TNSM Searchable Index

Author(s)	Title	Year	Publication	Keywords
Ashesh Gaur, Sridhar Radhakrishnan, Mohammed Atiquzzaman	Inverse Packet Classification: Reconstructing Behaviorally Equivalent Rule Sets from Observed Traffic	2026	Early Access	Merging Labeling Modeling	Network devices classify packets with ordered rule tables, but those tables are often inaccessible. Passive reconstruction can support behavior audits, misconfiguration analysis, and policy compliance without privileged device access. We define inverse packet classification as inferring a compact rule set from observed packet headers and device actions. The goal is observational equivalence on observed traffic, not recovery of the original configuration or priority order. The problem is difficult because traffic covers only part of the header space. Packet classifiers also use first-match semantics and structured prefix or interval predicates. We propose InversePC, which combines entropy-guided k-d-tree partitioning with greedy region merging. For a dominant default action, InversePC-HiB uses a hybrid split loss, exception-only merging, and a wildcard default rule. On synthetic classifiers, accuracy reaches 100% once coverage is sufficient. On native-resolution ClassBench filters, InversePC reaches 94.1% action agreement versus 88.3% for cross-validated CART on 1,000-rule sets. At 8-bit quantization, the two methods are statistically tied (98.1% versus 98.0%). In a well-covered 250-rule setting, InversePC uses 1.20× the original rule count versus 1.32× for CART. HiB is most useful for sparse, irregular default-permit ACLs, where it uses up to 2.5× fewer rules than InversePC at 99.8% accuracy. Optimized implementation makes native-resolution reconstruction practical in seconds.	10.1109/TNSM.2026.3744323
Jing Zhang, Chao Luo, Rui Shao	MTG-GAN: A Masked Temporal Graph Generative Adversarial Network for Cross-Domain System Log Anomaly Detection	2026	Early Access	Anomaly detection Adaptation models Generative adversarial networks	Anomaly detection of system logs is crucial for the service management of large-scale information systems. Nowadays, log anomaly detection faces two main challenges: 1) capturing evolving temporal dependencies between log events to adaptively tackle with emerging anomaly patterns, 2) and maintaining high detection capabilities across varies data distributions. Existing methods rely heavily on domain-specific data features, making it challenging to handle the heterogeneity and temporal dynamics of log data. This limitation restricts the deployment of anomaly detection systems in practical environments. In this article, a novel framework, Masked Temporal Graph Generative Adversarial Network (MTG-GAN), is proposed for both conventional and cross-domain log anomaly detection. The model enhances the detection capability for emerging abnormal patterns in system log data by introducing an adaptive masking mechanism that combines generative adversarial networks with graph contrastive learning. Additionally, MTG-GAN reduces dependency on specific data distribution and improves model generalization by using diffused graph adjacency information deriving from temporal relevance of event sequence, which can be conducive to improve cross-domain detection performance. Experimental results demonstrate that MTG-GAN outperforms existing methods on multiple real-world datasets in both conventional and cross-domain log anomaly detection.	10.1109/TNSM.2026.3654642
Yakai Dai, Jia Chen, Xu Huang, Rui Dong, Tao Fu	VISTA: Verified Belief-Centric LLM Agents for Safe Network Management	2026	Early Access	Safety Writing Modeling	Large language model (LLM) agents now commit changes in production network management, where one change can touch routing-protocol state or a Kubernetes NetworkPolicy. The prevailing pipeline emits the change as a single text answer, so the network state, the competing root-cause hypotheses, and the operational invariants travel through the same token stream as the answer—a design that is unsafe on the NetArena dynamic benchmark: on capacity planning, the strongest supervised and retrieval-augmented baselines reach near-perfect correctness while leaving 41% of executed actions unsafe. VISTA gives each hidden quantity a persistent owner: it maintains a typed belief graph over topology and configuration, reasons over an explicit hypothesis trace, and routes every candidate write through a counterfactual verifier that emits a typed proof object, whose structured failure reasons re-enter the next round. On a shared Qwen2.5-Coder-7B backbone and NetArena’s official scorer, no single prompting