TNSM Searchable Index

Author(s)	Title	Year	Publication	Keywords
Pingping Dong, Liying Chen, Xuan Yao, Kai Wang, Lianming Zhang, Jiawei Huang	Fumer: Proactive Time-Shifting for Synchronized Periodic Traffic in Distributed Training	2026	Early Access	Training Timing Modeling	The growth of distributed training models, with parameters now reaching the billion-scale, has shifted the system bottleneck from computation to communication. While Remote Direct Memory Access (RDMA) is widely deployed to improve network performance by circumventing the kernel mechanism, the synchronization-computation cycles under the synchronous parallel mode introduce a highly synchronized and periodic “on-off” bursty traffic pattern, which poses significant challenges to data center networking. Consequently, distributed training suffers from two critical bottlenecks: instantaneous congestion during communication and persistent link idleness during computation. These issues lead to severe bandwidth contention and resource underutilization, ultimately hindering overall training efficiency. To address these challenges, this paper proposes Fumer, a proactive periodic traffic optimization framework that shifts the congestion control paradigm from reactive rate adjustment to proactive time-shifting. Specifically, Fumer leverages In-band Network Telemetry (INT) and Fast Fourier Transform (FFT) with signal-wave separation to decompose interleaved traffic signals, aiming to overcome the lack of periodic awareness. Furthermore, Fumer employs an off-peak transmission optimization algorithm to calculate optimal time-shift values, thereby tackling synchronized congestion and link idleness. By executing proactive off-peak scheduling, Fumer shifts overlapping communication windows into idle periods to smooth traffic peaks in the time domain. Experimental results show that Fumer boosts average path throughput across all workloads to 86.3 Gbps, improving upon DCQCN (42.6 Gbps) by 102.6% and RECC by 22.1%. Furthermore, it reduces the average and 99.9th-percentile iteration times by up to 25.0%-45.4% and 25.5%-49.3%, respectively, demonstrating its efficacy and robustness across diverse large-scale training workloads.	10.1109/TNSM.2026.3728016
Deemah H. Tashman, Soumaya Cherkaoui	Trustworthy AI-Driven Dynamic Hybrid RIS: Joint Optimization and Reward Poisoning-Resilient Control in Cognitive MISO Networks	2026	Early Access	Reconfigurable intelligent surfaces Reliability Optimization	Cognitive radio networks (CRNs) are a key mechanism for alleviating spectrum scarcity by enabling secondary users (SUs) to opportunistically access licensed frequency bands without harmful interference to primary users (PUs). To address unreliable direct SU links and energy constraints common in next-generation wireless networks, this work introduces an adaptive, energy-aware hybrid reconfigurable intelligent surface (RIS) for underlay multiple-input single-output (MISO) CRNs. Distinct from prior approaches relying on static RIS architectures, our proposed RIS dynamically alternates between passive and active operation modes in real time according to harvested energy availability. We also model our scenario under practical hardware impairments and cascaded fading channels. We formulate and solve a joint transmit beamforming and RIS phase optimization problem via the soft actor-critic (SAC) deep reinforcement learning (DRL) method, leveraging its robustness in continuous and highly dynamic environments. Notably, we conduct the first systematic study of reward poisoning attacks on DRL agents in RIS-enhanced CRNs, and propose a lightweight, real-time defense based on reward clipping and statistical anomaly filtering. Numerical results demonstrate that the SAC-based approach consistently outperforms established DRL base-lines, and that the dynamic hybrid RIS strikes a superior trade-off between throughput and energy consumption compared to fully passive and fully active alternatives. We further show the effectiveness of our defense in maintaining SU performance even under adversarial conditions. Our results advance the practical and secure deployment of RIS-assisted CRNs, and highlight crucial design insights for energy-constrained wireless systems.	10.1109/TNSM.2026.3660728
