{
  "schema_version": "0.6.0",
  "paper_id": "iot-anomaly-classification-cnn-bilstm-two-tiered",
  "page_url": "https://naser.github.io/research-publications/papers/iot-anomaly-classification-cnn-bilstm-two-tiered/",
  "title": "A Two-Tiered Framework for Anomaly Classification in IoT Networks Utilizing CNN-BiLSTM Model",
  "title_variants": [],
  "authors": [
    "Yue Guan",
    "Morteza Noferesti",
    "Naser Ezzati-Jivan"
  ],
  "author_details": [
    {
      "name": "Yue Guan",
      "orcid": null,
      "profile_url": "https://dblp.org/pid/54/7820.html"
    },
    {
      "name": "Morteza Noferesti",
      "orcid": "https://orcid.org/0009-0000-5507-1461",
      "profile_url": "https://dblp.org/pid/82/10462.html"
    },
    {
      "name": "Naser Ezzati-Jivan",
      "orcid": "https://orcid.org/0000-0003-1435-6297",
      "profile_url": "https://naser.github.io/"
    }
  ],
  "publication": {
    "year": 2024,
    "venue": "Software Impacts",
    "type": "journal article",
    "publication_date": "2024-05",
    "online_date": null,
    "print_date": "2024-05",
    "volume": "20",
    "issue": null,
    "pages": "100646",
    "article_number": "100646",
    "publisher": "Elsevier BV",
    "issn": [
      "2665-9638"
    ],
    "isbn": [],
    "crossref_type": "journal-article"
  },
  "publication_type": "journal article",
  "status": "published_with_public_full_text",
  "canonical_source_url": "https://doi.org/10.1016/j.simpa.2024.100646",
  "source_record_id": "a-two-tiered-framework-for-anomaly-classification-in-iot-networks-utilizing-cnn-bilstm-model-1f6844c5dc",
  "identifiers": {
    "doi": "10.1016/j.simpa.2024.100646"
  },
  "abstract": "The paper introduces ACS-IoT, an Anomaly Classification System for IoT networks, structured as a two-tiered framework. In the first, it employs a decision tree classifier for anomaly detection. In the second, a CNN-BiLSTM model is utilized for more profound analysis and classification of anomaly types. To address data imbalance, SMOTE is used, and feature selection is enhanced with PSO. The approach showcases strong practical applicability in real-world industrial settings, achieving an accuracy of 88%, precision of 89%, recall of 88%, and F1-score of 88% for multi-class classification, surpassing other machine learning approaches by at least 6% in all metrics.",
  "abstract_source": "Exact author abstract from the publisher's CC BY 4.0 open-access version of record; verified on 2026-08-09.",
  "abstract_available": true,
  "scholar_eligibility": {
    "eligible": true,
    "basis": "complete-visible-author-abstract",
    "note": "The page displays the complete verified author abstract."
  },
  "description": "The paper introduces ACS-IoT, an Anomaly Classification System for IoT networks, structured as a two-tiered framework. In the first, it employs a decision tree classifier for anomaly detection. In the second, a CNN-BiLSTM model is utilized for more profound analysis and classification of anomaly types. To address data imbalance, SMOTE is used, and feature selection is enhanced with PSO. The approach showcases strong practical applicability in real-world industrial settings, achieving an accuracy of 88%, precision of 89%, recall of 88%, and F1-score of 88% for multi-class classification, surpassing other machine learning approaches by at least 6% in all metrics.",
  "evidence_level": "metadata-or-abstract-reviewed",
  "evidence": {
    "source_basis": "abstract-and-metadata-reviewed",
    "coverage": "abstract and bibliographic metadata",
    "summary_origin": "AI-assisted catalog editorial summary",
    "review_status": "catalog-reviewed; paper-author approval pending",
    "verified_on": "2026-08-09",
    "sources": [
      {
        "note": "ScienceDirect article and abstract: https://www.sciencedirect.com/science/article/pii/S2665963824000344"
      },
      {
        "note": "Crossref DOI record verified 2026-08-09: the version of record is licensed CC BY 4.0"
      },
      {
        "note": "Public publisher PDF: https://www.sciencedirect.com/science/article/pii/S2665963824000344/pdfft?isDTMRedir=true&download=true"
      },
      {
        "note": "DOI metadata: https://doi.org/10.1016/j.simpa.2024.100646"
      },
      {
        "note": "Private evidence note: papers/a-two-tiered-framework-for-anomaly-classification-in-iot-networks-utilizing-cnn-bilstm-model-1f6844c5dc/pdf-evidence/notes/parallel-batch-01-iot-anomaly-classification.md"
      }
    ]
  },
  "summary": {
    "core_contribution": "The abstract presents a two-tier anomaly-classification framework for IoT networks that combines a decision-tree detector with a CNN-BiLSTM classifier.",
    "problem": "IoT anomaly data can be imbalanced and heterogeneous, making both anomaly detection and attack-type classification difficult.",
    "method": "The abstract identifies a decision-tree first tier, CNN-BiLSTM second tier, SMOTE class balancing, and PSO feature selection. Dataset identity, preprocessing, hyperparameters, and baselines remain unverified.",
    "findings": "The abstract reports 88% accuracy, 89% precision, 88% recall, and 88% F1, with at least a 6% improvement over compared machine-learning methods. These values are abstract-level claims.",
    "limitations": "The blocked full text leaves the dataset, split protocol, model configuration, baseline definitions, statistical treatment, and paper-specific limitations unverified.",
    "future_work": "The article's future-work section remains unverified pending full-text retrieval."
