doi-asserted-by":"publisher","first-page":"134256","DOI":"10.1109\/ACCESS.2024.3460468","article-title":"Federated learning-based model to lightweight IDSs for heterogeneous IoT networks: state-of-the-art, challenges, and future directions","volume":"12","author":"Alsaleh","year":"2024","journal-title":"IEEE Access"},{"key":"B8","doi-asserted-by":"publisher","first-page":"11792","DOI":"10.1109\/ACCESS.2025.3526711","article-title":"Deep learning-based intrusion detection system for detecting IoT botnet attacks: a review","volume":"13","author":"Al-Shurbaji","year":"2025","journal-title":"IEEE Access"},{"key":"B9","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3545574","article-title":"The role of machine learning in cybersecurity","volume":"4","author":"Apruzzese","year":"2023","journal-title":"Digital Threats: Res. Prac."},{"key":"B10","doi-asserted-by":"publisher","first-page":"367","DOI":"10.21608\/dusj.2022.275552","article-title":"IoT based intrusion detection systems from the perspective of machine and deep learning: a survey and comparative study","volume":"5","author":"Ashraf","year":"2022","journal-title":"Delta University Sci. J."},{"key":"B11","doi-asserted-by":"publisher","first-page":"49114","DOI":"10.1109\/ACCESS.2023.3275789","article-title":"Graph neural networks for intrusion detection: a survey","volume":"11","author":"Bilot","year":"2023","journal-title":"IEEE Access"},{"key":"B12","doi-asserted-by":"publisher","first-page":"1153","DOI":"10.1109\/COMST.2015.2494502","article-title":"A survey of data mining and machine learning methods for cyber security intrusion detection","volume":"18","author":"Buczak","year":"2015","journal-title":"IEEE communications surveys and tutorials"},{"key":"B13","doi-asserted-by":"publisher","first-page":"1808","DOI":"10.1109\/COMST.2023.3288942","article-title":"A survey of public IoT datasets for network security research","volume":"25","author":"De Keersmaeker","year":"2023","journal-title":"IEEE communications surveys and tutorials"},{"key":"B14","doi-asserted-by":"publisher","first-page":"4342","DOI":"10.1109\/OJCOMS.2025.3569301","article-title":"Deep transfer learning based on hybrid Swin transformers with LSTM for intrusion detection systems in IoT environment","volume":"6","author":"Fares","year":"2025","journal-title":"IEEE Open J. Communications Society"},{"key":"B15","doi-asserted-by":"publisher","first-page":"194","DOI":"10.33411\/IJIST\/1107","article-title":"Ml-driven lightweight botnet detection system for iot-networks. Int. J. Innov. Sci","volume":"6","author":"Farooqi","year":"2024","journal-title":"Technol."},{"key":"B16","doi-asserted-by":"publisher","first-page":"3181","DOI":"10.1109\/TPAMI.2022.3182052","article-title":"HGNN+: General hypergraph neural networks","volume":"45","author":"Gao","year":"2022","journal-title":"IEEE Transact. Pattern Analy. Mac. Int."},{"key":"B17","doi-asserted-by":"publisher","first-page":"88","DOI":"10.47852\/bonviewJCCE2202270","article-title":"Machine learning-based intrusion detection system: an experimental comparison","volume":"2","author":"Hidayat","year":"2023","journal-title":"J. Comput. Cogn. Eng."},{"key":"B18","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2022.107764","article-title":"An intelligent and efficient network intrusion detection system using deep learning","author":"Imran","year":"2022","journal-title":"Computers and Electrical Engineering"},{"key":"B19","doi-asserted-by":"publisher","first-page":"1801","DOI":"10.32604\/cmc.2021.018466","article-title":"Towards machine learning based intrusion detection in IoT networks. Comput. Mater","volume":"69","author":"Islam","year":"2021","journal-title":"Contin"},{"key":"B20","doi-asserted-by":"publisher","first-page":"121173","DOI":"10.1109\/ACCESS.2022.3220622","article-title":"Machine and deep learning solutions for intrusion detection and prevention in IoTs: a survey","volume":"10","author":"Jayalaxmi","year":"2022","journal-title":"IEEE Access"},{"key":"B21","doi-asserted-by":"publisher","first-page":"333","DOI":"10.66224\/jist.45751.13.52.333","article-title":"Federated learning for privacy-preserving intrusion detection: a systematic review, taxonomy, challenges and future directions","volume":"4","author":"Kale","year":"2026","journal-title":"J. Informat. Syst. Telecommunic. (JIST)."