Bita Fatemipour, Zhe Zhang, Marc St-Hilaire	Adaptive Routing Optimization with Cost and Deadline Awareness Using Hierarchical Deep Reinforcement Learning	2026	Early Access	Costing Costs Routing	Timely and cost-efficient data transfers in large-scale networks remain challenging due to diverse topologies, non-uniform pricing models, and variable traffic demands. Existing literature often relies on multi-objective optimization, employing heuristic methods to reduce computational complexity; however, these approaches typically assume stable or predictable demand and struggle to scale effectively. Reinforcement Learning (RL) has been explored for its adaptability, yet many RL-based methods remain single-objective or topology-agnostic. This paper introduces CD-DRL, a hierarchical Deep RL framework that jointly optimizes transmission cost and deadline satisfaction, two objectives that often conflict in large-scale networks, through two cooperative agents. A routing agent, built on a Graph Neural Network, selects paths over a structured, multi-binary action space, enabling topology-aware routing across varying network scales and demand patterns. An adaptive tuning agent observes network state and recent performance to dynamically adjust the cost-deadline tradeoff to best fit current conditions. This hierarchical design allows CD-DRL to respond to dynamic network events such as congestion and bandwidth fluctuations, where no single fixed tradeoff remains optimal. We validate CD-DRL through extensive experiments on diverse backbone topologies and request distributions under static and time-varying network conditions. Compared with a state-of-the-art GNN-based RL method and traditional heuristics, CD-DRL improves the deadline-met ratio by up to 25% while maintaining competitive total cost and demonstrating strong scalability. Additionally, CD-DRL achieves faster execution time than mathematical optimization baselines, enabling high-throughput, latency-sensitive routing in dynamic environments.	10.1109/TNSM.2026.3731031
Muhammad Muhammad Bala, Abdullahi Uwaisu Muhammad, Kamaluddeen Ibrahim Yarima, Aseel Smerat, Mulikatu Yakubu Ibrahim, Safiyanu Yahaya, Hamza Adamu	Isolation and Optimization Cost of Service-based Radio Access Network Slicing: A Smart-Contract-Based Approach	2026	Early Access	Network slicing Smart contracts Radio access networks	The service-based Radio Access Network (RAN) slicing enabled via Software Defined Networking (SDN) and Network Function Virtualization (NFV) can support diverse service requirements and address the rapid data traffic growth from both the vertical industry and the Internet of Things (IoT). However, network slice isolation and resource sharing between slices should be be improved for future wireless network requirements. Firstly, this paper address the isolation enhancement of future wireless networks through Blockchain-Smart-Contract, by creating two smart-contract-based access control to secure access to different service-based RAN applications and secure the sharing of resources. These contract are Verification and Authorization Contract (VAC), as well as Misconduct and Revocation Contract (MRC). The proposed framework is designed to support key 6G service classes, such as enhanced Mobile Broadband (eMBB) and ultra-Reliable Low-Latency Communications (uRLLC), enabling high data rates and low-latency communication. Secondly, to ensure the servicebased RAN achieves better isolation the optimization goal is to minimize the deployment cost to obtain the best deployment scheme. Hence, we divide the service-based RAN slice isolation deployment problem into two sub-problems, i.e., service-based RAN slice isolation and slice deployment problem, by formulating a Mixed Integer Linear Programming (MILP) model to minimize the deployment cost. Finally, to verify the feasibility of the design implementation an experimental platform is built and the results show the architecture achieves isolation enhancement through smart-contract and reduces the deployment cost by 78% and improve the isolation performance by 93% compared to the Blockchain-enabled Network Slice (BcNS) and the service-based RAN.	10.1109/TNSM.2026.3732250
Marco Garofalo, Luca D’Agati, Laura García, Rafael Asorey-Cacheda, Antonio-Javier Garcia-Sanchez, Joan Garcia-Haro, Antonio Puliafito, Giovanni Merlino, Francesco Longo	Trustless SLA Enforcement and Roaming in LoRaWAN through Smart Contracts	2026	Early Access	Roaming Service level agreements LoRaWAN	LoRaWAN is widely used for Internet of Things (IoT) services that require long-range, low-power wireless connectivity. As deployments grow, roaming between different network operators becomes increasingly important to maintain service continuity for mobile IoT devices. In practice, however, roaming still depends on bilateral agreements and trusted intermediaries, which limit scalability and