Last updated: 2026-09-01 05:01 UTC
All documents
Number of pages: 172
| Author(s) | Title | Year | Publication | Keywords | ||
|---|---|---|---|---|---|---|
| Lin Cong, Junru Cai, Ying Wang, Peng Yu, Xuesong Qiu, Shaoyong Guo, Ao Xiong | Dynamic E2E Channel Orchestration in Metro Transport Network | 2026 | Early Access | Algorithms Optimization Timing Joining processes Resource management Modeling 5G mobile communication Loading Delays Bandwidth MTN E2E Dynamic Channel Orchestration defragmentation | In the era of 5G and beyond, the hard-isolated channels enabled by time slot cross-connects in metro transport network (MTN) effectively meet the demands of emerging network services for low latency, low jitter, flexible bandwidth, and secure isolation. However, the dynamic arrival and departure of tenant virtual network request (VNRs) lead to resource fragmentation within the MTN transport network, resulting in inefficient resource utilization. To mitigate network resource fragmentation, we formulate the MTN dynamic channel orchestration problem and propose a fragmentation-aware MTN dynamic channel orchestration method. This method comprises two key components: a greedy graph-reconstruction-based channel mapping algorithm and a fragmentation-aware channel reconfiguration algorithm. The former optimizes MTN channel resource allocation to achieve static channel orchestration, while the latter, leveraging a simulated annealing-based channel reconfiguration strategy, dynamically adjusts channel allocations based on the static orchestration results, thereby reducing fragmentation levels. Compared to existing approaches, under varying network load conditions, the proposed channel mapping algorithm reduces the consumption of network time slot resources by 16.3% -20.6%, while the channel reconfiguration algorithm significantly lowers the levels of network fragmentation by 48.7% -79.5%, and reduces the running time by 91.3%–94.2% compared with the baseline. | 10.1109/TNSM.2026.3723823 |
| Heng-Ru Zhang, Hong Liu | Center-Aware Pairwise Learning for Deep Semi-supervised Anomaly Detection | 2026 | Early Access | Modeling Anomaly detection Labeling Learning (artificial intelligence) Weighted sum model Contamination Testing Training Ranking (statistics) Optimization Anomaly detection Deep learning Intrusion Detection Semi-supervised learning | Anomaly detection (AD) assists in identifying irregularities within data. Existing works have primarily focused on improving detection for seen anomalies. However, most AD methods struggle to effectively detect unseen anomalies, which are novel types absent in training data and deviate from learned patterns. In this paper, we propose the Center-Aware Pairwise Learning (CAPL) network to effectively capture discriminative patterns of anomalies. For the center-aware component, the network extracts a global center vector that encapsulates the representation of all samples. Center loss regularization is then employed to refocus and adjust the sample features, pulling normal samples closer to the center while pushing anomalies further away. The process enhances robustness against distribution shift, improving the detection of unseen anomalies. For pairwise learning, the network captures relational representations by feature embeddings from positive pairs (normal-normal) and negative pairs (normal-anomaly, anomaly-normal and anomaly-anomaly). This strategy enhances generalization by simultaneously learning various normal/anomalous patterns, mitigating overfitting to labeled anomalies. A comprehensive set of experiments is conducted on 7 benchmark datasets using 7 popular algorithms for comparison. The results show that CAPL significantly outperforms competing methods in detecting seen and unseen anomalies. Source codes are available at https://github.com/zhanghrswpu/CAPL. | 10.1109/TNSM.2026.3727684 |
| Lan-jun Jeffrey Chang, Hsuan-Ying Ashely Li, Steven S. W. Lee | Oblivious Routing for Networks with Dual Uncertainties in Demand and Capacity | 2026 | Early Access | Optimization Routing Joining processes Modeling Distance measurement Matrices Uncertainty Visible light communication Timing Linear programming Oblivious routing Robust optimization Optimization dual problem Traffic engineering | The Oblivious Routing (OR) problem seeks to determine a static routing strategy that minimizes the worst-case network performance under uncertain traffic demands. Most existing studies assume fixed link capacities and consider uncertainty only in traffic demand. However, in many practical networks, particularly wireless and satellite networks, link capacities are also subject to significant fluctuations. This paper investigates a generalized OR problem that explicitly accounts for uncertainties in both traffic demand and link capacity. We formulate the problem as a nonlinear programming (NLP) model and then transform it into an equivalent linear programming (LP) formulation, enabling efficient computation of the routing solution. Extensive experiments on benchmark networks and randomly generated topologies demonstrate the effectiveness of the proposed approach. Compared with the conventional OR model that assumes fixed link capacities, the proposed capacity-variation-aware routing consistently achieves lower worst-case link utilization under capacity uncertainty while maintaining practical computation times. In the evaluated scenarios, the proposed method achieves an improvement ratio of up to 211% compared to the traditional OR approach. | 10.1109/TNSM.2026.3727815 |