strategy is safe across capacity planning’s ten query classes. Under π=WITHHOLD (proof failure blocks the write), VISTA reaches safety 1.000 at commit 0.869. Under π=FLAG (proof failure annotates but proceeds), it attains the per-class maximum on all ten classes, lifting safety from the 0.709 per-class oracle envelope to 0.869 at correctness 0.992, commit 1.000, and zero refusals, with a paired query-level margin of 153–0. An ablation attributes the gain: the gate itself does not move the safety rate, which is set by feeding belief and hypothesis structure back into generation, while the gate contributes a commit-time certificate agreeing with the official scorer on 869/869 admitted writes and a rejection whose structure decides repairability (60/86 versus 0/86), at ≈13× latency (3.520 s). On routing and Kubernetes the same workflow trades ≈70% refusal for high safety and is diagnostic, not deployable. Our implementation is released at https://github.com/dai-yakai/VISTA.	10.1109/TNSM.2026.3745152
Shubhani Aggarwal, Georges Kaddoum	QSB-SHA: Quantum-secured Blockchain for Smart Home Authentication	2026	Early Access	Authentication Smart homes Internet of Things	Today, IoT enables smart home users to remotely connect with household appliances via the Internet. Sensor-equipped smart devices are widely deployed in smart homes to collect and manage information regardless of user location. However, ensuring the secure and private accessibility of these devices in a centralized manner remains a major concern. The emergence of blockchain and quantum computing, with their enhanced information processing capabilities on decentralized platforms, offers a viable solution to this issue. Consequently, there is a need for cryptographic primitives that can withstand both quantum and classical attacks. To address this concern in the present study, we propose a quantum-secured blockchain (QSB) framework for smart home authentication (SHA). The proposed framework employs quantum key distribution (QKD) and maximally entangled states on a decentralized platform to enable secure key distribution and mutual authentication between smart home users and devices. Furthermore, our approach integrates quantum passwords and quantum digital signatures to verify and validate legitimate users, thereby ensuring security and privacy. The framework is simulated using the Automated Validation of Internet Security Protocols and Applications (AVISPA) tool for formal security analysis. We also conduct an informal security analysis and compare the performance of our proposed scheme with that of the previously proposed solutions. The results demonstrate that our framework outperforms existing approaches across various performance evaluation metrics.	10.1109/TNSM.2026.3747090
Guan-Lin Chen, Yao Chiang, Hung-Yu Wei	Semantic-Aware Multi-LoRA Orchestration in Edge Federation: Hierarchical Multi-Timescale Optimization under QoE Constraints	2026	Early Access	Costing LoRa Dispatching	The rapid scaling of Large Language Models (LLMs) has driven the adoption of Multi-LoRA as a lightweight mechanism for model customization. However, deploying Multi-LoRA in edge federations introduces significant challenges in operational expenditure (OPEX) and latency efficiency. In this paper, we introduce a semantic-aware Multi-LoRA serving framework for edge federations that jointly optimizes OPEX and Quality of Experience (QoE). Specifically, we propose a semantic compatibility model based on behavioral embeddings to enable high-fidelity LoRA substitution, thereby reducing cold-start latency and redundant cross-region data transfers. We further develop a hierarchical multi-timescale architecture that separates long-term model provisioning from real-time request dispatching, allowing the system to adapt to dynamic workload skewness under data sovereignty constraints. Additionally, we design a Lyapunov-based dynamic dispatching algorithm to jointly optimize cross-cluster routing, node auto-scaling, and VRAM execution modes in real time. Extensive discrete-event simulations based on real-world Microsoft Azure Functions traces demonstrate that the proposed framework significantly mitigates the batch-squeezing effect and consistently outperforms state-of-the-art baselines in steady-state throughput, long-term OPEX reduction, and 95th-percentile Time-To-First-Token (TTFT) Service Level Objective (SLO) compliance.	10.1109/TNSM.2026.3747185