reduce transparency in multi-operator settings. This work introduces a blockchain-based roaming architecture that uses Algorand smart contracts to automate Service Level Agreement (SLA) management between providers. The system supports dynamic roaming agreements, immutable packet accounting, and transparent settlement. In our system, the enforced guarantee concerns forwarding-level service quality at the roaming interface, namely payment conditional on observed delivery ratio, rather than deterministic radio-layer latency or jitter guarantees. We implemented the full infrastructure, including a custom Gateway Bridge that extracts the Network Identifier (NetID), a blockchain service that interacts with Algorand smart contracts for SLA validation, and a decentralized provider catalog for operator discovery. We evaluated the system on a testbed with production-grade ChirpStack network servers and compared it with our previous non-blockchain implementation. Both versions achieve comparable throughput (5800–5900 packets/minute with 1000 devices) and maintain 99% packet forwarding efficiency. Blockchain integration adds measurable overhead, including a forwarding latency overhead in the 400–490 ms range for SLA validation, largely independent of the underlying network delay, but remains acceptable for delay-tolerant IoT services. Overall, the results show that decentralized LoRaWAN roaming can be implemented without breaking compatibility with existing network architectures.	10.1109/TNSM.2026.3734694
Yao Xin, Yuqiao Luo, Shufan Cao, Chongwu Dong, Qingfeng Tan	HBT: A Hybrid Bidding Tree for High-Performance Packet Classification	2026	Early Access	Heterojunction bipolar transistors Trees (botanical) Vegetation	Traditional packet classification algorithms based on decision trees often rely on rule replication to increase lookup speed, which inevitably leads to memory explosion. Conversely, existing zero-replication methods frequently suffer from extreme tree depth and structural fragmentation. To address this dilemma, this paper proposes the Hybrid Bidding Tree (HBT), a high-performance architecture designed to enforce zero-replication while sustaining deterministic lookup throughput. First, HBT employs an Overlap-Aware Rule Decomposition (OARD) framework to proactively isolate topologically entangled rules, purifying the primary geometric space. Second, HBT introduces a dynamic competitive bidding mechanism for tree construction. At each node, a discrete bit-selection path and a continuous range-partitioning path compete to determine the optimal splitting strategy based on local geometric heterogeneity. Finally, to guarantee an O(N) memory boundary, unpartitionable residual rules are assigned to a single-level Onion-Peeling fallback structure, preserving linear memory growth while introducing additional sequential checks in the auxiliary path. Experimental evaluations on ClassBench-ng rulesets containing up to 256k rules demonstrate the efficacy of HBT. Compared with state-of-the-art algorithms such as PT-Tree and TupleTree, HBT achieves the highest lookup throughput across all twelve evaluated rulesets at both the 128k and 256k scales, while maintaining strong memory efficiency and highly competitive construction and update latencies.	10.1109/TNSM.2026.3734240
Chen Jue, Yang Tiancheng, Rao Yirui, Qiu Xihe, Yan Fengting, Chen Shanshan, Jiang Xiaoyan	Snow Ablation Optimization Tackles Controller Placement Problem: Optimizing Propagation Latency and Load Balance in SDN	2026	Early Access	Loading Optimization Algorithms	The Controller Placement Problem (CPP) is critical in multi-controller Software-Defined Networking (SDN), as controller placement and switch-controller mapping directly affect propagation latency and load balance. To address this problem, this paper introduces, for the first time, Snow Ablation Optimization (SAO) into CPP and develops three specialized algorithms, namely SAO-RPL, SAO-MLB, and SAO-OMO. SAO-RPL determines controller locations to minimize controller-switch latency, SAO-MLB dynamically adjusts switch-controller mappings to balance controller loads, and SAO-OMO jointly optimizes latency and load imbalance. Experiments on real-world network topologies show that SAO-RPL obtains near-optimal solutions with a maximum error of 0.45% relative to the global optimum and exhibits stable performance over 30 independent runs. SAO-MLB reduces the difference between the maximum and minimum normalized controller loads by at least 49.53% and maintains low run-to-run variability under different numbers of controllers. SAO-OMO reduces load imbalance by up to 36.57% while limiting the maximum latency increase to 1.34%, demonstrating an effective trade-off between propagation latency and load balance.	10.1109/TNSM.2026.3733376