| Ryota Nakamura, Kengo Urata, Shigeaki Harada | A Virtual Network Embedding Method Enhancing Self-consumption of Renewable Energy | 2026 | Early Access | Timing Joining processes Real-time systems Resource management Virtual machines Renewable energy sources Delays Batch production systems Bandwidth Power demand Virtual Network Embedding Renewable Energy Environmental Load Reduction | To achieve carbon neutrality in telecommunications networks, renewable energy (RE) must be utilized more efficiently despite its inherent fluctuations. These fluctuations often cause mismatches between power generation and demand, leading to surplus power in some sites and shortages in others. To address this issue, we formulate the problem of maximizing RE use in the allocation of virtualized ICT workloads, which can be realized through techniques such as VM live migration across sites and time periods. To efficiently solve the formulated problem, we propose a heuristic search method that leverages virtualization to enable VM workload migration across sites and time periods, thereby optimizing resource allocation according to RE availability. The proposed method is designed to increase RE consumption while managing trade-offs with communication quality and equipment efficiency. Simulation results demonstrate that our approach can improve RE utilization by up to 30% while maintaining acceptable performance, even under prediction errors. These findings highlight the potential of virtualization-based control frameworks for building more sustainable and environmentally conscious telecommunications networks. | 10.1109/TNSM.2026.3726977 |
| Yuya Miyaoka, Masaki Inoue, Kengo Urata, Shigeaki Harada | Chat-Driven Optimal Management for Virtual Network Services | 2026 | Early Access | Modeling Large language models Central Processing Unit Virtual machines Resource management Program processors Routing Timing Optimization Conferences Natural language processing Intent-based networking Virtual network allocation Optimization | This paper proposes a chat-driven network management framework that integrates natural language processing (NLP) with optimization-based virtual network allocation, enabling intuitive and reliable reconfiguration of virtual network services. Conventional intent-based networking (IBN) methods depend on statistical language models to interpret user intent, but cannot guarantee the feasibility of generated configurations. To overcome this, we develop a two-stage framework consisting of an Interpreter, which extracts intent from natural language prompts using NLP, and an Optimizer, which computes feasible virtual machine (VM) placement and routing via integer linear programming. In particular, the Interpreter translates user chats into update directions, i.e., whether to increase, decrease, or maintain parameters such as CPU demand and latency bounds, thereby enabling iterative refinement of the network configuration. In this paper, two distinct Interpreter implementations are introduced: a Sentence-BERT model with support vector machine (SVM) classifiers and a large language model (LLM). Experiments in single-user and multi-user settings show that the framework dynamically updates VM placement and routing while preserving feasibility. The LLM-based approach achieves higher accuracy with fewer labeled samples, whereas the Sentence-BERT with SVM classifiers provides significantly lower latency suitable for real-time operation. We also compare our cascade structure method with an end-to-end LLM approach, highlighting our proposed method’s high level of reliability. | 10.1109/TNSM.2026.3726950 |
