In current state-of-the-art intrusion detection systems (IDSs), models are trained to detect the repetitive behavior of data traffic. This leads to the problem of ignoring rare yet important attacks. To solve the problem stated above, a risk-gated security attention (RGSA) architecture is proposed. The initialization of the risk estimator based on the CVE/CVSS severity score enables the attention network to detect important yet rare patterns. Furthermore, a tier-aware focal loss is proposed to mitigate security threats in the real world without any data augmentation process. Evaluations were conducted on held-out 80/20 test splits of the CIC-IDS2017, CIC-IDS2018, and CIC-IoT2023 datasets. The calibrated binary detection process reached false negative rates (FNRs) of 0.50% and 0.40% on the CIC-IDS2017 and CIC-IDS2018 datasets, respectively, remaining below the 1.0% FNR operational target adopted in this study. For micro-support critical threats, precise discrete analysis had to be applied to maintain statistical validity. Also, weighted F1-scores of at least 99.65% were consistently achieved for all testbeds analyzed. This network contains 284,317 trainable parameters and strictly avoids the creation of any synthetic samples through complete rejection of synthetic oversampling. The findings indicate that adding priors for security tiers to the attention process is favorable for moving towards an impact-based threat management approach.
Artificial intelligence (AI) models are increasingly deployed in edge-deployed cyber-physical security systems for tasks encompassing monitoring, threat classification, and automated decision-making. While these models offer robust performance, their deployment through open or semi-open Machine Learning as a Service (MLaaS) interfaces exposes them to severe security threats, prominently model extraction attacks. In such attacks, an adversary systematically queries a target API to replicate the victim model’s behavior. This study proposes a novel hybrid defense framework combining Adaptive Misinformation (AM) and Trigger-Based Watermarking (WM) to protect AI models against black-box extraction. Utilizing a LeNet architecture, the victim model was trained on the MNIST dataset, while a simulated attack utilized 50,000 EMNIST samples to train a clone model. The framework employs Maximum Softmax Probability (MSP) for out-of-distribution (OOD) detection to identify suspicious queries and strategically inject misleading responses, alongside a fine-tuned embedded watermark for ownership verification. Experimental evaluations using 10-fold cross-validation reveal that the baseline extraction attack yielded a clone model accuracy of 96.32%. Upon implementing the AM + WM framework, clone model accuracy degraded significantly to 53.67%, while the victim model maintained an accuracy of 98.97%. Furthermore, the protected model achieved a 100% Trigger Match Rate (TMR), ensuring reliable intellectual property verification. The proposed framework provides a prototype validation for lightweight edge architectures to balance security, model utility, and ownership protection in cyber-physical deployments.
Post-quantum cryptography (PQC) is driven by the threat posed by quantum computers, particularly the harvest-now-decrypt-later attack. PQC aims to prepare classical systems and hardware to become resilient against quantum attacks. This research discusses the system vulnerabilities, the need to migrate to PQC, and how to integrate this migration. PQC has become one of the solutions for addressing today’s vulnerabilities and threats while increasing security. The paper concludes that harvest-now-decrypt-later, Q-Day attacks, and new quantum attacks are today’s most critical threats, which can be addressed by deploying PQC solutions and, thus, increasing security. This research proposes a conceptual multi-phased model framework for the migration. The framework first addresses system objectives, goals and assets, then ranks assets based on the highest sensitivity. Crypto-Agility is achieved via the automation of PQC migration, such as the automation of re-keying endpoints, followed by the automation of auditing and testing of each migration stage. Human judgment is required to review the migration process. Once one asset is successfully transitioned, the framework goes to the next highest asset; otherwise, testing is repeated. This is expected to help systems migrate at the lowest cost and with the fewest consequences. However, the limitation of PQC migration is its high resource cost, time, requirement of human professionals, burden on existing systems, and financial expenses. Lastly, the paper recommends creating an ML model to help rank a system’s data and vulnerabilities. Moreover, the paper recommends conducting experiments to evaluate the effectiveness of the proposed framework. In addition, the paper recommends performing migration in relation to a real-world company.