Wei Zhang, Shiyun Xiong, Yixin Li, Yan Lei, Hongyi Li	TCAA: An Efficient Blockchain Consensus Based on Transaction Collector and Address Aggregation for UAV Ad Hoc Networks	2026	Early Access	Synchronization Probability Autonomous aerial vehicles	Blockchain technology provides a promising solution to data security and trust challenges in UAV ad hoc networks. However, conventional consensus mechanisms suffer from notable inefficiencies in resource-constrained environments, characterized by high computational and communication overhead, and prolonged consensus latency. To address these limitations, this paper proposes a blockchain consensus mechanism based on Transaction Collector and Address Aggregation (TCAA) for UAV ad hoc networks. We introduce a block proposal algorithm using a transaction collector, which dynamically assigns block proposal rights through a difficulty threshold. This threshold is defined by transaction types and quantities, thereby eliminating dependence on hash competition or voting verification. The block proposal algorithm operates in parallel with the gossip protocol, ensuring randomness in mempool transactions and unpredictability in proposer selection. Moreover, TCAA incorporates an encrypted address aggregation and recognition scheme to accelerate block synchronization. This scheme allows the block sender to proactively discern the state of the receiver’s mempool, which substantially reduces communication rounds and message redundancy across the network. We model the message synchronization process using a two-dimensional Markov chain and derive closed-form expressions for the end-to-end latency, bandwidth consumption, consensus latency, and transaction collection rounds. Experimental results demonstrate that for a block containing 1000 transactions and a RTT of 50 ms, TCAA reduces the end-to-end latency by 29.7%, 25.3%, and 22.9% compared to Compact, Graphene, and XThin, respectively, while achieving a communication complexity of 2n.	10.1109/TNSM.2026.3732846
Xiaodi Wang, Yunwei Dong, Weizhi Meng, Meng Li, Yining Liu	Dropout-Tolerant Privacy-Preserving Aggregation for Federated Mobile Crowdsensing	2026	Early Access	Modeling Privacy Internet of Things	Federated Learning (FL) has emerged as a key enabler for privacy-preserving, decentralized sensing systems, giving rise to Federated Mobile Crowdsensing (F-MCS). A well-known bottleneck in such systems is the inefficiency of synchronous training, which stalls for all participants and is susceptible to stragglers in heterogeneous environments. Although asynchronous FL methods have been explored to alleviate this, they often introduce the critical issue of stale updates, which can degrade model convergence and accuracy. To simultaneously address the challenges of efficiency, staleness, and robustness, this paper proposes a novel Dropout-Tolerant Privacy Aggregation (DTPA) scheme for FL that operates without a trusted third party (TTP). Our solution leverages the distributed decryption feature of the lifted EC-ElGamal cryptosystem to enable secure, decentralized model aggregation. We further introduce an efficient worker selection algorithm to systematically reduce waiting time. Moreover, a dedicated dropout-tolerant mechanism is developed to maintain protocol execution even under a high rate of client failures, thereby enhancing robustness. Security analysis confirms that our scheme fulfills essential privacy and security requirements. Extensive simulations demonstrate that the proposed DTPA scheme significantly improves training efficiency and convergence stability compared to state-of-the-art methods, while remaining practical for deployment on resource-constrained mobile devices.	10.1109/TNSM.2026.3732465