| Ping He, Yu Yao, Xu Li, Yao Hu, Wei Yang | FIGAN: Diversity-Oriented Traffic Generation for Industrial Protocol Format Inference | 2026 | Early Access | Protocols Modeling Fuzzing Sequences Sequential analysis Industrial control Computers Syntactics Conferences Integrated circuits Communication system traffic Data Augmentation Generative Adversarial Networks Industrial control Inference algorithms | Protocol Format Inference is a pivotal step in the reverse engineering of proprietary protocols, yet its effectiveness is constrained by the scarcity of high-quality training data. In industrial control systems, the rigid and cyclical nature of traffic results in a "long-tail" distribution, where diverse functional scenarios are severely underrepresented. Existing generative approaches, primarily designed for fuzzing or intrusion detection, fail to resolve the intrinsic conflict between syntactic validity and semantic diversity required for protocol format inference. To bridge this gap, we propose FIGAN, a stage-wise decoupled generative framework tailored to synthesize high-fidelity traffic for protocol format inference. By isolating flexible distribution learning from rigid syntax enforcement, FIGAN liberates the generative process to extrapolate novel payload variations from a continuous latent space, effectively surmounting the limitations of sparse seed data. Specifically, the framework integrates three synergistic modules: first, heuristic pre-processing that constructs semantic templates as a prior knowledge base; second, a generative adversarial architecture optimized via discrete relaxation to explore high-dimensional payload patterns independently of syntax rules; and finally, a closed-loop verification mechanism that performs syntactic calibration and functional validation against simulated device responses. Evaluations on four real-world protocols (Modbus TCP, S7Comm, Omron FINS, and DNP3) demonstrate that FIGAN significantly outperforms state-of-the-art baselines. The source code has been open-sourced https://github.com/MissHP111/FIGAN. | 10.1109/TNSM.2026.3717268 |
| Wei Sai, Yihui Lu, Xin Guo | A Privacy-Preserving Security Framework for Multi-Party Data Fusion Computing Based on Homomorphic Encryption | 2026 | Early Access | Security Protocols Information rates Modeling Throughput Noise Multi-party computation Polynomials Federated learning Homomorphic encryption Homomorphic Encryption Secure Multi-Party Computation Threshold Decryption Privacy-Preserving Data Fusion Decentralized Computing Framework | To prevent plaintext exposure in multi-party collaborative computing, this paper proposes a distributed secure multi-party computation protocol based on the Cheon-Kim-Kim-Song (CKKS) homomorphic encryption scheme. Data is encoded and encrypted at the source into CKKS complex polynomial ciphertext, enabling vectorized fusion under shared evaluation keys and threshold decryption in a decentralized architecture without a trusted central authority. Experiments on heterogeneous multi-institution datasets demonstrate low numerical error (9.0×10⁻⁷ at polynomial order 2¹⁶ and depth 12), effective scalability (throughput increasing from 1.12×10⁵ to 1.32×10⁵ ops/s and latency decreasing from 56 ms to 38 ms as nodes scale from 4 to 16), and strong robustness (70% decryption success at a 60% threshold and 95% recovery under malicious interference), showing that the framework achieves efficient computation with strict privacy protection for cross-party data fusion. | 10.1109/TNSM.2026.3717343 |
| Martin Trullenque Ortiz, Daniel Camps Mur, Oriol Sallent, Jad Nasreddine | FOM-5G: A Learning-Based Framework for Overload Mitigation in V2X-Enabled 5G Networks | 2026 | Early Access | 5G mobile communication Cells (biology) Vehicle-to-everything Loading Timing Vehicles Cams Computer aided manufacturing Modeling Load management V2X Communications Cell Overload Cross-layer optimization | Public networks deploying 5G-Advanced technology are expected to support large-scale connected and cooperative vehicular services. To this end, 3GPP has enabled the deployment of Day 1 V2X safety services over public cellular networks, which provide the global coverage and low latencies these services require. However, high vehicular mobility may result in traffic jams that strain radio resources, leading to cell overload situations that jeopardize the delivery of V2X services. Previous studies have shown that the best action to mitigate cell overloads strongly depends on road topology and the location of the traffic jam with respect to the cell geometry. Moreover, a fundamental insight to address V2X related cell overloads is to realize that the majority of traffic jams are repeatable, hence historical information should be used to take radio resource management (RRM) decisions. In this paper, we present a novel framework for cell overload mitigation in 5G networks (FOM-5G), an RRM solution for ORAN-based public 5G networks that leverages historical information to prevent recurring cell overloads, particularly those affecting V2X services. We validated FOM-5G through comprehensive simulations incorporating three real vehicular mobility patterns from a European city experiencing traffic congestion. The results show that FOM-5G can adapt its congestion control actions to varying traffic conditions, effectively exploit historical data, and achieve superior performance compared to static congestion mitigation approaches. | 10.1109/TNSM.2026.3725207 |
