Last updated: 2026-11-07 05:01 UTC
All documents
Number of pages: 178
| Author(s) | Title | Year | Publication | Keywords | ||
|---|---|---|---|---|---|---|
| Shengye Gong, Hui Yang, Qiuyan Yao, Xin Li, Tiankuo Yu, Wenxin Liu, Yang Zhao, Yucong Liu, Jie Zhang, Mohamed Cheriet | Resilient Hierarchical Polyhedron-based Configuration Protection for Large-Scale Multi-Domain Optical Networks | 2026 | Early Access | High performance computing Joining processes Protection Topology Costing Optical fiber networks Algorithms Modeling Architecture Computer architecture Network survivability multi-domain optical network network protection hierarchical polyhedron-based protection | Large-scale multi-domain optical networks are increasingly exposed to spatially correlated and concurrent failures, while monolithic pre-configured protection structures incur rapidly increasing global search complexity and protection-resource costs under heterogeneous physical constraints. To address this challenge, this paper proposes a resilient Hierarchical Polyhedron-based Configuration (HPC) architecture that decomposes a monolithic global survivability requirement into adaptive intra-domain connectivity constraints and a compact inter-domain connectivity constraint. To alleviate resource imbalance caused by topology-only network partitioning, a Topology-Resource Aware Domain Partitioning (TRADP) algorithm is developed to construct protection-supportable sub-domains by jointly considering topological structure and physical resource distribution. To avoid imposing a rigid protection level on heterogeneous domains, HPC assigns adaptive intra-domain connectivity targets according to local failure exposure and physical resource supportability. To reduce the complexity of cross-domain protection while preserving physical feasibility, a super-node abstraction and physical bridge-link mapping mechanism is employed to construct the inter-domain protection backbone under capacity, spectrum, and SRLG constraints. Extensive evaluations on networks of up to 1000 nodes and representative GEANT and NSFNET topologies demonstrate that HPC-TRADP maintains a recovery rate of 92.94% at 1000 nodes and 85.82% even when 30% of physical links fail concurrently. It further reduces protection overhead by up to 79.60% relative to p-KECS while maintaining efficient recovery paths, demonstrating a favorable balance between survivability, resource efficiency, and scalability. | 10.1109/TNSM.2026.3750417 |
| Shuang Zheng, Xing Zhang, Michael Sheng, Haixu Wang, Wenbo Wang | Beam Hopping Low Earth Orbit Satellite Resource Allocation for Differentiated Services and Robustness Analysis under Model Attacks | 2026 | Early Access | Beams Satellites Resource management Modeling Optimization Schedules Scheduling Low earth orbit satellites Algorithms Bridges LEO satellite communications deep reinforcement learning digital twin resource allocation adversarial attack | Beam hopping (BH)-enabled Low Earth Orbit (LEO) satellites play a pivotal role in next-generation communication networks, providing global coverage, improving spectrum efficiency, and supporting flexible adaptation to heterogeneous service demands. To fully exploit these capabilities, artificial intelligence (AI) techniques are increasingly employed for dynamic resource allocation and power management. However, limited onboard resources and potential adversarial perturbations pose challenges to both efficiency and robustness. To address these issues, we leverage digital twin technology to accurately capture the spatio-temporal dynamics of user–satellite visibility, providing precise state information for decision-making. Building on this, we formulate a joint optimization framework for BH scheduling and power allocation as a Markov Decision Process and propose the BRIDGE—BH with Reinforcement learning incorporating Integrated Dirichlet and Gumbel-TopK Exploration—which integrates a quality of service (QoS)-driven subchannel scheduling mechanism to ensure efficient and differentiated resource allocation. The model’s robustness is systematically evaluated under three classical adversarial attacks. Simulation results demonstrate that our approach achieves superior energy efficiency, service throughput, and fairness, while the robustness analysis shows stable performance under the considered bounded adversarial perturbations. | 10.1109/TNSM.2026.3710750 |