Ren-Hung Hwang, Jiao-Chuan Huang, Yuan-Cheng Lai, Ying-Dar Lin	Reinforcement Learning Meets LLM Honeypots: A MITRE Engage–Aligned Approach	2026	Early Access	Large language models Modeling Training	The growing sophistication of cyberattacks, accelerated by large language models (LLMs), highlights the limitations of traditional honeypots, which often lack realism, require heavy maintenance, and rely on static deception strategies. Recent LLM-based honeypots generate fluent, context-aware responses but cannot adapt to evolving attacker behavior, limiting long-term effectiveness. This work presents an adaptive honeypot that integrates reinforcement learning (RL) with LLM-generated deception, aligning state, reward, and action spaces with the MITRE ATT&CK and MITRE Engage frameworks. A finetuned LLM infers attacker tactics, techniques, and procedures (TTPs) from live command sequences, providing semantically rich states for the RL agent, which then selects context-sensitive actions from Engage’s Affect strategies to guide adversaries toward deeper and higher-value engagement. Evaluated on Linux and Windows testbeds, the system achieved a 23% increase in cumulative engagement reward on Windows over a non-RL baseline (p < 0.001). Ablation over five random seeds shows that replacing the learned policy with random action selection over the same action space collapses attack depth from 9.52 to 4.25 on Linux (p < 0.001), confirming that the learned policy, not the action space alone, drives engagement. Intent analysis accuracy improved by 55 percentage points relative to a rule-based baseline (Wazuh), and LLM-generated responses fell within 10 percentage points of a real system, a substantially smaller gap than Cowrie, an ordering confirmed by an independent cross-family judge. These results demonstrate that RL-driven adaptation, combined with LLM realism and standardized engagement frameworks, enables honeypots that sustain realistic, intelligence-rich interactions and enhance threat analysis without compromising system safety.	10.1109/TNSM.2026.3731455
Vinícius Gruske Domeles, Laura Rodrigues Soares, Jéferson Campos Nobre, Edison Pignaton De Freitas	An Energy Cost-Benefit Analysis of Client-Side VPNs on CPE Devices	2026	Early Access	Energy Licenses Nuclear facility regulation	The reduction of CO2 emissions and conscientious use of energy resources is one of the biggest current challenges. Computer networks and the Internet are no exception to the global necessity of reassessing current energy consumption paradigms, and security mechanisms are some of the most costly in the networking stack. In the other hand, Customer-Premises Equipment (CPE) devices at the edge of the Internet structure play a significant role in service provisioning and securing the connection of the customer. As such, the impact of standard security tools on the energy consumption profile of these devices should be studied in depth. In this context, this work evaluates the energy cost-benefit of client-side Virtual Private Networks (VPNs) implemented on commercial CPE devices. Through experimental measurement and precise instrumentation, both energy consumption and network performance across different traffic profiles are analyzed. The main finding is that the use of VPNs can reduce the energy efficiency of the CPE per megabyte transferred by half, even under moderate load, highlighting a significant energy overhead imposed by security mechanisms on edge devices. Furthermore, the study shows that the most suitable protocol depends directly on scenario-specific requirements. Finally, the study proposes comparative metrics, a device-protocol calibrated model and presents the future directions for assessing the energy impact of Software-Defined Wide Area Network (SD-WAN) architectures.	10.1109/TNSM.2026.3733609
José Antonio Pastor Valera, Martin Husák, Jesús García Rodríguez, Jorge Bernal Bernabé, Antonio Skarmeta	Real Time Cyber Situational Awareness for 6G Networks Leveraging Spatial Metrics	2026	Early Access	Modeling Timing Fluid flow	The dynamic and heterogeneous nature of 6G networks demands continuous, real-time cyber situational awareness (CSA) to support cognitive security operations such as behavior analysis, threat hunting, and adaptive defense. Traditional CSA frameworks like CRUSOE capture structural and mission-level data but cannot process the dynamic, high-frequency telemetry typical of 6G environments. This paper presents the Extended Infrastructure and Service Information Model (EISIM) and its implementation within a Cyber Situational Awareness Platform (CSAP) designed for real-time, context-aware security management. CSAP aggregates and models data from diverse sources into a unified graph representing assets, flows, services, and vulnerabilities, enabling continuous assessment of operational and security posture. The platform introduces novel spatial risk metrics, including Flow Load Centrality and Operational Risk Centrality, which integrate topological position, traffic intensity, vulnerability exposure, and resource capacity to quantify risk, exposure, and criticality. By combining workflow-driven data collection with real-time spatial analytics, CSAP enhances situational awareness and decision-making within 6G Security Operation Centers (6G-SOCs), enabling proactive identification of critical network elements and improved resilience through cognitive, data-driven management.	10.1109/TNSM.2026.3734629