| Francisco Muro, Eduardo Baena, Tomaso De Cola, Sergio Fortes, Raquel Barco | AI-Driven Optimization of Virtual Network Function Allocation in 6G Non-Terrestrial Networks | 2026 | Early Access | Resource management Optimization Satellites Modeling Artificial intelligence Information rates Throughput Measurement 5G mobile communication Loading 6G Non-Terrestrial Networks O-RAN Kubernetes Virtual Network Functions VNF Allocation Machine Learning VNF Placement Gradient-Free Optimization Network Performance Resource Management | The integration of 6G technologies into Non-Terrestrial Networks (NTNs) raises a fundamental orchestration problem: how to allocate Virtual Network Functions (VNFs) across satellite and terrestrial domains under tight onboard resource constraints and a continuously changing topology. The virtualized 6G Open Radio Access Network (O-RAN) paradigm makes it possible to run 5G software stacks on Software-Defined Radios (SDRs) based on General Purpose Processors (GPPs), but it also turns VNF placement into a high-dimensional, multi-objective decision that static heuristics and model-based formulations struggle to capture. This paper addresses that gap by introducing an AI-driven VNF allocation framework for 6G-NTN environments built on an O-RAN-based distributed architecture and orchestrated on top of Kubernetes. The VNF allocation problem is formalized for a multi-domain 6G-NTN scenario with constrained satellite resources, and a measurement-based test campaign is designed to characterize the emulated platform in terms of virtual resource utilization and end-to-end performance. The framework couples tree-based machine learning predictors with a gradient-free optimizer to reach the optimal feasible allocation, outperforming two heuristic baselines drawn from the VNF placement literature by reducing the service RTT by up to 39% and delivering up to 3× higher YouTube DL throughput with respect to the best feasible heuristic. Beyond these gains, the proposed framework establishes a measurement-driven, reproducible methodology for VNF allocation in 6GNTN scenarios, demonstrating that AI-driven orchestration can systematically uncover non-obvious resource configurations that purely analytical or static approaches consistently miss. | 10.1109/TNSM.2026.3724474 |
| Ali Alfatemi, Ahmed Alfaqeer, Mohamed Rahouti, Zakirul Alam Bhuiyan, Abdellah Chehri | Sentinel: A Neuro-Symbolic Co-Evolutionary Framework for Trustworthy Network and Service Management Against DDoS Attacks | 2026 | Early Access | Modeling Distributed denial-of-service attack Management Safety Training Seeds (agriculture) Crystallization Protocols Signal detection Poles and zeros DDoS defense neuro-symbolic AI reinforcement learning network security explainable AI service management co-evolutionary training | Distributed Denial of Service (DDoS) attacks threaten service continuity in next-generation networks, where autonomous mitigation must suppress attack traffic without unnecessarily degrading legitimate service. This paper presents Sentinel, a neuro-symbolic co-evolutionary framework for DDoS-aware network and service management. Sentinel combines a Proximal Policy Optimization (PPO) defender with a symbolic safety layer that repairs unsafe actions, enforces domain-specific constraints, and supports interpretable rule crystallization. Training further uses a Hall-of-Fame archive of historical attackers and benchmark checkpoint selection to mitigate late-stage co-evolutionary degradation. We evaluate Sentinel over 2,000 generations and 10 independent seeds across benign, mild-attack, strong-attack, chaos/flash-crowd, and held-out ICMP flood scenarios. Results show that Sentinel Pareto-dominates the ShieldOnly ablation on mild, strong, and chaos scenarios under a joint service-quality, leakage, and outage criterion, and Pareto-dominates unshielded PPO on zero-shot ICMP. In the ICMP setting, Sentinel eliminates severe outages in the evaluated scenario (0 vs. 145.7 for PPO) and reduces leakage by 8.6 percentage points through symbolic ICMP overrides. Benchmark checkpointing reduces strong-attack leakage by 8.1 percentage points and severe outages by 98.3 steps relative to the final checkpoint. Rule crystallization achieves 97.97% held-out accuracy using a depth-4 decision tree over four interpretable traffic features. Strict SLA compliance is not achieved under attack conditions, and all results are simulation-based within the modeled traffic and attack distributions. | 10.1109/TNSM.2026.3729146 |