| Mario Chahoud, Hani Sami, Ahmad Hammoud, Rabeb Mizouni, Hadi Otrok, Jamal Bentahar, Azzam Mourad, Chamseddine Talhi | Multi-agent Deep Reinforcement Learning Scheme for On-Demand Federated Learning | 2026 | Early Access | Modeling Federated learning Training Learning (artificial intelligence) Convergence Accuracy Internet of Things Resource management Servers Optimization Federated Learning Multi-Agent Deep Reinforcement Learning On-Demand Federated Learning Client Selection Mobility-Aware Learning Partially Observable Markov Game Centralized Training and Decentralized Execution Edge Computing | The rapid growth of intelligent IoT devices and mobile edge infrastructures has generated massive decentralized data, necessitating efficient and privacy-preserving learning. Federated Learning (FL) enables distributed model training without sharing raw data; however, its performance degrades in dynamic mobile environments due to unpredictable availability, stragglers, and frequent dropouts. In On-Demand FL, training services and models are deployed only when needed rather than relying on always-active infrastructure, requiring orchestrators to adapt to client arrivals, departures, and mobility while efficiently allocating limited resources and maintaining training continuity. Existing client-selection methods rely on static heuristics or centralized Reinforcement Learning models that struggle to scale and adapt to such dynamics. To address these challenges, we propose a cooperative Multi-Agent Deep Reinforcement Learning (MADRL) framework for client selection in On-Demand FL. Multiple orchestrators act as agents under a Centralized Training and Decentralized Execution (CTDE) paradigm. The problem is formulated as a Partially Observable Markov Game (POMG), capturing mobility, partial observability, and distributed decision-making. A mobility-aware reward integrates accuracy, resource efficiency, and a Useful Handoff Bonus to preserve learning continuity. Containerization further enhances adaptability. Experiments demonstrate faster convergence, improved resource utilization, and enhanced robustness under real mobility traces. | 10.1109/TNSM.2026.3750310 |
| Mona Alghamdi, Atm S. Alam, Asma Cherif | A Context-Aware Action Filter for Deep Reinforcement Learning-Based Task Orchestration in Mobile Edge Computing | 2026 | Early Access | Filtering Servers Filters Learning (artificial intelligence) Delays Modeling Timing Mobile handsets Context-aware services Training Mobile Edge Computing (MEC) task orchestration deep reinforcement learning (DRL) Double Deep Q-Network (DDQN) action filtering action space reduction | The growing complexity and highly dynamic characteristics of Mobile Edge Computing (MEC) environments introduce considerable challenges for Deep Reinforcement Learning (DRL)-based task orchestration. With an increasing number of potential execution nodes, the set of available actions becomes substantially larger, leading to greater exploration complexity and exposing the learning agent to many infeasible or contextually inappropriate decisions. This paper proposes a Context-Aware Action Filter (CAAF) for Double Deep Q-Network (DDQN)-based task orchestration in MEC. CAAF dynamically evaluates candidate edge servers according to task characteristics, resource availability, network conditions, and system context. It combines a composite suitability assessment with an adaptive distribution-aware filtering mechanism that removes less-suitable actions when meaningful differences exist among candidates, while preserving action diversity when their suitability is comparable. The resulting reduced action space is then provided to the DDQN agent for task assignment. Simulation results demonstrate that CAAF-DDQN outperforms conventional DDQN, particularly under high-load conditions, reducing service time and task failure rate by approximately 20.0% and 45.7%, respectively. Scalability experiments with a larger number of edge servers further confirm its effectiveness under enlarged action spaces, achieving reductions of approximately 31.8% in service time and 89.5% in task failure rate without modifying the DDQN architecture or learning hyperparameters. | 10.1109/TNSM.2026.3749201 |
| Qu Wang, Hao Wu, Xin Luo | A Highly Accurate Approach to Dynamic Network Representation Learning Based on Biased Nonnegative Tensor Ring Factorization | 2026 | Early Access | Modeling Tensors Ranking (statistics) Accuracy Learning (artificial intelligence) Timing Representation learning Optimization Costing Elementary particles Network representation learning tensor network high-dimensional and incomplete tensor tensor ring decomposition linear bias | A large-scale dynamic network can be represented as a high-dimensional and incomplete (HDI) tensor, whose numerous entries are missing because it is impossible to acquire all interactions among massive numbers of nodes. Tensor network-based models have emerged as powerful tools for HDI tensor representation learning. Tensor ring (TR) decomposition represents a high-order tensor as a cyclic interconnection of third-order tensors, providing a compact tensor network structure for latent representation learning. However, conventional TR decomposition is designed for complete tensors and thus does not account for the substantial missing data in HDI dynamic networks, while existing TR-based representation learning models also have limited ability to model multidimensional link fluctuations. To address these issues, this work proposes a biased nonnegative tensor ring factorization (BNTRF) model with three main components: a) adopting a data-density-oriented modeling strategy that focuses computation on observed entries, thereby reducing the modeling cost of HDI tensors; b) designing a linear bias mechanism to capture multidimensional link fluctuations, thereby improving model stability and representation accuracy; and c) developing a self-adaptive parameter learning scheme to improve computational efficiency. Experimental studies on six real dynamic networks demonstrate that BNTRF outperforms several state-of-the-art models in learning accuracy while incurring lower computational costs. | 10.1109/TNSM.2026.3748838 |