  },
  "tags": [
    "iot-security",
    "anomaly-detection",
    "machine-learning",
    "deep-learning-systems"
  ],
  "keywords": [
    "IoT anomaly detection",
    "CNN-BiLSTM",
    "SMOTE",
    "particle swarm optimization",
    "PSO",
    "Software Impacts",
    "classification"
  ],
  "versions": [
    {
      "id": "published-version",
      "label": "Published version",
      "relation": "version-of-record",
      "title": "A Two-Tiered Framework for Anomaly Classification in IoT Networks Utilizing CNN-BiLSTM Model",
      "url": "https://doi.org/10.1016/j.simpa.2024.100646",
      "pdf_url": null,
      "status": "published",
      "canonical_for_citation": true
    },
    {
      "id": "open-access-publisher-pdf",
      "label": "Open-access publisher PDF",
      "relation": "source-record",
      "title": "A Two-Tiered Framework for Anomaly Classification in IoT Networks Utilizing CNN-BiLSTM Model",
      "url": "https://www.sciencedirect.com/science/article/pii/S2665963824000344/pdfft?isDTMRedir=true&download=true",
      "pdf_url": "https://www.sciencedirect.com/science/article/pii/S2665963824000344/pdfft?isDTMRedir=true&download=true",
      "status": "public_full_text",
      "canonical_for_citation": false
    }
  ],
  "access": {
    "status": "published_with_public_full_text",
    "note": "The publisher's version of record is open access under CC BY 4.0. The direct PDF is externally linked and is not redistributed here; detailed enrichment remains abstract-grounded until the full article is locally reviewed.",
    "license": "CC BY 4.0"
  },
  "resources": {
    "code": null,
    "data": null,
    "slides": null,
    "demo": null
  },
  "citation_guidance": {
    "when_to_cite": "Cite this paper when studying two-stage anomaly detection and attack-type classification for imbalanced IoT network data.",
    "points": [
      "Decision-tree anomaly detection followed by CNN-BiLSTM multi-class attack classification.",
      "SMOTE-based class balancing and particle-swarm-optimization feature selection for IoT intrusion data.",
      "Reported 88% accuracy, 89% precision, 88% recall, and 88% F1 for multi-class classification."
    ],
    "canonical_version_id": "published-version"
  },
  "provenance": {
    "metadata_verified_on": "2026-08-09",
    "metadata_source": [
      "ScienceDirect article and abstract: https://www.sciencedirect.com/science/article/pii/S2665963824000344",
      "Crossref DOI record verified 2026-08-09: the version of record is licensed CC BY 4.0",
      "Public publisher PDF: https://www.sciencedirect.com/science/article/pii/S2665963824000344/pdfft?isDTMRedir=true&download=true",
      "DOI metadata: https://doi.org/10.1016/j.simpa.2024.100646",
      "Private evidence note: papers/a-two-tiered-framework-for-anomaly-classification-in-iot-networks-utilizing-cnn-bilstm-model-1f6844c5dc/pdf-evidence/notes/parallel-batch-01-iot-anomaly-classification.md"
    ],
    "summary_written_by": "AI-assisted",
    "summary_verified_by": "metadata/abstract-grounded catalog review; full-text review and author approval pending",
    "linked_preprint_record": null,
    "author_order_note": null
  },
  "batch": {
    "phase": 2,
    "batch_label": "expanded forty-paper release",
    "status": "included_in_expanded_catalog",
    "selected_at": "2026-08-09"
  }
}