| Depeng Xu, Guozhen Cheng, Hongchao Hu, Quan Ren, Xiaohan Yang, Kangxu Wang | STNet: Multi-Scale Spatiotemporal Learning and Adaptive Fusion for Few-Shot Tor Traffic Classification | 2026 | Early Access | Modules (abstract algebra) Modeling Accuracy Training Convolutional neural networks Long short term memory Transformers Security Labeling Cyberspace Tor Traffic Classification Few-Shot Learning Domain Adaptation Traffic Obfuscation Spatiotemporal Feature Fusion STNet | The Tor network’s anonymity is increasingly exploited for cybercrime, creating a demand for accurate traffic classification under strict few-shot constraints. While recent efforts like WF-Transformer demonstrate strong temporal modeling capabilities, they still require abundant labeled data and struggle to generalize under defense-induced distortions and open-world unknown traffic. To address these gaps, we propose STNet (SpatioTemporal Multi-scale Augmentation and fusion Network), an episode-based few-shot learning architecture for Tor traffic classification. Unlike simple module stacking, STNet adopts a modular decoupling design: (1) a Multi-Scale Spatiotemporal Feature Fusion (MSMF) module captures packet-level and flow-level patterns to resist obfuscation; (2) scenario-adaptive modules tackle domain shifts in closed-world settings and feature scarcity in open-world settings; and (3) a Hierarchical Layer Attention (HLA) mechanism dynamically fuses heterogeneous features from different deployment positions. Extensive experiments on real-world Tor traffic show that STNet consistently outperforms representative baselines including WF-Transformer. In closed-world settings, it limits the accuracy drop under WalkieTalkie obfuscation to 13.6 percentage points. In open-world 10-shot evaluation, it achieves 92.1% AU-COVR and 79.1% unknown-class F1-score, surpassing the best baseline by 4.9 and 6.0 percentage points, respectively. These results demonstrate the effectiveness of decoupling universal feature extraction from scenario-specific adaptation in few-shot Tor traffic analysis. | 10.1109/TNSM.2026.3722541 |
| Martine S. Lenders, Carsten Bormann, Thomas C. Schmidt, Matthias Wählisch | A Leaner and Faster Web: How CBOR Can Improve Dynamic Content Encoding in JSON and DNS over HTTPS | 2026 | Early Access | Internet of Things Encoding Internet Arrays Gain Recording Tagging Timing HTTP Decoding CBOR World Wide Web JSON DNS application/dns+cbor Internet measurements | The Internet community has taken major efforts to decrease latency on the World Wide Web with significant improvements in accelerating content transport and in compressing static content. Less attention, however, has been dedicated to compression of dynamic content. Such content is commonly provided by JSON and DNS over HTTPS. Dynamic content objects continue to grow in size, which increases latency and fosters the digital inequality. In this paper, we propose to mitigate this increase by utilizing Concise Binary Object Representation (CBOR), a standard originally designed for the constrained Internet of Things (IoT) to restrict packet sizes and enable efficient encoding of data objects. We provide protocol design and three new data sets for the evaluation of dynamic content, DNS, and the loading of websites. Our key findings are the following: (i) Switching the data representation from JSON to CBOR reduces data by up to 80%. This size reduction can decrease loading times by up to 13.8% when downloading large objects—even in local setups. (ii) Enabling CBOR for DNS over HTTPS (DoH) and DNS over CoAP (DoC) reduces packet sizes significantly. Compressing only names combined with unpacked CBOR achieves maximum gain of 52.2%, using more complex but still lightweight Packed CBOR allows minimizing packets by up to 95.5%. Our lean decoder for name compression can fit into as little as 314 bytes of build size. Our results clearly show the potential of CBOR outside of IoT scenarios. Parts of this research have already influenced work within the IETF. | 10.1109/TNSM.2026.3722114 |
| Franck Messaoudi, Luhan Wang, Abdelkader Mekrache, Adlen Ksentini, Bingxuan Li, Jialei Su, Sofiane Messaoudi, Salim El Ghalbzouri | The Brewing Storm in 5G’s Data Plane: Design and Evaluation of a High-Performance eBPF/XDP-Based User Plane Function | 2026 | Early Access | Quality of service Fluid flow Kernel Information rates Throughput Planing 5G mobile communication Linux Filtering Filters 5 th Generation Mobile Networks (5G) User Plane Function (UPF) QoS Enforcement Rule (QER) Quality of Service (QoS) extended Berkeley Packet Filter (eBPF) eXpress Data Path (XDP) Traffic Control (tc) Queuing Discipline (qdisc) | This paper presents the design and implementation of a novel 5G UPF leveraging eBPF technology to meet the stringent performance and programmability requirements of emerging 6G systems. Traditional UPF implementations often struggle to balance performance, flexibility, and resource efficiency-challenges particularly critical in CPU- and I/O-constrained edge environments. The proposed eBPF-based UPF architecture mitigates these limitations by embedding core functionalities, such as packet classification, forwarding, and QoS enforcement, directly within the Linux kernel via eBPF programs attached through XDP and tc hook points. Performance evaluation using TRex demonstrates that the proposed solution achieves competitive throughput, low packet loss, and efficient CPU utilization across traffic profiles. Moreover, it maintains full compliance with 5G Core Network standards. Comparative analysis with well-established open-source UPF implementations further underscores its advantages. This work highlights the potential of eBPF as a foundational technology for building next-generation, programmable UPFs optimized for edge cloud deployments in the 6G era. | 10.1109/TNSM.2026.3720812 |