| Shyam Kumar Shrestha, Shiva Raj Pokhrel, Jonathan Kua | Adapting Large Language Models for TCP Fairness over Wi-Fi | 2026 | Early Access | Large language models TCP Modeling Training Fluid flow Information rates Throughput Wireless fidelity Learning (artificial intelligence) Management Transmission Control Protocol Congestion Control Algorithms Fairness Wi-Fi | Designing Transmission Control Protocol (TCP) Congestion Control Algorithms (CCAs) for heterogeneous Wi-Fi networks remains a challenge due to rapidly varying delay, loss, and contention dynamics. These effects often lead to CCA incompatibility, flow unfairness, and starvation among competing TCP flows. Although Deep Reinforcement Learning (DRL) has shown promise in mitigating these challenges, its slow convergence, high training costs, and limited generalization hinder practical deployments. In this paper, we propose TCP-LLM, a learning-augmented transport framework that leverages Large Language Models (LLMs) for compatibility-aware CCA selection. TCP-LLM encodes multivariate TCP time-series into token embeddings and performs single-step discrete CCA decisions through a lightweight LLM decision head. Parameter-efficient low-rank adaptation (LoRA) reduces the number of trainable parameters by approximately two orders of magnitude. Evaluation using traces collected from a physicalWi-Fi testbed with competing TCP Cubic, Bottleneck Bandwidth and Round-trip propagation time (BBR), and Performance-oriented Congestion Control (PCC) flows shows that TCP-LLM achieves the highest mean, geometric-mean, and minimum per-flow throughput among the evaluated schemes. TCP-LLM also exhibits faster and more stable training convergence and supports low-latency bounded inference. These results demonstrate the feasibility of LLM-based sequence adaptation for compatibility-aware transport-layer supervision under heterogeneous wireless conditions. | 10.1109/TNSM.2026.3739364 |
| Shubhani Aggarwal, Georges Kaddoum | QSB-SHA: Quantum-secured Blockchain for Smart Home Authentication | 2026 | Early Access | Authentication Smart homes Internet of Things Modeling Security Smart devices Measurement Protocols Technology Cryptography Blockchain Quantum Key Distribution GHZ states Smart Homes Mutual Authentication | Today, IoT enables smart home users to remotely connect with household appliances via the Internet. Sensor-equipped smart devices are widely deployed in smart homes to collect and manage information regardless of user location. However, ensuring the secure and private accessibility of these devices in a centralized manner remains a major concern. The emergence of blockchain and quantum computing, with their enhanced information processing capabilities on decentralized platforms, offers a viable solution to this issue. Consequently, there is a need for cryptographic primitives that can withstand both quantum and classical attacks. To address this concern in the present study, we propose a quantum-secured blockchain (QSB) framework for smart home authentication (SHA). The proposed framework employs quantum key distribution (QKD) and maximally entangled states on a decentralized platform to enable secure key distribution and mutual authentication between smart home users and devices. Furthermore, our approach integrates quantum passwords and quantum digital signatures to verify and validate legitimate users, thereby ensuring security and privacy. The framework is simulated using the Automated Validation of Internet Security Protocols and Applications (AVISPA) tool for formal security analysis. We also conduct an informal security analysis and compare the performance of our proposed scheme with that of the previously proposed solutions. The results demonstrate that our framework outperforms existing approaches across various performance evaluation metrics. | 10.1109/TNSM.2026.3747090 |
| Hongyuan Cheng, Lihua Yin, Tianqing Zhu, Hongyu Yang, Dexin Zhu, Weixiang Jiang, Nan Wei | Pattern2Bot: A malicious server IP detection model based on self-trained heterogeneous graph neural network | 2026 | Early Access | Labeling Modeling Signal detection Training Botnet Servers IP networks Sequential analysis Conferences Security Botnet detection Self-supervised Graph neural network Command & Control service | Botnets play a key role in network attacks such as Distributed Denial-of-Service (DDoS) attacks, spamming and click fraud. Command & Control server is an important node for botmaster to control bots and distribute attack commands. Bot disguise as normal domain requests through DNS traffic, but leave malicious records in DNS logs containing client IP, query