Deemah H. Tashman, Soumaya Cherkaoui	Trustworthy AI-Driven Dynamic Hybrid RIS: Joint Optimization and Reward Poisoning-Resilient Control in Cognitive MISO Networks	2026	Early Access	Reconfigurable intelligent surfaces Reliability Optimization	Cognitive radio networks (CRNs) are a key mechanism for alleviating spectrum scarcity by enabling secondary users (SUs) to opportunistically access licensed frequency bands without harmful interference to primary users (PUs). To address unreliable direct SU links and energy constraints common in next-generation wireless networks, this work introduces an adaptive, energy-aware hybrid reconfigurable intelligent surface (RIS) for underlay multiple-input single-output (MISO) CRNs. Distinct from prior approaches relying on static RIS architectures, our proposed RIS dynamically alternates between passive and active operation modes in real time according to harvested energy availability. We also model our scenario under practical hardware impairments and cascaded fading channels. We formulate and solve a joint transmit beamforming and RIS phase optimization problem via the soft actor-critic (SAC) deep reinforcement learning (DRL) method, leveraging its robustness in continuous and highly dynamic environments. Notably, we conduct the first systematic study of reward poisoning attacks on DRL agents in RIS-enhanced CRNs, and propose a lightweight, real-time defense based on reward clipping and statistical anomaly filtering. Numerical results demonstrate that the SAC-based approach consistently outperforms established DRL base-lines, and that the dynamic hybrid RIS strikes a superior trade-off between throughput and energy consumption compared to fully passive and fully active alternatives. We further show the effectiveness of our defense in maintaining SU performance even under adversarial conditions. Our results advance the practical and secure deployment of RIS-assisted CRNs, and highlight crucial design insights for energy-constrained wireless systems.	10.1109/TNSM.2026.3660728
Mengyao Li, Sebastian Troia, Jean Pierre Asdikian, Giacomo Sguotti, Yingqian Zhang, Guido Maier	Hierarchical Auction-Based 5G Network Slicing with Region-based Multi-MNO Deployment	2026	Early Access	Resource management Modeling Radio access networks	Network slicing enables multiple virtual networks to share 5G network infrastructure while meeting heterogeneous service requirements. In parallel, region-based control in multi- Mobile Network Operators (MNOs) deployments has emerged, where each MNO manages a subregion of the network topology. This paper presents a two-level hierarchical combinatorial auction for end-to-end 5G Radio Access Network (RAN) slicing among MNOs, Mobile Virtual Network Operators (MVNOs), and users. At the upper level, MNOs provide slice resources to MVNOs. At the lower level, MVNOs allocate the slices to users. The framework considers dynamic demand, as requests may arrive at different times and remain active for different timeslots. A pair-bid mechanism is used to perform buyer–seller matching at both levels. The auction first selects the requests that can be accepted. The selection tries to keep the accepted bid value high without ignoring the electricity cost. After the winners are known, their payments are calculated using a VCG-like criticalvalue rule. The model also reflects the fact that different MNOs serve different regions and may have different infrastructure costs. In the simulations, the heuristic obtains higher welfare than both baselines. Simulations show that the heuristic improves welfare compared with two baseline methods, achieving up to 13.6% and 20.7% gains while maintaining scalability across different topologies.	10.1109/TNSM.2026.3747595
Tianle Lin, Lei Feng, Fanqin Zhou, Xudong Wang, Zhixiang Yang, Wenjing Li	Joint AP Selection and Power Allocation in Satellite–Terrestrial Cell-Free Network with Heterogeneous Multi-Agent Learning	2026	Early Access	Satellites Resource management Low earth orbit satellites	While Low Earth Orbit (LEO) satellites are vital for 6G non-terrestrial networks (NTN), applying Cell-Free Massive MIMO (CF-mMIMO) to high-mobility constellations remains challenging despite its capability to resolve conventional handover and interference issues. The traditional centralized processing model becomes impractical due to prohibitive latency, signaling overhead, and outdated Channel State Information (CSI), which degrades system performance. To overcome this challenge, we design a LEO Satellite Cell-Free Massive MIMO (LCF-mMIMO) system. In this system, each satellite independently determines its transmit power within the serving cluster, while statistical CSI is utilized to counter the fast-varying instantaneous CSI resulting from the rapid movement of LEO satellites. Additionally, to solve the