{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T11:14:42Z","timestamp":1783422882856,"version":"3.54.6"},"reference-count":33,"publisher":"MDPI AG","issue":"13","license":[{"start":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T00:00:00Z","timestamp":1782950400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>Vehicular Named Data Networking (VNDN) inherits the broadcast-oriented forwarding of NDN, which exposes safety messages to position-falsification attacks. Existing detectors rely either on static fuzzy thresholds, which drift as traffic patterns change, or on opaque deep models, which are accurate but uninterpretable to safety auditors. We propose a two-stage detector that combines an Adaptive Fuzzy Membership Tuning (AFMT) pre-filter with an attention-augmented bidirectional LSTM. AFMT is a Mamdani fuzzy classifier whose triangular membership-function parameters are updated online by gradient descent on a prediction-error feedback signal from the downstream BiLSTM, replacing offline-fixed thresholds. The BiLSTM consumes the fuzzy suspicion score as an extra feature and produces interpretable per-time-step attention weights aligned with attack onsets. On a simulator-synthesized VNDN benchmark following the five canonical VeReMi attack types, the detector attains F1-scores between 0.955 and 0.979 (macro-average 0.964), ties the strongest baselines on the hardest Random-Offset attack while achieving the highest ROC-AUC of all models (0.984), and runs in 0.44 ms per sample on a CPU. On a live OMNeT++\/Veins\/SUMO testbed running the five attacks on the LuST scenario, the detector attains an F1 value of 0.986. A leave-one-feature-out study shows that detection does not hinge on the Kalman plausibility feature, and on the real public VeReMi v1.0 dataset the architecture transfers to four of the five attack types at an F1 near 1.0, while the Constant Offset stays invisible to kinematics-only features, and this quantifies the value of the named-data-plane features. Every number reported here is measured from the running detector.<\/jats:p>","DOI":"10.3390\/s26134179","type":"journal-article","created":{"date-parts":[[2026,7,2]],"date-time":"2026-07-02T11:48:32Z","timestamp":1782992912000},"page":"4179","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Online-Tuned Fuzzy Pre-Filtering with an Attention BiLSTM for Misbehavior Detection in Vehicular Named Data Networking"],"prefix":"10.3390","volume":"26","author":[{"ORCID":"https:\/\/orcid.org\/0009-0006-9529-3206","authenticated-orcid":false,"given":"Bassma","family":"Aldahlan","sequence":"first","affiliation":[{"name":"Department of Computer and Information Technology, Jubail Industrial College, Jubail Industrial City 31961, Saudi Arabia"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,7,2]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"66","DOI":"10.1145\/2656877.2656887","article-title":"Named Data Networking","volume":"44","author":"Zhang","year":"2014","journal-title":"ACM SIGCOMM Comput. Commun. Rev."},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Grassi, G., Pesavento, D., Pau, G., Vuyyuru, R., Wakikawa, R., and Zhang, L. (2014). VANET via Named Data Networking. Proceedings of the IEEE INFOCOM Workshops on Name-Oriented Mobility, IEEE.","DOI":"10.1109\/INFCOMW.2014.6849267"},{"key":"ref_3","first-page":"100804","article-title":"State-of-the-Art Authentication and Verification Schemes in VANETs: A Survey","volume":"49","author":"Mazhar","year":"2024","journal-title":"Veh. Commun."