Larisa-Mihaela Tufeanu, Marius-Constantin Vochin, Frank Y. Li	Residual Artifact Governance With ML-Enabled Garbage Collection Prediction in Kubernetes-Based 5G/6G Service-Based Architecture	2026	Early Access	Management Retrieval augmented generation Monitoring	The evolution of the service-based architecture (SBA) requires cloud-native core networks, and its open and modular design nature makes Kubernetes the most eminent platform for SBA implementation. One critical-yet-underexplored issue when deploying the SBA based on Kubernetes is the accumulation of residual artifacts that persist and degrade observability and stability inside Kubernetes clusters. In this paper, we propose residual artifact governance (RAG), a non-intrusive add-on module to the SBA that enforces bounded garbage collection (GC) policies without modifying the underlying architecture. The module follows a master–agent structure: a GC-master derives data-driven machine learning-enabled cleanup policies using the GC data provided by GC-agents, while GC-agents co-located at each network function execute deterministic, auditable cleanup actions. As a proof-of-concept demonstration, we implement a Kubernetes-based prototype to validate the operability and feasibility of RAG. While a machine learning predictor located at the GC-master provides early warning signals on time-to-collapse caused by the accumulation of residual artifacts, periodic fractional cleanup actions at GC-agents keep residual peaks bounded under both nominal and stress leak regimes. Results reveal that the accumulation of residual artifacts can be measured, predicted, and controlled using Kubernetes-native mechanisms through our RAG enhancement while remaining compatible with 3GPP-aligned observability and stability assurance principles.	10.1109/TNSM.2026.3734448
Yifan Yang, Xionglve Li, Sizhuang Wu, Zhihuang Liu, Bo Yu, Bingnan Hou, Zhiping Cai	TracerForests6: Efficient IPv6 Alias Resolution via Traceroute Path Expansion	2026	Early Access	Probes Seeds (agriculture) IP networks	In recent years, IPv6 networks have seen rapid global deployment. Router-level topology is essential for understanding network structure and supports performance monitoring, security analysis, and fault diagnosis. A key step is alias resolution, which maps multiple IP addresses to the same router so that observed interface addresses are correctly attributed. However, the vast IPv6 address space presents new challenges for topology discovery. Traditional IPv4 approaches rely on exhaustive collection of router interface addresses followed by alias resolution. Many IPv6 methods inherit this approach and suffer poor scalability, limited efficiency, and reduced coverage at IPv6 scale. In this work, we present TracerForests6, a heuristic and efficient method for IPv6 alias resolution. It continuously discovers alias pairs across the network starting from high-confidence initial seed pairs. It analyzes traceroute paths to the initial set to identify candidate pairs from path characteristics, and a random forest trained on multidimensional path features validates them. In our evaluation on CAIDA ITDK and two RIPE Atlas traceroute snapshots, using the initial seed construction and 14-vantage-point probing configuration adopted in this work, TracerForests6 expands the identified alias set to 1.78× the corresponding initial seed set while maintaining an alias-pair identification accuracy of 96.85%. To facilitate reproducibility and follow-up research, we will release a set of public resources related to TracerForests6, including the implementation and measurement artifacts, which can support further IPv6 topology analysis.	10.1109/TNSM.2026.3731850