| Soonbeom Kwon, Yusu Noh, Youngwoo Jang, Illyoung Choi, Byungchul Tak, In-geol Chun, Young-Kyoon Suh | Scalable and Robust Resource Provisioning via Adaptive Task Scheduling for Edge Devices | 2026 | Early Access | Schedules Scheduling Cloning Timing Educational institutions Computers Transcoding Videos Tail Edge computing Edge devices Edge server Resource augmentation Task distribution Kubernetes | Edge devices, such as wearables, drones, and CCTV systems, are vital for real-time data collection in urban intelligence. However, their limited computational and storage capacities pose significant challenges. While offloading to public clouds offers scalability, it often incurs high latency and operational costs. Conversely, centralizing workloads on edge servers may result in the underutilization of high-performance edge devices. To address these limitations, we introduce ERPF, a Kubernetes-based Edge Resource Provisioning Framework that augments the capabilities of heterogeneous edge environments. ERPF orchestrates dynamic volume provisioning, GPU-aware resource allocation, execution context migration, and adaptive task distribution to improve system flexibility and efficiency. Building on this, we propose a novel adaptive task scheduling technique, termed eATS, composed of three key mechanisms: (i) Partition Smoothing Scheme for stable task granularity control, (ii) Resilient Edge Reintegration for failure detection and task reassignment, and (iii) Competitive Task Cloning for speculative execution with fastest-result commitment. The proposed eATS scheme reduces task execution time by up to 27.6%, lowers partition size variability by 8.7×, and improves scheduling robustness across heterogeneous edge devices over the baseline. | 10.1109/TNSM.2026.3694238 |
| Shuang Zheng, Xing Zhang, Michael Sheng, Haixu Wang, Wenbo Wang | Beam Hopping Low Earth Orbit Satellite Resource Allocation for Differentiated Services and Robustness Analysis under Model Attacks | 2026 | Early Access | Beams Satellites Resource management Modeling Optimization Schedules Scheduling Low earth orbit satellites Algorithms Bridges LEO satellite communications deep reinforcement learning digital twin resource allocation adversarial attack | Beam hopping (BH)-enabled Low Earth Orbit (LEO) satellites play a pivotal role in next-generation communication networks, providing global coverage, improving spectrum efficiency, and supporting flexible adaptation to heterogeneous service demands. To fully exploit these capabilities, artificial intelligence (AI) techniques are increasingly employed for dynamic resource allocation and power management. However, limited onboard resources and potential adversarial perturbations pose challenges to both efficiency and robustness. To address these issues, we leverage digital twin technology to accurately capture the spatio-temporal dynamics of user–satellite visibility, providing precise state information for decision-making. Building on this, we formulate a joint optimization framework for BH scheduling and power allocation as a Markov Decision Process and propose the BRIDGE—BH with Reinforcement learning incorporating Integrated Dirichlet and Gumbel-TopK Exploration—which integrates a quality of service (QoS)-driven subchannel scheduling mechanism to ensure efficient and differentiated resource allocation. The model’s robustness is systematically evaluated under three classical adversarial attacks. Simulation results demonstrate that our approach achieves superior energy efficiency, service throughput, and fairness, while the robustness analysis shows stable performance under the considered bounded adversarial perturbations. | 10.1109/TNSM.2026.3710750 |
| Jing Zhang, Chao Luo, Rui Shao | MTG-GAN: A Masked Temporal Graph Generative Adversarial Network for Cross-Domain System Log Anomaly Detection | 2026 | Early Access | Anomaly detection Adaptation models Generative adversarial networks Feature extraction Data models Load modeling Accuracy Robustness Contrastive learning Chaos Log Anomaly Detection Generative Adversarial Networks (GANs) Temporal Data Analysis | Anomaly detection of system logs is crucial for the service management of large-scale information systems. Nowadays, log anomaly detection faces two main challenges: 1) capturing evolving temporal dependencies between log events to adaptively tackle with emerging anomaly patterns, 2) and maintaining high detection capabilities across varies data distributions. Existing methods rely heavily on domain-specific data features, making it challenging to handle the heterogeneity and temporal dynamics of log data. This limitation restricts the