minimum UE quality of service(QoS) maximization problem with reduced latency and signaling overhead, we develop a Heterogeneous Multi-Agent Proximal Policy Optimization (H-MAPPO) algorithm for joint Access Point (AP) selection and power allocation. In this algorithm, User Equipments (UEs) and satellites operate as heterogeneous agents: UEs perform AP selection based on local service demands, while satellites allocate power according to local power and interference states. Their decisions are coupled through the AP selection matrix, which converts UE-side access results into satellite-side associated UE sets and limits information exchange to selected UE-satellite associations. Simulation results demonstrate that the proposed scheme effectively adapts to dynamic LEO environments and achieves superior User QoS over learning-based benchmarks. Compared with the centralized SR-JCPA method, H-MAPPO maintains a comparable minimum QoS of 0.52 versus 0.53 under 16 UEs, while reducing the per-episode execution time from 17646.81 s to 96.81 s.	10.1109/TNSM.2026.3747765
Francesco Pizzato, Daniele Bringhenti, Fulvio Valenza	Parallelizing Automated Firewall Configuration via Traffic-Aware Decomposition	2026	Early Access	Firewalls (computing) Fluid flow Merging	Automating the configuration of distributed firewalls by refining high-level security requirements is a well-established approach to improve correctness and manageability in modern computer networks. However, existing solutions formulate this task as a single monolithic constraint-solving problem, whose scalability suffers as network size and policy complexity increase. To overcome this limitation, this paper proposes a traffic-aware decomposition approach for the automated, parallel configuration of distributed firewalls. The method decomposes the global refinement problem into cluster-scoped subproblems using a flow-weighted network representation and solves them concurrently before merging the results into a single deployable configuration. The approach is implemented on top of a constraint-based framework and evaluated on representative topologies. The results show substantial runtime reductions, with gains increasing with problem size and reaching up to ∼98% on larger instances, while maintaining satisfactory optimization quality. Moreover, the approach enables the resolution of firewall configuration problems beyond the limits of monolithic formulations.	10.1109/TNSM.2026.3747990
Ke He, Muhammad Rizwan Asghar, Jeong Do Yoo, Young Hun Lee, Hyunjae Kang, Huy Kang Kim, Dan Dongseong Kim	Liuer Mihou: A Practical Grey-box Adversarial Attack against Anomaly-based Network Intrusion Detection Systems	2026	Early Access	Modeling Signal detection Timing	Deep learning has gained popularity as a detection algorithm for Network-based Intrusion Detection Systems (NIDS) due to its expressiveness and speed. However, Deep learning algorithms are susceptible to adversarial attacks that introduce imperceptible changes to deceive the Deep learning algorithm into misclassifying the input. Existing adversarial attacks often overlook the practicality and replayability of the attack. In this paper, we present Liuer Mihou (LM), an adversarial attack designed to generate practical and replayable adversarial network packets, specifically targeting unsupervised anomaly-based NIDS deployed in Internet of Things (IoT) networks. The core concept behind LM is to leverage adversarial transferability and generate adversarial packets on a surrogate NIDS while considering predefined, semantic-preserving mutation operations to ensure practicality. To assess the effectiveness of LM, we objectively analyze its evasiveness against five general-purpose machine learning-based outlier detection algorithms (SOM, RRCF, LOF, OCSVM, and FROCC), as well as the state-of-the-art NIDS, Kitsune. Rather than claiming broad practicality, we characterize when and how packet-space attacks remain feasible: we quantify the trade-off between evasion and attack effectiveness, the distortion introduced by physical replay, and the conditions under which the attack transfers across detector families. We further show that LM’s mutation set is extensible beyond timing and size, adding TCP-window and payload-byte operators to evade a header-field-aware detector. Furthermore, we demonstrate that adversarial detectors such as Feature Squeezing and MagNet, as well as defenses designed for unsupervised anomaly detection, are largely ineffective in defending against LM. Moving beyond a theoretical setting, we conduct a replay of LM in two real IoT testbeds to analyze its practicality.	10.1109/TNSM.2026.3742885