},{"key":"B22","doi-asserted-by":"publisher","first-page":"1690","DOI":"10.1016\/j.eswa.2013.08.066","article-title":"A novel hybrid intrusion detection method integrating anomaly detection with misuse detection","volume":"41","author":"Kim","year":"2014","journal-title":"Expert Syst. Appl."},{"key":"B23","doi-asserted-by":"publisher","first-page":"779","DOI":"10.1016\/j.future.2019.05.041","article-title":"Towards the development of realistic botnet dataset in the internet of things for network forensic analytics: Bot-iot dataset","volume":"100","author":"Koroniotis","year":"2019","journal-title":"Future Gen. Comput. Syst."},{"key":"B24","doi-asserted-by":"publisher","first-page":"1154","DOI":"10.3390\/s22031154","article-title":"Classification and explanation for intrusion detection system based on ensemble trees and SHAP method","volume":"22","author":"Le","year":"2022","journal-title":"Sensors"},{"key":"B25","doi-asserted-by":"publisher","first-page":"16","DOI":"10.1016\/j.jnca.2012.09.004","article-title":"Intrusion detection system: a comprehensive review","volume":"36","author":"Liao","year":"2013","journal-title":"J. Netw. Comput. Appl."},{"key":"B26","doi-asserted-by":"publisher","first-page":"12","DOI":"10.1109\/MPRV.2018.03367731","article-title":"N-baiot\u2014network-based detection of iot botnet attacks using deep autoencoders","volume":"17","author":"Meidan","year":"2018","journal-title":"IEEE Perv. Comput."},{"key":"B27","first-page":"1","author":"Rakine","year":"2024"},{"key":"B28","doi-asserted-by":"publisher","first-page":"104345","DOI":"10.1109\/ACCESS.2025.3579990","volume":"13","author":"Rakine","year":"2025","journal-title":"Comprehensive review of intrusion detection"},{"key":"B29","doi-asserted-by":"publisher","first-page":"123","DOI":"10.1186\/s13677-024-00685-x","article-title":"Enhancing intrusion detection: a hybrid machine and deep learning approach","volume":"13","author":"Sajid","year":"2024","journal-title":"J. Cloud Comput."},{"key":"B30","doi-asserted-by":"publisher","first-page":"41","DOI":"10.1109\/TETCI.2017.2772792","article-title":"A deep learning approach to network intrusion detection","volume":"2","author":"Shone","year":"2018","journal-title":"IEEE transactions on emerging topics in computational intelligence"},{"key":"B31","doi-asserted-by":"publisher","author":"Sommer","year":"2010","DOI":"10.1109\/SP.2010.25"},{"key":"B32","article-title":"Attention is all you need","author":"Vaswani","year":"2017","journal-title":"Adv. Neural Informat. Proc. Syst."},{"key":"B33","first-page":"110542","article-title":"Applications of quantum-inspired swarm optimization in real-world scenarios","volume":"151","author":"Wang","year":"2024","journal-title":"Appl. Softw Comput."},{"key":"B34","doi-asserted-by":"publisher","first-page":"21954","DOI":"10.1109\/ACCESS.2017.2762418","article-title":"A deep learning approach for intrusion detection using recurrent neural networks","volume":"5","author":"Yin","year":"2017","journal-title":"IEEE Access"}],"container-title":["Frontiers in Big Data"],"original-title":[],"link":[{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fdata.2026.1901121\/full","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T04:27:17Z","timestamp":1788236837000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.frontiersin.org\/articles\/10.3389\/fdata.2026.1901121\/full"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9,1]]},"references-count":34,"alternative-id":["10.3389\/fdata.2026.1901121"],"URL":"https:\/\/doi.org\/10.3389\/fdata.2026.1901121","relation":{},"ISSN":["2624-909X"],"issn-type":[{"value":"2624-909X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,9,1]]},"article-number":"1901121"}}