domain, server IP and other complex interactions. This information provides important clues for detecting those botnets. In the current study, researchers detect botnets through multiple perspectives, including abstracting DNS communication records into graphs and using graph neural network models for detection. Conventional approaches often necessitate massive labeled datasets for model training, which substantially incurs training costs. Moreover, despite enriching node embeddings via topological relations, graph models often suffer performance degradation when confronted with structural semantic obfuscation from evasion techniques like double-flux. In order to understand the abstract and complex relationship patterns in DNS records while reducing label usage to lower training costs, we propose a botnet Command & Control server detection model based on DNS traffic. This is a self-training heterogeneous graph neural network model that does not require a large number of labels. By integrating the high-order relational semantics derived from multiple meta-paths with the local topologies of target nodes, the model achieves finer-grained structural awareness and semantic abstraction, thereby enhancing detection performance. We validate the effectiveness of the model in a real dataset, and the results show that the model has a better understanding of the special structure possessed by the IPs of Command & Control servers. | 10.1109/TNSM.2026.3741111 |
| Ting-Yu Chang, Cooper Cheng-Yuan Ku | Two-tier Framework with AutoML for Detection and Classification of Multiple Types of Anomalies in Intrusion Attacks | 2026 | Early Access | Modeling Optimization Probability Automated machine learning Labeling Training Algorithms Stacking Accuracy Tuning Intrusion Detection Anomaly Classification Cybersecurity Data Imbalance Computational Efficiency Two-tier Framework Machine Learning Probability Stacking Method | Ensuring cybersecurity is paramount for protecting sensitive data and defending against increasingly sophisticated cyberattacks. Consequently, intrusion detection (ID) has become a critical area of research in network security. This paper proposes a two-tier framework that leverages efficient automated machine learning (AutoML) techniques to address data imbalance and optimize feature combinations for ID and classification of multiple types of anomalies. In the first tier, two complementary models are selected: a primary model optimized for overall dataset performance and a secondary model specifically chosen for its effectiveness on balanced data distributions. In the second tier, a probability stacking approach, supported by Out-of-Fold (OOF) cross-validation, integrates insights from the first-tier models. It acts as a binary safety net that successfully recovers rare minority attacks while preventing irreversible information loss. The proposed framework effectively mitigates the adverse effects of data imbalance while requiring only a minimal runtime memory footprint of approximately 44 MB (NSL-KDD) and a total process footprint of 165.52 MB (CIC-IIoT-2025), and achieves a rapid cold-start initialization of 0.85 seconds. These advantages make it well-suited for edge computing. Experimental results on the NSL-KDD dataset demonstrate that the proposed approach achieves an overall accuracy of 99.73%, outperforming many state-of-the-art methods by 0.4-20.6%. Furthermore, evaluations on the CIC-IDS-2017 dataset show a 6.3% accuracy improvement and a significant 36% increase in macro-average recall compared with a random-forest-only (RF-only) model. Moreover, extensive validation on the contemporary CIC-IIoT-2025 dataset reveals a significant 4.20% improvement in Macro F1-score over up-to-date baselines. Finally, evaluations on an independent set with novel attack types (KDDTest+) confirm strong generalization capability, achieving 77.10% accuracy and underscoring the framework's robustness in modern industrial scenarios. | 10.1109/TNSM.2026.3747311 |
| Yule Han, Kezhi Wang, Yizhe Zhao, Kun Yang | Smart-TCP: An Agentic AI-based Autonomous and Adaptive TCP Protocol | 2026 | Early Access | Modeling Protocols TCP Large language models Arithmetic Context Labeling Sequential analysis History Sequences Agentic AI Large Language Models Small Language Models Network Service Management Transmission Control Protocol (TCP) | The Transmission Control Protocol (TCP) relies on deterministic state machines and sequence-number arithmetic to ensure reliable communication. However, hard-coded protocol logic is difficult to adapt to increasingly complex and dynamic network conditions. This paper proposes Smart-TCP, an agentic AI-based transport protocol framework that organizes TCP control logic as a fast/slow model-assisted decision process. Specifically, a feature-aware classifier routes routine segments to a lightweight Small Language Model (SLM) fast path and anomalous or boundary cases to a Large Language Model (LLM) slow path, while an Arithmetic Logic Unit (ALU) handles deterministic computation of sequence and acknowledgment numbers. A