{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,11]],"date-time":"2026-08-11T12:36:48Z","timestamp":1786451808913,"version":"build-2736575974"},"reference-count":32,"publisher":"MDPI AG","issue":"16","license":[{"start":{"date-parts":[[2026,8,11]],"date-time":"2026-08-11T00:00:00Z","timestamp":1786406400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Henan Province Key Research and Development Project","award":["241111211400"],"award-info":[{"award-number":["241111211400"]}]},{"name":"Henan Province Natural Science Fund","award":["252300421509"],"award-info":[{"award-number":["252300421509"]}]},{"name":"Luoyang Public Welfare Industry Scientific Research Plan Project","award":["2602001A"],"award-info":[{"award-number":["2602001A"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>To guarantee the robust security of the industrial internet, we propose a human-centered situational security framework that comprehensively considers multi-sensor industrial elements. Constructing an industrial spatial morphism mechanism allows for in-depth analysis of abnormal behaviors. Through the acquisition and effective analysis of multi-sensor data in industrial scenarios, a human-centered situation security is established, the computational complexity of the abnormal behavior identification model is reduced, while the accuracy and efficiency of identification are improved. This method has been verified for its generality in the processing data of metallic materials in 5G sensor networks. The experimental results demonstrate that the industrial situational triplets, validated through ISA-95 standard testing, achieve an average coverage rate of 99.6% in industrial scenarios. Extensive experiments on the Gas dataset and a real-world 5G-enabled production line demonstrated that the proposed method achieved mean precisions of 97.35% and 97.41%, respectively. Compared with the non-vectorized data, the processing time for 5G data and EdgeIIoT data decreased by 79.4 s and 52.9 s, respectively. The ablation study confirms that incorporating the intention component (T) yields a 13.92-percentage-point F1-score improvement over the E + A configuration. Through multi-dimensional performance validation, the security analysis framework for multi-sensor data in industrial scenarios enhances the identification performance of abnormal behaviors in the industrial internet and has excellent generalization capabilities.<\/jats:p>","DOI":"10.3390\/s26165090","type":"journal-article","created":{"date-parts":[[2026,8,11]],"date-time":"2026-08-11T11:51:36Z","timestamp":1786449096000},"page":"5090","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Human-Centered Situation Security Framework Based on Multi-Sensor Data Fusion for Abnormal Behavior Recognition in the Industrial Internet"],"prefix":"10.3390","volume":"26","author":[{"given":"Kejing","family":"Zhao","sequence":"first","affiliation":[{"name":"College of Information Engineering, Henan University of Science and Technology, Luoyang 471023, China"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Zhiyong","family":"Zhang","sequence":"additional","affiliation":[{"name":"College of Information Engineering, Henan University of Science and Technology, Luoyang 471023, China"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2026,8,11]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"891","DOI":"10.1109\/TII.2020.2984549","article-title":"Energy-Efficient LoRaWAN for Industry 4.0 Applications","volume":"17","author":"Sherazi","year":"2021","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"7968","DOI":"10.1109\/TII.2021.3059676","article-title":"Self-Adaptive Traffic Control Model With Behavior Trees and Reinforcement Learning for AGV in Industry 4.0","volume":"17","author":"Hu","year":"2021","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_3","doi-asserted-by":"crossref","unstructured":"Goswami, S., and Sharma, S. (2022, January 9\u201310). Industry 4.0 Enabled Molecular Imaging Using Artificial Intelligence Technique. Proceedings of the 2022 1st International Conference on Computational Science and Technology (ICCST), Chennai, India.","DOI":"10.1109\/ICCST55948.2022.10040406"},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"498","DOI":"10.1109\/TIFS.2018.2854745","article-title":"Real-Time Detection of Hybrid and Stealthy Cyber-Attacks in Smart Grid","volume":"14","author":"Kurt","year":"2019","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"103315","DOI":"10.1016\/j.cose.2023.103315","article-title":"Pignus: A Deep Learning Model for Ids in Industrial Internet-of-Thing","volume":"132","author":"Jayalaxmi","year":"2023","journal-title":"Comput. Secur."