Francisco Muro, Eduardo Baena, Tomaso De Cola, Sergio Fortes, Raquel Barco	AI-Driven Optimization of Virtual Network Function Allocation in 6G Non-Terrestrial Networks	2026	Early Access	Resource management Optimization Satellites	The integration of 6G technologies into Non-Terrestrial Networks (NTNs) raises a fundamental orchestration problem: how to allocate Virtual Network Functions (VNFs) across satellite and terrestrial domains under tight onboard resource constraints and a continuously changing topology. The virtualized 6G Open Radio Access Network (O-RAN) paradigm makes it possible to run 5G software stacks on Software-Defined Radios (SDRs) based on General Purpose Processors (GPPs), but it also turns VNF placement into a high-dimensional, multi-objective decision that static heuristics and model-based formulations struggle to capture. This paper addresses that gap by introducing an AI-driven VNF allocation framework for 6G-NTN environments built on an O-RAN-based distributed architecture and orchestrated on top of Kubernetes. The VNF allocation problem is formalized for a multi-domain 6G-NTN scenario with constrained satellite resources, and a measurement-based test campaign is designed to characterize the emulated platform in terms of virtual resource utilization and end-to-end performance. The framework couples tree-based machine learning predictors with a gradient-free optimizer to reach the optimal feasible allocation, outperforming two heuristic baselines drawn from the VNF placement literature by reducing the service RTT by up to 39% and delivering up to 3× higher YouTube DL throughput with respect to the best feasible heuristic. Beyond these gains, the proposed framework establishes a measurement-driven, reproducible methodology for VNF allocation in 6GNTN scenarios, demonstrating that AI-driven orchestration can systematically uncover non-obvious resource configurations that purely analytical or static approaches consistently miss.	10.1109/TNSM.2026.3724474
Martine S. Lenders, Carsten Bormann, Thomas C. Schmidt, Matthias Wählisch	A Leaner and Faster Web: How CBOR Can Improve Dynamic Content Encoding in JSON and DNS over HTTPS	2026	Early Access	Internet of Things Encoding Internet	The Internet community has taken major efforts to decrease latency on the World Wide Web with significant improvements in accelerating content transport and in compressing static content. Less attention, however, has been dedicated to compression of dynamic content. Such content is commonly provided by JSON and DNS over HTTPS. Dynamic content objects continue to grow in size, which increases latency and fosters the digital inequality. In this paper, we propose to mitigate this increase by utilizing Concise Binary Object Representation (CBOR), a standard originally designed for the constrained Internet of Things (IoT) to restrict packet sizes and enable efficient encoding of data objects. We provide protocol design and three new data sets for the evaluation of dynamic content, DNS, and the loading of websites. Our key findings are the following: (i) Switching the data representation from JSON to CBOR reduces data by up to 80%. This size reduction can decrease loading times by up to 13.8% when downloading large objects—even in local setups. (ii) Enabling CBOR for DNS over HTTPS (DoH) and DNS over CoAP (DoC) reduces packet sizes significantly. Compressing only names combined with unpacked CBOR achieves maximum gain of 52.2%, using more complex but still lightweight Packed CBOR allows minimizing packets by up to 95.5%. Our lean decoder for name compression can fit into as little as 314 bytes of build size. Our results clearly show the potential of CBOR outside of IoT scenarios. Parts of this research have already influenced work within the IETF.	10.1109/TNSM.2026.3722114
Wei Sai, Yihui Lu, Xin Guo	A Privacy-Preserving Security Framework for Multi-Party Data Fusion Computing Based on Homomorphic Encryption	2026	Early Access	Security Protocols Information rates	To prevent plaintext exposure in multi-party collaborative computing, this paper proposes a distributed secure multi-party computation protocol based on the Cheon-Kim-Kim-Song (CKKS) homomorphic encryption scheme. Data is encoded and encrypted at the source into CKKS complex polynomial ciphertext, enabling vectorized fusion under shared evaluation keys and threshold decryption in a decentralized architecture without a trusted central authority. Experiments on heterogeneous multi-institution datasets demonstrate low numerical error (9.0×10⁻⁷ at polynomial order 2¹⁶ and depth 12), effective scalability (throughput increasing from 1.12×10⁵ to 1.32×10⁵ ops/s and latency decreasing from 56 ms to 38 ms as nodes scale from 4 to 16), and strong robustness (70% decryption success at a 60% threshold and 95% recovery under malicious interference), showing that the framework achieves efficient computation with strict privacy protection for cross-party data fusion.	10.1109/TNSM.2026.3717343