},{"key":"ref_4","doi-asserted-by":"crossref","unstructured":"Kamel, J., Ansari, M., Petit, J., Kaiser, A., Ben Jemaa, I., and Urien, P. (2020). VeReMi Extension: A Dataset for Comparable Evaluation of Misbehavior Detection in VANETs. Proceedings of the IEEE International Conference on Communications (ICC), IEEE.","DOI":"10.1109\/ICC40277.2020.9149132"},{"key":"ref_5","doi-asserted-by":"crossref","unstructured":"Almseidin, M., Al-Sawwa, J., and Alkasassbeh, M. (2021). Anomaly-based Intrusion Detection System Using Fuzzy Logic. arXiv.","DOI":"10.1109\/ICIT52682.2021.9491742"},{"key":"ref_6","first-page":"563","article-title":"Intrusion Detection System Using Recurrent Neural Network-Long Short-Term Memory","volume":"11","author":"Jadhav","year":"2023","journal-title":"Int. J. Intell. Syst. Appl. Eng."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"21856","DOI":"10.1038\/s41598-025-07706-y","article-title":"Deep Learning for Network Security: An Attention-CNN-LSTM Model for Accurate Intrusion Detection","volume":"15","author":"Alashjaee","year":"2025","journal-title":"Sci. Rep."},{"key":"ref_8","unstructured":"Papadopoulos, P., Kalogeraki, V., and Gkoulalas-Divanis, A. (2025). AttentionGuard: Transformer-Based Misbehavior Detection for Secure Vehicular Platoons. WiseML \u201925: Proceedings of the 2025 ACM Workshop on Wireless Security and Machine Learning, Association for Computing Machinery."},{"key":"ref_9","first-page":"110712","article-title":"Dual-Branch Transformer\u2013BiLSTM Architecture for Misbehavior Detection on VeReMi","volume":"255","author":"Zhang","year":"2025","journal-title":"Comput. Netw."},{"key":"ref_10","unstructured":"Gwon, H., Lee, C., Keum, R., and Choi, H. (2019). Network Intrusion Detection Based on LSTM and Feature Embedding. arXiv."},{"key":"ref_11","first-page":"6565","article-title":"Study of Long Short-Term Memory in Flow-Based Network Intrusion Detection System","volume":"35","author":"Nicholas","year":"2018","journal-title":"J. Intell. Fuzzy Syst."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Khan, S., and Lim, H. (2022). Novel Fuzzy Logic Scheme for Push-Based Critical Data Broadcast Mitigation in Vehicular Named Data Networking. Sensors, 22.","DOI":"10.3390\/s22208078"},{"key":"ref_13","doi-asserted-by":"crossref","unstructured":"Savva, M., Ioannou, I., and Vassiliou, V. (2022). Fuzzy-Logic Based IDS for Detecting Jamming Attacks in Wireless Mesh IoT Networks. arXiv.","DOI":"10.1109\/MedComNet55087.2022.9810363"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"104372","DOI":"10.1016\/j.cose.2025.104372","article-title":"Fuzzy-Rule Based Optimized Hybrid Deep Learning Model for Network Intrusion Detection in SDN Enabled IoT Network","volume":"152","author":"Johnpeter","year":"2025","journal-title":"Comput. Secur."},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Alalhareth, M., and Hong, S.C. (2023). An Adaptive Intrusion Detection System in the Internet of Medical Things Using Fuzzy-Based Learning. Sensors, 23.","DOI":"10.3390\/s23229247"},{"key":"ref_16","first-page":"2915","article-title":"Fusing Nature Inspired Fuzzy Neural Networks for Hypervisor Intrusion Detection","volume":"16","author":"Ashwitha","year":"2024","journal-title":"Int. J. Inf. Technol."},{"key":"ref_17","first-page":"55744","article-title":"VeReMiVNDN: A Dataset for Misbehavior Detection in Vehicular Named Data Networking Using the JubST SUMO Scenario","volume":"14","author":"Aldahlan","year":"2026","journal-title":"IEEE Access"},{"key":"ref_18","doi-asserted-by":"crossref","unstructured":"Siddiqa, A., Diyan, M., Khan, M., Saad, M., and Kim, D. (2021). Mitigating Broadcasting Storm Using Multihead Nomination Clustering in Vehicular Content Centric Networks. Electronics, 10.","DOI":"10.3390\/electronics10182270"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.asoc.2009.06.019","article-title":"The Use of Computational Intelligence in Intrusion Detection Systems: A Review","volume":"10","author":"Wu","year":"2010","journal-title":"Appl. Soft Comput."