Shuang Zheng, Xing Zhang, Michael Sheng, Haixu Wang, Wenbo Wang	Beam Hopping Low Earth Orbit Satellite Resource Allocation for Differentiated Services and Robustness Analysis under Model Attacks	2026	Early Access	Beams Satellites Resource management	Beam hopping (BH)-enabled Low Earth Orbit (LEO) satellites play a pivotal role in next-generation communication networks, providing global coverage, improving spectrum efficiency, and supporting flexible adaptation to heterogeneous service demands. To fully exploit these capabilities, artificial intelligence (AI) techniques are increasingly employed for dynamic resource allocation and power management. However, limited onboard resources and potential adversarial perturbations pose challenges to both efficiency and robustness. To address these issues, we leverage digital twin technology to accurately capture the spatio-temporal dynamics of user–satellite visibility, providing precise state information for decision-making. Building on this, we formulate a joint optimization framework for BH scheduling and power allocation as a Markov Decision Process and propose the BRIDGE—BH with Reinforcement learning incorporating Integrated Dirichlet and Gumbel-TopK Exploration—which integrates a quality of service (QoS)-driven subchannel scheduling mechanism to ensure efficient and differentiated resource allocation. The model’s robustness is systematically evaluated under three classical adversarial attacks. Simulation results demonstrate that our approach achieves superior energy efficiency, service throughput, and fairness, while the robustness analysis shows stable performance under the considered bounded adversarial perturbations.	10.1109/TNSM.2026.3710750
Ting-Yu Chang, Cooper Cheng-Yuan Ku	Two-tier Framework with AutoML for Detection and Classification of Multiple Types of Anomalies in Intrusion Attacks	2026	Early Access	Modeling Optimization Probability	Ensuring cybersecurity is paramount for protecting sensitive data and defending against increasingly sophisticated cyberattacks. Consequently, intrusion detection (ID) has become a critical area of research in network security. This paper proposes a two-tier framework that leverages efficient automated machine learning (AutoML) techniques to address data imbalance and optimize feature combinations for ID and classification of multiple types of anomalies. In the first tier, two complementary models are selected: a primary model optimized for overall dataset performance and a secondary model specifically chosen for its effectiveness on balanced data distributions. In the second tier, a probability stacking approach, supported by Out-of-Fold (OOF) cross-validation, integrates insights from the first-tier models. It acts as a binary safety net that successfully recovers rare minority attacks while preventing irreversible information loss. The proposed framework effectively mitigates the adverse effects of data imbalance while requiring only a minimal runtime memory footprint of approximately 44 MB (NSL-KDD) and a total process footprint of 165.52 MB (CIC-IIoT-2025), and achieves a rapid cold-start initialization of 0.85 seconds. These advantages make it well-suited for edge computing. Experimental results on the NSL-KDD dataset demonstrate that the proposed approach achieves an overall accuracy of 99.73%, outperforming many state-of-the-art methods by 0.4-20.6%. Furthermore, evaluations on the CIC-IDS-2017 dataset show a 6.3% accuracy improvement and a significant 36% increase in macro-average recall compared with a random-forest-only (RF-only) model. Moreover, extensive validation on the contemporary CIC-IIoT-2025 dataset reveals a significant 4.20% improvement in Macro F1-score over up-to-date baselines. Finally, evaluations on an independent set with novel attack types (KDDTest+) confirm strong generalization capability, achieving 77.10% accuracy and underscoring the framework's robustness in modern industrial scenarios.	10.1109/TNSM.2026.3747311