Soonbeom Kwon, Yusu Noh, Youngwoo Jang, Illyoung Choi, Byungchul Tak, In-geol Chun, Young-Kyoon Suh	Scalable and Robust Resource Provisioning via Adaptive Task Scheduling for Edge Devices	2026	Early Access	Schedules Scheduling Cloning	Edge devices, such as wearables, drones, and CCTV systems, are vital for real-time data collection in urban intelligence. However, their limited computational and storage capacities pose significant challenges. While offloading to public clouds offers scalability, it often incurs high latency and operational costs. Conversely, centralizing workloads on edge servers may result in the underutilization of high-performance edge devices. To address these limitations, we introduce ERPF, a Kubernetes-based Edge Resource Provisioning Framework that augments the capabilities of heterogeneous edge environments. ERPF orchestrates dynamic volume provisioning, GPU-aware resource allocation, execution context migration, and adaptive task distribution to improve system flexibility and efficiency. Building on this, we propose a novel adaptive task scheduling technique, termed eATS, composed of three key mechanisms: (i) Partition Smoothing Scheme for stable task granularity control, (ii) Resilient Edge Reintegration for failure detection and task reassignment, and (iii) Competitive Task Cloning for speculative execution with fastest-result commitment. The proposed eATS scheme reduces task execution time by up to 27.6%, lowers partition size variability by 8.7×, and improves scheduling robustness across heterogeneous edge devices over the baseline.	10.1109/TNSM.2026.3694238
Jing Zhang, Chao Luo, Rui Shao	MTG-GAN: A Masked Temporal Graph Generative Adversarial Network for Cross-Domain System Log Anomaly Detection	2026	Early Access	Anomaly detection Adaptation models Generative adversarial networks	Anomaly detection of system logs is crucial for the service management of large-scale information systems. Nowadays, log anomaly detection faces two main challenges: 1) capturing evolving temporal dependencies between log events to adaptively tackle with emerging anomaly patterns, 2) and maintaining high detection capabilities across varies data distributions. Existing methods rely heavily on domain-specific data features, making it challenging to handle the heterogeneity and temporal dynamics of log data. This limitation restricts the deployment of anomaly detection systems in practical environments. In this article, a novel framework, Masked Temporal Graph Generative Adversarial Network (MTG-GAN), is proposed for both conventional and cross-domain log anomaly detection. The model enhances the detection capability for emerging abnormal patterns in system log data by introducing an adaptive masking mechanism that combines generative adversarial networks with graph contrastive learning. Additionally, MTG-GAN reduces dependency on specific data distribution and improves model generalization by using diffused graph adjacency information deriving from temporal relevance of event sequence, which can be conducive to improve cross-domain detection performance. Experimental results demonstrate that MTG-GAN outperforms existing methods on multiple real-world datasets in both conventional and cross-domain log anomaly detection.	10.1109/TNSM.2026.3654642
Franck Messaoudi, Luhan Wang, Abdelkader Mekrache, Adlen Ksentini, Bingxuan Li, Jialei Su, Sofiane Messaoudi, Salim El Ghalbzouri	The Brewing Storm in 5G’s Data Plane: Design and Evaluation of a High-Performance eBPF/XDP-Based User Plane Function	2026	Early Access	Quality of service Fluid flow Kernel	This paper presents the design and implementation of a novel 5G UPF leveraging eBPF technology to meet the stringent performance and programmability requirements of emerging 6G systems. Traditional UPF implementations often struggle to balance performance, flexibility, and resource efficiency-challenges particularly critical in CPU- and I/O-constrained edge environments. The proposed eBPF-based UPF architecture mitigates these limitations by embedding core functionalities, such as packet classification, forwarding, and QoS enforcement, directly within the Linux kernel via eBPF programs attached through XDP and tc hook points. Performance evaluation using TRex demonstrates that the proposed solution achieves competitive throughput, low packet loss, and efficient CPU utilization across traffic profiles. Moreover, it maintains full compliance with 5G Core Network standards. Comparative analysis with well-established open-source UPF implementations further underscores its advantages. This work highlights the potential of eBPF as a foundational technology for building next-generation, programmable UPFs optimized for edge cloud deployments in the 6G era.	10.1109/TNSM.2026.3720812