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Lin, J., and Liu, L. (2019, January 22\u201326). Research on Security Detection and Data Analysis for Industrial Internet. Proceedings of the 2019 IEEE 19th International Conference on Software Quality, Reliability and Security Companion (QRS-C), Sofia, Bulgaria.","DOI":"10.1109\/QRS-C.2019.00089"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"23","DOI":"10.1109\/TSMC.2023.3299169","article-title":"Anomaly Detection Based on Compressed Data: An Information Theoretic Characterization","volume":"54","author":"Marchioni","year":"2024","journal-title":"IEEE Trans. Syst. Man Cybern. Syst."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"103848","DOI":"10.1016\/j.cose.2024.103848","article-title":"Research on Quality Assessment Methods for Cybersecurity Knowledge Graphs","volume":"142","author":"Shi","year":"2024","journal-title":"Comput. Secur."},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"261","DOI":"10.1109\/TSC.2009.21","article-title":"Situ: A Situation-theoretic Approach to Context-Aware Service Evolution","volume":"2","author":"Chang","year":"2009","journal-title":"IEEE Trans. Serv. Comput."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"679","DOI":"10.1007\/s10844-022-00721-9","article-title":"A Data-Driven Situation-Aware Framework for Predictive Analysis in Smart Environments","volume":"59","author":"Gholami","year":"2022","journal-title":"J. Intell. Inf. Syst."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"6828","DOI":"10.1109\/TAC.2023.3240383","article-title":"Attack Detection for Cyber-Physical Systems: A Zonotopic Approach","volume":"68","author":"Li","year":"2023","journal-title":"IEEE Trans. Autom. Control"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"7895","DOI":"10.1109\/TAC.2023.3253462","article-title":"Detection and Localization of Stealthy Cyberattacks in Cyber-Physical Discrete Event Systems","volume":"68","author":"Fritz","year":"2023","journal-title":"IEEE Trans. Autom. Control"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"4293","DOI":"10.1109\/TIE.2022.3176301","article-title":"Data-Driven Cyber-Attack Detection of Intelligent Attacks in Islanded DC Microgrids","volume":"70","author":"Wan","year":"2023","journal-title":"IEEE Trans. Ind. Electron."},{"key":"ref_14","first-page":"101681","article-title":"Frequency Domain Feature Based Robust Malicious Traffic Detection","volume":"33","author":"Fu","year":"2023","journal-title":"IEEE\/ACM Trans. Netw."},{"key":"ref_15","first-page":"3449","article-title":"An interpretable deep learning framework for intrusion detection in industrial Internet of Things","volume":"20","author":"Xu","year":"2025","journal-title":"Internet Things"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"105040","DOI":"10.1016\/j.ipm.2026.105040","article-title":"BGA: A noise-immune neural distillation framework for malicious signature extraction in high-entropy encrypted flows","volume":"64","author":"Hong","year":"2027","journal-title":"Inf. Process. Manag."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"618","DOI":"10.1109\/TETCI.2022.3232821","article-title":"Generalized Graph Neural Network-Based Detection of False Data Injection Attacks in Smart Grids","volume":"7","author":"Takiddin","year":"2023","journal-title":"IEEE Trans. Emerg. Top. Comput. Intell."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"1911","DOI":"10.1109\/TSC.2024.3453764","article-title":"A Federated Learning Architecture for Blockchain DDoS Attacks Detection","volume":"17","author":"Xu","year":"2024","journal-title":"IEEE Trans. Serv. Comput."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"7066","DOI":"10.1109\/TSMC.2023.3292110","article-title":"A Novel Wrapped Feature Selection Framework for Developing Power System Intrusion Detection Based on Machine Learning Methods","volume":"53","author":"Han","year":"2023","journal-title":"IEEE Trans. Syst. Man Cybern. Syst."