Martha Cash, Charlotte Fowler, Alexander M. Wyglinski	On the Role of Time Series Clustering in Traffic Matrix Prediction	2026	Early Access	Fluid flow Timing Modeling	This paper analyzes the role of time-series clustering in traffic matrix (TM) prediction. Traffic flows within a TM often exhibit heterogeneous behavior, which can reduce the effectiveness of global forecasting models that predict all flows jointly. To address this, we propose a clustering-based prediction framework that groups flows into smaller subsets and trains separate predictors for each group. We evaluate four traffic-flow representations for clustering, namely histogram, autocorrelation function (ACF), power spectral density (PSD), and naïve partitioning, and analyze how both the representation choice and the number of clusters affect prediction performance. Experiments using the publicly available Abilene and GÉANT datasets show that clustering consistently improves over global forecasting baselines, while remaining substantially less costly than local prediction. The results further show that most of the performance gain is achieved at moderate values of K, with diminishing returns as the number of clusters increases. Although different clustering representations produce different partitions of the traffic flows, they often achieve similar root mean squared error (RMSE). This suggests that the main benefit of clustering lies in decomposing the TM prediction task into smaller subproblems, while the exact cluster structure plays a more limited role in determining overall prediction accuracy.	10.1109/TNSM.2026.3747898
Qaisar Ali, Ihsan Ullah, Youn-Hee Han	Topology-Preserving Virtual Network Embedding Using Persistent Homology and Graph Attention Reinforcement Learning	2026	Early Access	Substrates Topology Joining processes	Virtual Network Embedding (VNE) maps virtual network requests (VNRs) onto shared substrate networks while satisfying node, link, and service constraints. Existing VNE methods mainly optimize resource-centric objectives such as CPU utilization, bandwidth consumption, acceptance ratio, and revenue, but often treat structural service patterns as implicit connectivity requirements. However, patterns such as redundancy loops, hierarchical aggregation, centralized control, and fault-tolerant structures may encode critical service logic, and their degradation can reduce reliability and violate service-level guarantees. This paper proposes TP-VNE, a topology-preserving and pattern-aware VNE framework that integrates persistent-homology-assisted structural characterization, graph attention-based representation learning, and proximal policy optimization. Persistent homology extracts multi-scale topological signatures from VNRs and substrate candidate regions, while complementary graph features distinguish acyclic structures such as stars and trees. A graph attention network learns topology-aware node embeddings by combining resource and structural features, and a PPO agent performs sequential node and link mapping under feasibility-aware action masking. Finally, a topology verification module validates the path-induced embedded subgraph before resource commitment. Simulation results show that TP-VNE improves the acceptance ratio from 48.5% to 83.5% at λarr = 0.20 and increases long-term average revenue from 2,780 to 4,980 compared with Baseline PPO, while achieving 89.3% pattern preservation accuracy with acceptable embedding overhead. Scalability experiments on GT-ITM substrates with up to 1000 nodes further demonstrate the robustness of TP-VNE under increasing network size.	10.1109/TNSM.2026.3744368
Aymen Daoud, Md. Zoheb Hassan, Georges Kaddoum	SpectraTwin: Generative Intelligence-Powered Digital Twin for Dynamic Spectrum Awareness	2026	Early Access	Modeling Radio frequency Labeling	Spectrum monitoring and classification under evolving RF spectrum landscapes are key enablers of spectrum awareness for dynamic spectrum management and interference detection in 6G networks. Although artificial intelligence (AI) and machine learning (ML) techniques have shown promising performance in spectrum classification, most existing models are static, non-generative, and optimized for specific training environments. As a result, channel distribution shifts, model brittleness, and the scarcity of labeled RF data for fine-tuning AI/ML models lead to significant performance degradation in evolving RF spectrum landscapes. In this context, digital twin (DT) provides a promising approach by maintaining a virtual representation of the RF spectrum environment that supports what-if analysis, data generation, and iterative model updates. In this paper, we propose SpectraTwin, a multi-AI-enabled, adaptive, and self-evolving DT framework for multi-timescale spectrum classification under evolving RF spectrum states and incrementally increasing task complexity. SpectraTwin integrates three tightly coupled modules: (i) a Dynamic Mask Generative Adversarial Network (GAN) that serves as the virtual replica of the RF spectrum environment, synthesizing realistic, classand channel-conditioned spectrograms on demand to mitigate RF data scarcity; (ii) a continual learning-based spectrum classification model that incrementally