state module maintains connection state, packet history, and key control variables, enabling protocol decisions over the full session context. A scoped Protocol Guard checks candidate decisions against RFC-derived rules before execution. We evaluate Smart-TCP through path classification, atomic packet processing, slow-path anomaly response, and end-to-end session interaction. Experimental results show that Smart-TCP achieves 99.14% action accuracy on 700 slow-path anomaly and fallback samples, and a 100% full-lifecycle success rate over 300 ideal fast-path end-to-end session windows. The ordinary 32-KiB transfer tests achieve a 96.5% completion rate at 20% segment loss. These results suggest that separating model-based protocol decisions from deterministic arithmetic improves the reliability of TCP control for network service operation. | 10.1109/TNSM.2026.3747846 |
| Jian Liu, Jinhong Chen, Eldar Sabanovic, Jinliang Liu, Engang Tian, Oh-Min Kwon | Predictor-Enhanced Constrained Reinforcement Learning for Networked CAV Platoons: A Dual-Redundancy Scheme | 2026 | Early Access | Timing Vehicles Learning (artificial intelligence) Event detection Modeling Titanium Limiting Silicon Vectors Testing Connected and automated vehicles dynamic event-triggered mechanism false data injection attacks model-free reinforcement learning prescribed performance control | This paper investigates resilient tracking control for connected and automated vehicle (CAV) platoons under false data injection (FDI) attacks and prescribed spacing constraints. A kinematics-based state predictor is combined with a dynamic event-triggered mechanism (ETM) to provide smooth trajectories from sparse, FDI-corrupted measurements while reducing communication use. Prescribed performance control (PPC) maps the predicted spacing error into an unconstrained state for continuous-time actor-critic reinforcement learning (RL). The actor-critic controller learns an approximate tracking policy without identifying the unknown nonlinear drift. A locally sensed, saturated proportional-derivative fallback controller can override the learned command when the measured spacing error approaches the prescribed boundary. These two control paths form the dual-redundancy scheme. The analysis excludes finite-time accumulation of triggering instants, establishes input-to-state stability of the prediction-error subsystem, and gives conditional ultimate bounds for the prediction error and sampled adaptive weights under the stated input and approximation-domain conditions. Matched ablations and multi-seed tests evaluate communication use, fallback activation, and the responses to scalar and vector attacks. | 10.1109/TNSM.2026.3748969 |
| Soonbeom Kwon, Yusu Noh, Youngwoo Jang, Illyoung Choi, Byungchul Tak, In-geol Chun, Young-Kyoon Suh | Scalable and Robust Resource Provisioning via Adaptive Task Scheduling for Edge Devices | 2026 | Early Access | Schedules Scheduling Cloning Timing Educational institutions Computers Transcoding Videos Tail Edge computing Edge devices Edge server Resource augmentation Task distribution Kubernetes | Edge devices, such as wearables, drones, and CCTV systems, are vital for real-time data collection in urban intelligence. However, their limited computational and storage capacities pose significant challenges. While offloading to public clouds offers scalability, it often incurs high latency and operational costs. Conversely, centralizing workloads on edge servers may result in the underutilization of high-performance edge devices. To address these limitations, we introduce ERPF, a Kubernetes-based Edge Resource Provisioning Framework that augments the capabilities of heterogeneous edge environments. ERPF orchestrates dynamic volume provisioning, GPU-aware resource allocation, execution context migration, and adaptive task distribution to improve system flexibility and efficiency. Building on this, we propose a novel adaptive task scheduling technique, termed eATS, composed of three key mechanisms: (i) Partition Smoothing Scheme for stable task granularity control, (ii) Resilient Edge Reintegration for failure detection and task reassignment, and (iii) Competitive Task Cloning for speculative execution with fastest-result commitment. The proposed eATS scheme reduces task execution time by up to 27.6%, lowers partition size variability by 8.7×, and improves scheduling robustness across heterogeneous edge devices over the baseline. | 10.1109/TNSM.2026.3694238 |