},{"key":"ref_20","doi-asserted-by":"crossref","unstructured":"Alamer, A., Basudan, S., and Boulila, W. (2025). VeMisNet: Enhanced Feature Engineering for Deep Learning-Based Misbehavior Detection in Vehicular Ad Hoc Networks. J. Sens. Actuator Netw., 14.","DOI":"10.3390\/jsan14050100"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1109\/OJVT.2021.3138354","article-title":"Machine Learning Based Misbehaviour Detection in VANET Using Consecutive BSM Approach","volume":"3","author":"Sharma","year":"2022","journal-title":"IEEE Open J. Veh. Technol."},{"key":"ref_22","first-page":"1125","article-title":"PEGASIS: Power-Efficient Gathering in Sensor Information Systems","volume":"Volume 3","author":"Lindsey","year":"2002","journal-title":"Proceedings of the IEEE Aerospace Conference"},{"key":"ref_23","unstructured":"Alharbi, M., Aldossary, M., and Alqahtani, A. (2026). EMO-PEGASIS: A Dual-Phase Machine Learning Protocol for Energy Delay Optimisation in WSNs. Sensors, 26."},{"key":"ref_24","first-page":"52","article-title":"Luxembourg SUMO Traffic (LuST) Scenario: Traffic Demand Evaluation","volume":"9","author":"Frank","year":"2017","journal-title":"IEEE Intell. Transp. Syst. Mag."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"198","DOI":"10.1109\/TIT.1983.1056650","article-title":"On the Security of Public Key Protocols","volume":"29","author":"Dolev","year":"1983","journal-title":"IEEE Trans. Inf. Theory"},{"key":"ref_26","doi-asserted-by":"crossref","unstructured":"van der Heijden, R., Lukaseder, T., and Kargl, F. (2018). VeReMi: A Dataset for Comparable Evaluation of Misbehavior Detection in VANETs. Proceedings of the Security and Privacy in Communication Networks (SecureComm), Springer.","DOI":"10.1007\/978-3-030-01701-9_18"},{"key":"ref_27","first-page":"1939","article-title":"Feature Engineering Impact on Position Falsification Attacks Detection in Vehicular Ad-Hoc Network","volume":"24","author":"Ayoub","year":"2024","journal-title":"Int. J. Inf. Secur."},{"key":"ref_28","unstructured":"Community, O. (2026, June 23). OMNeT++ Discrete Event Simulator. Available online: https:\/\/omnetpp.org\/."},{"key":"ref_29","doi-asserted-by":"crossref","unstructured":"Sommer, C., Eckhoff, D., Brummer, A., Buse, D., Hagenauer, F., Joerer, S., and Segata, M. (2019). Veins: The Open Source Vehicular Network Simulation Framework. Proceedings of the Recent Advances in Network Simulation, Springer.","DOI":"10.1007\/978-3-030-12842-5_6"},{"key":"ref_30","unstructured":"Paszke, A., Gross, S., Massa, F., Lerer, A., Bradbury, J., Chanan, G., Killeen, T., Lin, Z., Gimelshein, N., and Antiga, L. (2019). PyTorch: An Imperative Style, High-Performance Deep Learning Library. Advances in Neural Information Processing Systems 32 (NeurIPS 2019), Neural Information Processing Systems Foundation, Inc."},{"key":"ref_31","unstructured":"Eziama, E., Tepe, K., Balador, A., Nwizege, K., and Jaimes, L. (2022). Combined CNN-LSTM Based Misbehavior Detection for Vehicular Networks on VeReMi. Proceedings of the IEEE Global Communications Conference (GLOBECOM), IEEE."},{"key":"ref_32","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., and Vladu, A. (May, January 30). Towards Deep Learning Models Resistant to Adversarial Attacks. Proceedings of the International Conference on Learning Representations (ICLR), Vancouver, BC, Canada."},{"key":"ref_33","first-page":"119","article-title":"Scalable Parallel Simulator for Vehicular Collision Detection","volume":"8","author":"Grinberg","year":"2013","journal-title":"Int. J. Veh. Syst. Model. Test."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/13\/4179\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T10:24:11Z","timestamp":1783419851000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/13\/4179"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,7,2]]},"references-count":33,"journal-issue":{"issue":"13","published-online":{"date-parts":[[2026,7]]}},"alternative-id":["s26134179"],"URL":"https:\/\/doi.org\/10.3390\/s26134179","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,7,2]]}}}