adapts to evolving RF environments while preserving prior knowledge; and (iii) an active-learning-inspired orchestration module that decides when to adapt, which classes to synthesize, and which exemplars to retain, so that model updates are performed in response to detected change rather than on a fixed retraining schedule. By jointly combining generative, continual, and active learning, SpectraTwin enables robust spectrum awareness through (a) faithful emulation of RF spectrum evolution, (b) detection of domain distribution shifts, and (c) efficient incremental adaptation under non-stationary conditions while maintaining a favorable balance between accuracy and forgetting. Simulation results on both custom dynamic RF datasets and multiple benchmark datasets (consisting of simulated and real-world signal captures) show that SpectraTwin achieves superior adaptability and classification performance compared with existing approaches.	10.1109/TNSM.2026.3743810
Taylor Henderson, Eric Osterweil, Pavan Dinesh, Robert Simon	Scalable and Robust User Deobfuscation using Pattern of Life	2026	Early Access	Modeling Timing Privacy	Online message boards have become increasing popular with cyber criminals and those wishing to conduct illegal acts. They are used in coordinating drug/human trafficking, terrorist activity, and distributing information from data breaches to name a few. We provide a novel method for deobfuscating message board users: Deobfuscating Using Patterns of Life (DUPOL). DUPOL uses a novel technique to take advantage of system artifacts arising from the proliferation of Public DNS. DUPOL is validated on a test bed which accurately maps the Internet to different information scopes. This provides an understanding of how DUPOL would perform if it was performed by different entities on the Internet. DUPOL is shown to be able to correctly identify message board users even when users employ privacy preserving technologies using only observable network traffic and without the need to decrypt any information. Additionally, DUPOL is shown to be robust to missing data and scalable using a novel decomposition of the NCC which removes the need for pairwise comparison.	10.1109/TNSM.2026.3744089
Stefano Servillo, Pietro Spadaccino, Marta Burocchi, Stavros Konstantaras, Flavio Luciani, Francesca Cuomo	AS-SETs Are Not Enough: From IRR Filtering Failures to Stateful Validation in IXP Route Servers	2026	Early Access	Filtering Filters Border Gateway Protocol	Internet Exchange Points (IXPs) provide critical infrastructure for Autonomous Systems (ASes) to interconnect and exchange traffic efficiently. To support scalable peering, IXPs use Route Servers (RSes), which allow ASes to exchange routes with multiple peers through a single Border Gateway Protocol (BGP) session. However, BGP’s implicit trust model exposes inter-domain routing to misconfigurations and threats. IXPs mitigate this through filtering techniques leveraging Resource Public Key Infrastructure (RPKI) and Internet Routing Registries (IRRs), which rely on AS-SET objects. However, improper AS-SET validation may lead to incorrect filtering of both invalid and valid announcements. In this paper, we characterize such vulnerabilities and show that they enable prefix hijacking through IXPs as well as the rejection of RPKI-valid announcements. Based on public internet data, we analyze AS-SET content quality, which could exacerbate both vulnerabilities. Moreover, we quantify them using one month of real-world routing data from the RSes of two European IXPs, NAMEX and AMS-IX, identifying 17,721 unauthorized announcements accepted and 294,112 RPKI-valid announcements rejected, and assess their presence across IXPs worldwide. Guided by these findings, we design a mitigation strategy consisting of a stateful validation pipeline that conditions IRR validation on RPKI and ASPA outcomes. We show how to implement it in practice through OpenBGPD, and we validate it in an emulated IXP topology.	10.1109/TNSM.2026.3745205