| Mohammad Saberi, Ali Ahmadi Esfidi, Mahdi Dolati, Naeimeh Omidvar | FlexINA: In-Network Aggregation for Accelerating Distributed Machine Learning with Flexible Routing | 2026 | Early Access | Modeling Switches Timing Routing Machine learning Training Runtime Memory Loading Topology Distributed Machine Learning Programmable Networks In-Network Computing | The growing scale and complexity of modern machine learning (ML) models have rendered distributed training indispensable. However, as model dimensions expand, communication overhead increasingly dominates the overall training time, creating a critical performance bottleneck. While techniques such as gradient compression offer partial relief, they often incur substantial computational overhead or require specialized hardware. In-network aggregation (INA) has emerged as a compelling alternative, offloading partial computations—such as gradient reduction—directly onto programmable network switches. Yet, current INA frameworks predominantly rely on rigid, static routing schemes or uncoordinated, opportunistic aggregation, fundamentally limiting their capacity to exploit the full potential of programmable data planes. To address this limitation, we formulate the Joint Scheduling-Routing for In-Network Aggregation (JINA) problem. JINA introduces a time-slotted execution model to enable fine-grained temporal scheduling synchronously with spatial routing. By leveraging source routing, it dictates perpacket forwarding paths while explicitly coordinating multi-hop partial aggregation across the network. Furthermore, we propose FlexINA, a scalable optimization framework that solves the JINA problem through a three-phase dimensionality reduction strategy: host-level pre-aggregation, topological switch filtration, and temporal window partitioning. Extensive evaluations across fifteen diverse network topologies demonstrate that FlexINA reduces the total network load by up to 8.3% compared to INA baselines, while maintaining high computational efficiency. | 10.1109/TNSM.2026.3740503 |
| Imran Ahmed, Yudai Ogata, Eiji Oki | Multipartite Entanglement Routing Design in Quantum Networks | 2026 | Early Access | Joining processes Trees (botanical) Vegetation Modeling Probability Memory Routing Timing Quantum networks Costing Quantum networks quantum key distribution entanglement routing mixed-integer linear programming multipartite entanglement | Quantum networks enable secure communication and distributed quantum computation using entanglement, quantum teleportation, and the no-cloning theorem. Future quantum networks will support multiparty applications such as multiparty quantum key distribution and quantum secret sharing, which require simultaneous entanglement distribution among multiple users. Therefore, efficient routing that accounts for quantum network constraints is crucial for practical multiparty quantum communications. Although bipartite entanglement routing has been studied extensively, multipartite entanglement routing with probabilistic quantum link generation and fusion operations remains inadequately addressed. This paper proposes a routing model for multipartite entanglement distribution that explicitly incorporates the probabilistic nature of quantum operations and maximizes the probability of successfully distributing a Greenberger-Horne-Zeilinger (GHZ) state to all requesting users under practical quantum network constraints. We formulate this model as a mixed-integer linear programming (MILP) problem. We prove that finding the optimal Steiner entanglement tree under the proposed model is NP-hard. For large-scale scenarios where MILP becomes computationally intractable, we develop a heuristic approach. Numerical results demonstrate that the proposed model achieves a higher entanglement tree success probability and greater robustness than baseline methods across diverse network conditions, including scenarios with stringent quantum memory constraints and large terminal sets. | 10.1109/TNSM.2026.3751204 |
| Franck Messaoudi, Luhan Wang, Abdelkader Mekrache, Adlen Ksentini, Bingxuan Li, Jialei Su, Sofiane Messaoudi, Salim El Ghalbzouri | The Brewing Storm in 5G’s Data Plane: Design and Evaluation of a High-Performance eBPF/XDP-Based User Plane Function | 2026 | Early Access | Quality of service Fluid flow Kernel Information rates Throughput Planing 5G mobile communication Linux Filtering Filters 5 th Generation Mobile Networks (5G) User Plane Function (UPF) QoS Enforcement Rule (QER) Quality of Service (QoS) extended Berkeley Packet Filter (eBPF) eXpress Data Path (XDP) Traffic Control (tc) Queuing Discipline (qdisc) | This paper presents the design and implementation of a novel 5G UPF leveraging eBPF technology to meet the stringent performance and programmability requirements of emerging 6G systems. Traditional UPF implementations often struggle to balance performance, flexibility, and resource efficiency-challenges particularly critical in CPU- and I/O-constrained edge environments. The proposed eBPF-based UPF architecture mitigates these limitations by embedding core functionalities, such as packet classification, forwarding, and QoS enforcement, directly within the Linux kernel via eBPF programs attached through XDP and tc hook points. Performance evaluation using TRex demonstrates that the proposed solution achieves competitive throughput, low packet loss, and efficient CPU utilization across traffic profiles. Moreover, it maintains full compliance with 5G Core Network standards. Comparative analysis with well-established open-source UPF implementations further underscores its advantages. This work highlights the potential of eBPF as a foundational technology for building next-generation, programmable UPFs optimized for edge cloud deployments in the 6G era. | 10.1109/TNSM.2026.3720812 |