deployment of anomaly detection systems in practical environments. In this article, a novel framework, Masked Temporal Graph Generative Adversarial Network (MTG-GAN), is proposed for both conventional and cross-domain log anomaly detection. The model enhances the detection capability for emerging abnormal patterns in system log data by introducing an adaptive masking mechanism that combines generative adversarial networks with graph contrastive learning. Additionally, MTG-GAN reduces dependency on specific data distribution and improves model generalization by using diffused graph adjacency information deriving from temporal relevance of event sequence, which can be conducive to improve cross-domain detection performance. Experimental results demonstrate that MTG-GAN outperforms existing methods on multiple real-world datasets in both conventional and cross-domain log anomaly detection. | 10.1109/TNSM.2026.3654642 |
| Deemah H. Tashman, Soumaya Cherkaoui | Trustworthy AI-Driven Dynamic Hybrid RIS: Joint Optimization and Reward Poisoning-Resilient Control in Cognitive MISO Networks | 2026 | Early Access | Reconfigurable intelligent surfaces Reliability Optimization Security MISO Array signal processing Vectors Satellites Reflection Interference Beamforming cascaded channels cognitive radio networks deep reinforcement learning dynamic hybrid reconfigurable intelligent surfaces energy harvesting poisoning attacks | Cognitive radio networks (CRNs) are a key mechanism for alleviating spectrum scarcity by enabling secondary users (SUs) to opportunistically access licensed frequency bands without harmful interference to primary users (PUs). To address unreliable direct SU links and energy constraints common in next-generation wireless networks, this work introduces an adaptive, energy-aware hybrid reconfigurable intelligent surface (RIS) for underlay multiple-input single-output (MISO) CRNs. Distinct from prior approaches relying on static RIS architectures, our proposed RIS dynamically alternates between passive and active operation modes in real time according to harvested energy availability. We also model our scenario under practical hardware impairments and cascaded fading channels. We formulate and solve a joint transmit beamforming and RIS phase optimization problem via the soft actor-critic (SAC) deep reinforcement learning (DRL) method, leveraging its robustness in continuous and highly dynamic environments. Notably, we conduct the first systematic study of reward poisoning attacks on DRL agents in RIS-enhanced CRNs, and propose a lightweight, real-time defense based on reward clipping and statistical anomaly filtering. Numerical results demonstrate that the SAC-based approach consistently outperforms established DRL base-lines, and that the dynamic hybrid RIS strikes a superior trade-off between throughput and energy consumption compared to fully passive and fully active alternatives. We further show the effectiveness of our defense in maintaining SU performance even under adversarial conditions. Our results advance the practical and secure deployment of RIS-assisted CRNs, and highlight crucial design insights for energy-constrained wireless systems. | 10.1109/TNSM.2026.3660728 |
| Pingping Dong, Liying Chen, Xuan Yao, Kai Wang, Lianming Zhang, Jiawei Huang | Fumer: Proactive Time-Shifting for Synchronized Periodic Traffic in Distributed Training | 2026 | Early Access | Training Timing Modeling Optimization Joining processes Bandwidth Synchronization Algorithms Educational institutions Windows Data center network Distributed training traffic RDMA | The growth of distributed training models, with parameters now reaching the billion-scale, has shifted the system bottleneck from computation to communication. While Remote Direct Memory Access (RDMA) is widely deployed to improve network performance by circumventing the kernel mechanism, the synchronization-computation cycles under the synchronous parallel mode introduce a highly synchronized and periodic “on-off” bursty traffic pattern, which poses significant challenges to data center networking. Consequently, distributed training suffers from two critical bottlenecks: instantaneous congestion during communication and persistent link idleness during computation. These issues lead to severe bandwidth contention and resource underutilization, ultimately hindering overall training efficiency. To address these challenges, this paper proposes Fumer, a proactive periodic traffic optimization framework that shifts the congestion control paradigm from reactive rate adjustment to proactive time-shifting. Specifically, Fumer leverages In-band Network Telemetry (INT) and Fast Fourier Transform (FFT) with signal-wave separation to decompose interleaved traffic signals, aiming to overcome the lack of periodic awareness. Furthermore, Fumer employs an off-peak transmission optimization algorithm to calculate optimal time-shift values, thereby tackling synchronized congestion and link idleness. By executing proactive off-peak scheduling, Fumer shifts overlapping communication windows into idle periods to smooth traffic peaks in the time domain. Experimental results show that Fumer boosts average path throughput across all workloads to 86.3 Gbps, improving upon DCQCN (42.6 Gbps) by 102.6% and RECC by 22.1%. Furthermore, it reduces the average and 99.9th-percentile iteration times by up to 25.0%-45.4% and 25.5%-49.3%, respectively, demonstrating its efficacy and robustness across diverse large-scale training workloads. | 10.1109/TNSM.2026.3728016 |