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"153","DOI":"10.1109\/TDSC.2023.3247585","article-title":"Automatic Evasion of Machine Learning-Based Network Intrusion Detection Systems","volume":"21","author":"Yan","year":"2024","journal-title":"IEEE Trans. Dependable Secur. Comput."},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"5120","DOI":"10.1109\/TIFS.2024.3392536","article-title":"Vulnerability Detection Based on Enhanced Graph Representation Learning","volume":"19","author":"Xiao","year":"2024","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"24","DOI":"10.1109\/MC.2016.21","article-title":"Situation Analytics: A Foundation for a New Software Engineering Paradigm","volume":"49","author":"Chang","year":"2016","journal-title":"Computer"},{"key":"ref_23","unstructured":"Moniz, J.R.A., and Krueger, D. (2017, January 15\u201317). Nested LSTMs. Proceedings of the 9th Asian Conference on Machine Learning, Seoul, Republic of Korea."},{"key":"ref_24","doi-asserted-by":"crossref","unstructured":"Ming, H., Chang, C.K., Oyama, K., and Yang, H.-I. (2010, January 19\u201323). Reasoning about Human Intention Change for Individualized Runtime Software Service Evolution. Proceedings of the 2010 IEEE 34th Annual Computer Software and Applications Conference, Seoul, Republic of Korea.","DOI":"10.1109\/COMPSAC.2010.36"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"3309","DOI":"10.1109\/TPDS.2023.3327750","article-title":"Efficient Edge Data Management Framework for IIoT via Prediction-Based Data Reduction","volume":"34","author":"Yang","year":"2023","journal-title":"IEEE Trans. Parallel Distrib. Syst."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"39","DOI":"10.1016\/j.compind.2015.07.011","article-title":"An intelligent agent for ERP\u2019s data structure analysis based on ANSI\/ISA-95 standard","volume":"73","author":"Vidoni","year":"2015","journal-title":"Comput. Ind."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"103007","DOI":"10.1016\/j.cose.2022.103007","article-title":"Detection and Mitigation of Field Flooding Attacks on Oil and Gas Critical Infrastructure Communication","volume":"124","author":"Mohammed","year":"2023","journal-title":"Comput. Secur."},{"key":"ref_28","first-page":"1183","article-title":"Explainable Anomaly Detection for Industrial Control System Cybersecurity","volume":"55","author":"Ha","year":"2022","journal-title":"IFAC-Pap."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"8","DOI":"10.1145\/3637554","article-title":"A Combinatorial Optimization Analysis Method for Detecting Malicious Industrial Internet Attack Behaviors","volume":"8","author":"Zhao","year":"2024","journal-title":"ACM Trans. Cyber-Phys. Syst."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"7618","DOI":"10.1109\/TII.2021.3053304","article-title":"Evolutionary Deep Belief Network for Cyber-Attack Detection in Industrial Automation and Control System","volume":"17","author":"Lu","year":"2021","journal-title":"IEEE Trans. Ind. Inform."},{"key":"ref_31","doi-asserted-by":"crossref","first-page":"1","DOI":"10.4018\/IJISP.325232","article-title":"A Novel CNN-LSTM Fusion-Based Intrusion Detection Method for Industrial Internet","volume":"17","author":"Song","year":"2023","journal-title":"Int. J. Inf. Secur. Priv."},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"549","DOI":"10.1007\/s00170-021-08250-5","article-title":"A Novel Intelligent Manufacturing Mode with Human-Cyber-Physical Collaboration and Fusion in the Non-Ferrous Metal Industry","volume":"119","author":"Liu","year":"2022","journal-title":"Int. J. Adv. Manuf. Technol."}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/16\/5090\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,8,11]],"date-time":"2026-08-11T11:53:44Z","timestamp":1786449224000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/16\/5090"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8,11]]},"references-count":32,"journal-issue":{"issue":"16","published-online":{"date-parts":[[2026,8]]}},"alternative-id":["s26165090"],"URL":"https:\/\/doi.org\/10.3390\/s26165090","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,8,11]]}}}