| Jing Zhang, Chao Luo, Rui Shao | MTG-GAN: A Masked Temporal Graph Generative Adversarial Network for Cross-Domain System Log Anomaly Detection | 2026 | Early Access | Anomaly detection Adaptation models Generative adversarial networks Feature extraction Data models Load modeling Accuracy Robustness Contrastive learning Chaos Log Anomaly Detection Generative Adversarial Networks (GANs) Temporal Data Analysis | Anomaly detection of system logs is crucial for the service management of large-scale information systems. Nowadays, log anomaly detection faces two main challenges: 1) capturing evolving temporal dependencies between log events to adaptively tackle with emerging anomaly patterns, 2) and maintaining high detection capabilities across varies data distributions. Existing methods rely heavily on domain-specific data features, making it challenging to handle the heterogeneity and temporal dynamics of log data. This limitation restricts the deployment of anomaly detection systems in practical environments. In this article, a novel framework, Masked Temporal Graph Generative Adversarial Network (MTG-GAN), is proposed for both conventional and cross-domain log anomaly detection. The model enhances the detection capability for emerging abnormal patterns in system log data by introducing an adaptive masking mechanism that combines generative adversarial networks with graph contrastive learning. Additionally, MTG-GAN reduces dependency on specific data distribution and improves model generalization by using diffused graph adjacency information deriving from temporal relevance of event sequence, which can be conducive to improve cross-domain detection performance. Experimental results demonstrate that MTG-GAN outperforms existing methods on multiple real-world datasets in both conventional and cross-domain log anomaly detection. | 10.1109/TNSM.2026.3654642 |
| Messaoud Ait-Yahia, Wael Jaafar, Rami Langar | Joint Design of Blockchain-Enabled Service Placement and Task Assignment in Vehicular Fog Computing Networks | 2026 | Early Access | Delays Timing Optimization Autonomous aerial vehicles Modeling Gallium Central Processing Unit Joints Bandwidth Elementary particles Resource allocation Blockchain VNF placement task assignment vehicular fog computing PSO GA IoV | Driven by the evolution of blockchain and fog computing, vehicular networks are increasingly capable of supporting latency-sensitive applications with enhanced security and trust guarantees. However, the joint resource allocation for task offloading and blockchain services has been insufficiently investigated in existing works. To address this gap, this paper proposes a framework for jointly allocating resources of blockchain, users’ virtualized services, and Mobile Edge Computing (MEC) task assignment in Vehicular Fog Computing (VFC) networks. Specifically, we formulate the optimization problem as an integer nonlinear programming model aiming to maximize the satisfaction rate of users’ service requests while minimizing the corresponding blockchain operation time under mobility, queuing, instantiation, and resource constraints. To solve it in a timely manner, we design two-stage hierarchical low-complexity solutions, namely a Particle Swarm Optimization-based Joint Blockchain-enabled Service placement and Task Assignment algorithm (PSO-JBSTA), and a Genetic Algorithm-based approach (GA-JBSTA). Through extensive simulations, we demonstrate the effectiveness of PSO-JBSTA (resp. GA-JBSTA) and their adaptability to network conditions, achieving an average 35% (resp. 24%) improvement in users’ service satisfaction rate and 9.5% (resp. 10.2%) reduction in average blockchain validation delay compared with the baselines. | 10.1109/TNSM.2026.3737068 |
| Rosario Patanè | Dynamic Coalition Formation Under Capacity Constraints: A Regime-Switching Value-Investing Game | 2026 | Early Access | Games Modeling Resource management Seeds (agriculture) Gain Service level agreements Pricing Internet of Things Terminology Investment Edge computing network service management coalition formation resource allocation Shapley value audit mechanisms | Edge computing service deployment requires the Network Operator (NO) and Service Providers (SPs) to coordinate investment and resource allocation under uncertain demand. This paper develops an audit-based service management framework for daily coalition formation with fixed capacity and service-level agreement (SLA) reservations. A two-stage coalitional game separates infrastructure investment from operational participation. Demand follows a Geometric Random Walk (GRW), and SPs apply an ordered admission and suspension rule using reported marginal contributions. With the NO held fixed, the operational coalition value is submodular; mandatory reservations can produce negative Shapley payoffs. We derive a separable benchmark, compute operational Shapley allocations, and give a sufficient condition for convergence to an individual equilibrium. A probabilistic audit mechanism provides a conditional daily truthfulness guarantee under verified settlement and enforceable penalties. For five service classes over three years, the reference run gains 12.4% over static grand-coalition membership and recovers 94.6% of the full-information optimum. Across 30 runs, the median gain is 13.3%. Sensitivity tests examine policy parameters, capacity and alternative demand models. The gain depends on capacity and update order; abundant capacity can make the admission rule underperform static membership. | 10.1109/TNSM.2026.3750592 |
