Enrique Fernández-Morales , Llanos Tobarra , Antonio Robles-Gómez , Rafael Pastor-Vargas , Roberto Hernández , Joao Sarraipa
{"title":"可解释性AI (XAI)用于智能农村应用的攻击检测","authors":"Enrique Fernández-Morales , Llanos Tobarra , Antonio Robles-Gómez , Rafael Pastor-Vargas , Roberto Hernández , Joao Sarraipa","doi":"10.1016/j.iot.2025.101804","DOIUrl":null,"url":null,"abstract":"<div><div>This research evaluates the performance and computational efficiency of various AI models for intrusion detection in IoT environments, with the goal of enabling future deployment in Smart Rural scenarios. Leveraging the massive NF-UQ-NIDS-v2 dataset-comprising over 76 million labeled NetFlow records across 21 traffic classes-we benchmark five models, ranging from classical machine learning algorithms to deep learning architectures, across both high-performance and low-performance execution setups. The analysis covers standard classification metrics (accuracy, precision, recall, F1-score) and detailed resource usage indicators, including inference time, memory footprint, CPU cycles, and energy consumption per batch. Additionally, explainable AI techniques (SHAP and LIME) are employed to investigate model behavior and feature relevance under real-world constraints. Results show that classical models, particularly Random Forest and Decision Tree, achieve top-tier detection accuracy while maintaining minimal computational demands, making them strong candidates for constrained deployments. Deep learning models deliver comparable predictive performance but incur significantly higher resource consumption, requiring further optimization for practical use. Overall, this work provides a comprehensive evaluation framework and practical insights for selecting efficient and interpretable AI-based intrusion detection systems for rural and low-resource infrastructures.</div></div>","PeriodicalId":29968,"journal":{"name":"Internet of Things","volume":"34 ","pages":"Article 101804"},"PeriodicalIF":7.6000,"publicationDate":"2025-10-20","publicationTypes":"Journal Article","fieldsOfStudy":null,"isOpenAccess":false,"openAccessPdf":"","citationCount":"0","resultStr":"{\"title\":\"eXplicability AI (XAI) for attack detection toward smart rural applications\",\"authors\":\"Enrique Fernández-Morales , Llanos Tobarra , Antonio Robles-Gómez , Rafael Pastor-Vargas , Roberto Hernández , Joao Sarraipa\",\"doi\":\"10.1016/j.iot.2025.101804\",\"DOIUrl\":null,\"url\":null,\"abstract\":\"<div><div>This research evaluates the performance and computational efficiency of various AI models for intrusion detection in IoT environments, with the goal of enabling future deployment in Smart Rural scenarios. Leveraging the massive NF-UQ-NIDS-v2 dataset-comprising over 76 million labeled NetFlow records across 21 traffic classes-we benchmark five models, ranging from classical machine learning algorithms to deep learning architectures, across both high-performance and low-performance execution setups. The analysis covers standard classification metrics (accuracy, precision, recall, F1-score) and detailed resource usage indicators, including inference time, memory footprint, CPU cycles, and energy consumption per batch. Additionally, explainable AI techniques (SHAP and LIME) are employed to investigate model behavior and feature relevance under real-world constraints. Results show that classical models, particularly Random Forest and Decision Tree, achieve top-tier detection accuracy while maintaining minimal computational demands, making them strong candidates for constrained deployments. Deep learning models deliver comparable predictive performance but incur significantly higher resource consumption, requiring further optimization for practical use. Overall, this work provides a comprehensive evaluation framework and practical insights for selecting efficient and interpretable AI-based intrusion detection systems for rural and low-resource infrastructures.</div></div>\",\"PeriodicalId\":29968,\"journal\":{\"name\":\"Internet of Things\",\"volume\":\"34 \",\"pages\":\"Article 101804\"},\"PeriodicalIF\":7.6000,\"publicationDate\":\"2025-10-20\",\"publicationTypes\":\"Journal Article\",\"fieldsOfStudy\":null,\"isOpenAccess\":false,\"openAccessPdf\":\"\",\"citationCount\":\"0\",\"resultStr\":null,\"platform\":\"Semanticscholar\",\"paperid\":null,\"PeriodicalName\":\"Internet of Things\",\"FirstCategoryId\":\"94\",\"ListUrlMain\":\"https://www.sciencedirect.com/science/article/pii/S254266052500318X\",\"RegionNum\":3,\"RegionCategory\":\"计算机科学\",\"ArticlePicture\":[],\"TitleCN\":null,\"AbstractTextCN\":null,\"PMCID\":null,\"EPubDate\":\"\",\"PubModel\":\"\",\"JCR\":\"Q1\",\"JCRName\":\"COMPUTER SCIENCE, INFORMATION SYSTEMS\",\"Score\":null,\"Total\":0}","platform":"Semanticscholar","paperid":null,"PeriodicalName":"Internet of Things","FirstCategoryId":"94","ListUrlMain":"https://www.sciencedirect.com/science/article/pii/S254266052500318X","RegionNum":3,"RegionCategory":"计算机科学","ArticlePicture":[],"TitleCN":null,"AbstractTextCN":null,"PMCID":null,"EPubDate":"","PubModel":"","JCR":"Q1","JCRName":"COMPUTER SCIENCE, INFORMATION SYSTEMS","Score":null,"Total":0}
eXplicability AI (XAI) for attack detection toward smart rural applications
This research evaluates the performance and computational efficiency of various AI models for intrusion detection in IoT environments, with the goal of enabling future deployment in Smart Rural scenarios. Leveraging the massive NF-UQ-NIDS-v2 dataset-comprising over 76 million labeled NetFlow records across 21 traffic classes-we benchmark five models, ranging from classical machine learning algorithms to deep learning architectures, across both high-performance and low-performance execution setups. The analysis covers standard classification metrics (accuracy, precision, recall, F1-score) and detailed resource usage indicators, including inference time, memory footprint, CPU cycles, and energy consumption per batch. Additionally, explainable AI techniques (SHAP and LIME) are employed to investigate model behavior and feature relevance under real-world constraints. Results show that classical models, particularly Random Forest and Decision Tree, achieve top-tier detection accuracy while maintaining minimal computational demands, making them strong candidates for constrained deployments. Deep learning models deliver comparable predictive performance but incur significantly higher resource consumption, requiring further optimization for practical use. Overall, this work provides a comprehensive evaluation framework and practical insights for selecting efficient and interpretable AI-based intrusion detection systems for rural and low-resource infrastructures.
期刊介绍:
Internet of Things; Engineering Cyber Physical Human Systems is a comprehensive journal encouraging cross collaboration between researchers, engineers and practitioners in the field of IoT & Cyber Physical Human Systems. The journal offers a unique platform to exchange scientific information on the entire breadth of technology, science, and societal applications of the IoT.
The journal will place a high priority on timely publication, and provide a home for high quality.
Furthermore, IOT is interested in publishing topical Special Issues on any aspect of IOT.