Tian-Yu Zuo, Xiuyi Zhao, Pan Li, Junxiong Lin, Mingyi Liu, Jiuchuan Jiang, Gengyu Lyu, Kai Di, Ning Luo	PrivKV-Sched: Budgeted Cross-Tenant KV-Cache Reuse for Multi-Tenant LLM Serving	2026	Early Access	Modeling Pricing Testing	Enterprise LLM services need faster responses and less repeated computation. Shared KV caches store computation results for reuse by later requests with matching input. However, content has different sharing permissions, and maximizing hits alone can permit reuse outside the authorized scope, creating privacy risks. Businesses that explicitly allow limited cross-user reuse also need to control its total amount. We propose PrivKV, which incorporates content permissions and reuse allowances into scheduling. For each request, it checks cached content and jointly selects a worker and reuse length based on saved computation, allowance consumption, and worker load. When spending is high, a dynamic price favors lower-cost reuse. An optional pre-execution check reserves the required allowance, preventing concurrent requests from spending the same balance twice. We compare methods with equal allowances on public request data and disable each control to examine its role. Tests cover different scales and inputs, small optimal solutions, and real GPU execution measuring service performance and scheduling overhead. Budget adjustment reduces unauthorized reuse, while pre-execution checks prevent overspending. With a common replacement rule, PrivKV retains about 96% of unconstrained cache hits. Real-model tests also verify the feasibility of pre-execution checks. For businesses allowing limited cross-user reuse, PrivKV applies content permissions and usage allowances to shared caches, limiting total unauthorized reuse while retaining computational savings.	10.1109/TNSM.2026.3745203
Qing Qian, Longwen Ran, Ruixue Tang, Huan Wang, Hongfa Ding, Yunhe Cui	SATEEN: A Heterogeneous Graph Neural Network for Saturation Attack Detection in SDN	2026	Early Access	Fluid flow Switches Modeling	SDN decouples the control plane from the data plane, enabling flexible network management. However, it is increasingly threatened by saturation attacks that target both switch flow tables and controller resources. Existing attack detection methods often focus on individual flows or network topology alone, neglecting the inherent interdependencies among flows and devices. This limitation can result in incomplete information aggregation and suboptimal detection performance. To address these challenges, we propose SATEEN, a GNN-based saturation attack detection method that leverages a heterogeneous Device-Flow Graph and a novel heterogeneous convolution model, HEGNN. The DevFlow-Graph explicitly models interactions among hosts, flows, and switches, incorporating multiple types of edges to capture structural and semantic relationships. HEGNN partitions the DevFlow-Graph into edge-type-specific subgraphs, computes attention-weighted aggregations within each subgraph, and integrates multi-layer information to generate expressive node embeddings for accurate attack classification. Experiments conducted on both FatTree and Agis topologies, using real-world background traffic, demonstrate that SATEEN significantly outperforms existing methods in detection accuracy and stability across different topologies and traffic patterns.	10.1109/TNSM.2026.3745553
Aleksandar Avdalović, Joseph Khoury, Ibrahem AlJabea, Mustafa Hajij, Elias Bou-Harb	Beyond Flat Models: Preserving ICS Topology using Combinatorial Complexes for Hierarchy-Aware Intrusion Detection	2026	Early Access	Modeling Cells (biology) Integrated circuits	Industrial Control Systems (ICS) follow the Purdue model hierarchy, organizing sensors, actuators, Programmable Logic Controllers (PLCs), and supervisory control into distinct hierarchical layers. Despite this inherent structure, existing data-driven intrusion detectors still fail to model this intricate property. To address this gap, we introduce a Hierarchy-Aware Intrusion Detector, HAID, a topology-preserving framework that models an ICS as a Combinatorial Complex (CC), operating solely on process telemetry and trained on benign traces to detect falsified sensor measurements and unauthorized actuator commands. The complex captures devices, functional interactions, and PLC control zones within an ICS. CCs (unlike flat models) encode telemetry across hierarchical levels for training a Topological Neural Network (TNN). As such, HAID enables the embedding of the ICS Purdue model into the learning process, yielding anomaly scores and localization at each of the aforementioned levels. Evaluated on two water testbeds, SWaT and WADI, and on a simulated chemical process, TEP, HAID achieves competitive detection performance (82.7% F1 on SWaT and 50.1% on WADI, averaged over five runs), while providing explicit hierarchical localization unavailable in prior work. Through ablations, we confirm the added-value of hierarchical modeling, as removing the PLC-zone representation reduces F1 by 5.8 percentage points on SWaT and causes detection on WADI to collapse. The largest losses are on attacks that manipulate several devices at once, which device- and interactionlevel signals usually miss.	10.1109/TNSM.2026.3746967