| Ramazan Enisoglu, Burak Alp Inan, Muhammed Ali Erbir | MSCANet: A Multi-Scale Channel Attention Network for Encrypted Traffic Classification | 2026 | Early Access | Modeling Transformers Convolutional neural networks Fluid flow Windows Accuracy Seeds (agriculture) Joints Labeling Training Encrypted traffic classification deep learning multi-scale convolution channel attention Transformer network security network service management | Encrypted communication has rendered traditional traffic classification ineffective, creating challenges for QoS provisioning, network management, and security monitoring. Existing deep learning approaches exploit either spatial or sequence-level features in isolation, without jointly modeling multi-scale byte patterns and inter-packet ordering. We propose MSCANet, a hybrid architecture integrating a multi-scale 1D convolutional module, a sequentially applied Efficient Channel Attention (ECA) module, and a Transformer encoder, combining the two feature streams through a learnable weighted concatenation. With approximately 1.18M parameters, MSCANet attains 95.14% mean accuracy on the 20-class USTC-TFC2016 dataset and 92.61–98.01% across three 10-class sub-tasks over five random seeds, at a median per-sample inference latency of 1.29 ms on an NVIDIA RTX 5090 Laptop GPU. Against five baselines re-trained under an identical pipeline and schedule, spanning classical machine learning, CNN-only, attention-BiLSTM, and hybrid CNN–Transformer families, MSCANet is the most accurate on all four sub-tasks, improving over the strongest classical baseline by 6.16 pp and over the closest neural baseline by 2.38 pp while using 17.5% of its parameters and running 3.1× faster. These gains are demonstrated against the five re-trained baselines. Pretrained Transformers such as ET-BERT and YaTC report higher accuracy in their original publications, under their own preprocessing and with a pretraining stage that MSCANet does not use; the advantages we expect relative to them (no pretraining stage and, against ET-BERT, a model two orders of magnitude smaller) were not measured under our protocol, and we position MSCANet within the train-from-scratch regime. | 10.1109/TNSM.2026.3748386 |
| Chengsheng Pan, Yingzhi Wang, Huaifeng Shi, Lishang Qin, Xiaosong Cui | DBSDD-AQM: Dynamic Buffer Sizing-Based Deep Deterministic Active Queue Management for Edge IoT Networks | 2026 | Early Access | Delays Satellite broadcasting Internet of Things Modeling Management Learning (artificial intelligence) Information rates Throughput TCP Jitter Edge IoT networks network congestion active queue management dynamic buffer sizing deep deterministic policy gradient | Bursty heterogeneous traffic can build persistent queues at edge IoT gateways when the offered load converges on a lower-rate bottleneck. Conventional active queue management (AQM) regulates packet dropping under a fixed buffer capacity, whereas adaptive buffer sizing alone does not coordinate capacity adjustment with queue-removal control. We propose Dynamic Buffer Sizing-Based Deep Deterministic Active Queue Management (DBSDD-AQM), which combines a bounded buffersizing loop with a faster continuous queue-removal controller. DBS adjusts the admissible capacity according to sustained queue evolution, while the DDPG Actor selects packet-granular removal actions for the resident backlog. A class-aware extension maps three concurrent service classes to logical FIFO queues sharing the same dynamic physical buffer. DBSDD-AQM is implemented using an NS3-PyTorch framework. Aggregate experiments compare it with RED, ARED, PIE, CoDel, and DQN-AQM, while the class-aware evaluation additionally includes FQ-CoDel and FQ-PIE. Matched-DBS comparisons show similar throughput but different delay–loss operating points among the aggregate controllers, and component ablation distinguishes the effects of capacity adaptation and learned queue removal. Relative to a fixed 50 KB buffer, DBS reduces average queueing delay by 16.23% for UDP and 17.70% for TCP Westwood in controlled transport experiments. In the evaluated three-class overload scenarios, all classes retain nonzero throughput. Class-aware DBSDD-AQM provides stronger D- and T-class differentiation, whereas FQ-CoDel and FQ-PIE produce more uniform class-level outcomes and stronger R-class performance. The measured 95th-percentile batch-one Actor inference latency is 0.109 ms on the reported x86-64 platform. | 10.1109/TNSM.2026.3741334 |