| Yuqiang Wen, K. L. Eddie Law | Selected Group Broadcasting: Modeling and Applications | 2026 | Early Access | Modeling Broadcasting Timing Delays Simulation Portable document format Histograms Tail Argon Testing Traffic modeling Broadcast Overlay Network Automatic Repeat reQuest Symbolic Computation Selected Group Broadcasting (SGB) SGBs SGBp | Modern decentralized applications frequently employ one-to-many messaging over dynamic recipient groups, a paradigm we term Selected Group Broadcasting (SGB). Though one-to-one traffic models (e.g., M/M/1 queue) are well studied, traffic characterization for one-to-many connectivity remains underdeveloped. In this paper, we investigate the delay distribution of one-to-many traffic over an SGB in a wide-area communication system. Depending on the underlying network input, the SGB problem naturally decomposes into two distinct paradigms: SGBs (for Sequential inputs) and SGBp (for Parallel inputs). Asymptotic analysis reveals that SGBs and SGBp are governed by fundamentally different stochastic dynamics, necessitating dedicated modeling approaches for each. This paper focuses exclusively on the SGBs paradigm, providing a rigorous analytical treatment and establishing an operatortheoretic performance framework. For first-order statistics of SGBs, we derive exact closed-form solutions under exponential inter-ACK interval (ACK Interval) inputs. By exploiting the rational Laplace-domain structure of the forward operator, we extend the model to precisely compute output distributions for any non-negative distribution input. Furthermore, we introduce an equivalent SGBs analysis scheme via the inverse operator, enabling the transformation of continuous commit-time distributions into physically interpretable ACK Interval profiles. For second-order statistics, we establish a formalized functional hypothesis under exponential ACK Intervals, validated via simulation. We verify the derived probability density functions with simulated delays; the results are confirmed via Kolmogorov-Smirnov tests. | 10.1109/TNSM.2026.3729017 |
| Alex Piccioni, Andrea Marotta, Claudia Rinaldi, Dajana Cassioli, Fabio Graziosi | From Ground to Air: Making Mobile Networks Ready for Urban Air Mobility | 2026 | Early Access | Urban air mobility Modeling Optimization Information rates Throughput Joining processes Signal to noise ratio Niobium Conferences Simulation Urban Air Mobility (UAM) Advanced Air Mobility (AAM) Unmanned Aerial Vehicle (UAV) Mobile Networks Radio Access Network (RAN) 5G 6G | Urban Air Mobility (UAM) is expected to be an innovative component of future transportation systems. It introduces great flexibility (additional degrees of freedom) to mobility in 3D space and paves the way to novel design methodologies of wireless communication networks to support both critical and non-critical communications. Main requirements for these networks are high reliability, low latency, and high throughput, barely addressable with existing terrestrial networks unless these are upgraded on the basis of a thorough assessment of coverage capabilities and network planning methodologies. This work investigates the suitability of modern mobile networks, such as 5G and forthcoming 6G, to enable the delicate UAM operations and identifies the gaps to be filled in. The study introduces an enhanced evaluation framework based on a system-level simulator tailored to UAM-specific characteristics in realistic scenarios. Our methodology allows us to determine the minimum number of enhanced Base Stations (eBSs) that must be upgraded to satisfy the considered throughput and BLock Error Rate (BLER) requirements under the adopted system assumptions. The framework integrates a channel-aware selection strategy that prioritizes the upgrades in the subset of base stations that allow the provisioning of the most favorable aggregated link conditions. We explore a variety of realistic deployment scenarios, analyzing the impact of parameters such as UAM Vehicle (UV) population, performance requirements, transmit power, and target BLER on achievable network performance. The results highlight the trade-offs between infrastructure density and service quality, offering practical guidelines for network operators to design UAM-ready deployments along the evolution path toward 6G systems. | 10.1109/TNSM.2026.3728202 |