Fast Reroute (FRR) after link failures is essential for carrier-grade Software-Defined Networking (SDN), yet hybrid deployments remain dominated by slow legacy routing convergence. This paper presents two port-state-driven FRR mechanisms for homogeneous and hybrid SDN networks. First, Port-State-Aware Fast Reroute (PSA-FRR) uses OpenFlow port-status events to trigger proactive, rule-based protection in the data plane. Second, Port-State-Aware Neural Fast Reroute (PSAR-FRR) formulates hybrid FRR as a controller-local multi-class classification problem and predicts the backup egress port from a port-centric state representation, enabling microsecond-scale decision latency. We evaluate the methods on the Abilene wide-area network (WAN) topology using Mininet with Open vSwitch (OVS) and a Ryu controller (homogeneous case) and Graphical Network Simulator-3 (GNS3) with Cisco IOS routers (hybrid baseline). In homogeneous SDN emulation, PSA-FRR restores connectivity within 30–100 ms under the evaluated configurations. In the hybrid baseline, conventional routing protocols converge in 13.8–256.1 s (Enhanced Interior Gateway Routing Protocol (EIGRP), Intermediate System to Intermediate System (IS-IS), Open Shortest Path First (OSPF), Border Gateway Protocol (BGP), and Routing Information Protocol (RIP)), confirming that control-plane recovery cannot meet a 50 ms target. Using the collected dataset, PSAR-FRR reduces controller decision time from 6.753 μs (PSA-FRR rule evaluation) to 0.214 μs (deep neural network (DNN) inference), a 31.5× speedup. These results show that port-state awareness combined with learned, controller-local policies can substantially reduce the decision-to-action latency of FRR, providing a practical path toward low-latency failure recovery in SDN migration scenarios.
Software-defined Networking (SDN) is a promising networking architecture that separates the control and data planes to allow flexible network management. However, the SDN architecture makes networks vulnerable to various security threats, such as Distributed Denial-of-Service (DDoS) attacks. A DDoS attack is one of the most common SDN threats, aiming to exhaust a network’s computational and bandwidth resources. Self-similarity is a statistical property of time series in which data patterns repeat at different time scales. Several studies have shown that network traffic exhibits increased self-similarity during DDoS attacks, making it a promising tool for DDoS detection. Despite the effectiveness of statistical methods for detecting DDoS, some methods, such as self-similarity, are discarded due to their high computational cost, leading to detection delays. This paper proposes a lightweight Rescaled Range (R/S)-based scheme for effective real-time DDoS attack detection in SDN. The scheme employs the Welford online algorithm to compute statistical parameters of the R/S scheme. Experimental results demonstrate that the proposed scheme efficiently captures changes in self-similarity and detects TCP/UDP DDoS attacks in real time. Moreover, it achieves high detection performance compared to other R/S methods, with a False Positive Rate (FPR) below 0.5% and an average computation time of 0.047 ms.
Vehicular Ad Hoc Networks (VANETs) are essential components of Intelligent Transportation Systems (ITS), allowing communication exchanges between vehicles and road infrastructure elements. These networks face challenges from vehicular mobility, including frequent topology changes, link instability, and variable wireless channel quality. This paper presents an extensive evaluation of Software-Defined Networking (SDN) integrated with two traffic engineering technologies, Multi-Protocol Label Switching (MPLS) and Segment Routing (SR), applied to the AODV and OLSR routing protocols. Nine incremental configurations are evaluated for each protocol, ranging from the default protocol through MPLS-enhanced forwarding, SDN-based centralized optimization, combined SDN-MPLS and SDN-SR integration, to advanced configurations using distance-based IS-IS weighted topology metrics with both Fixed and Adaptive metric computation approaches. Two distinct SDN topology construction methods are compared: a Protocol-based approach that uses routing table entries with equal hop-count metrics, and a distance-based approach using IS-IS weighted metrics. The simulation uses a realistic urban topology with 50 vehicles and 5 RSUs, evaluated across several traffic patterns, representing different application types. Results demonstrate that SR with distance-based IS-IS metrics achieves the highest Packet Delivery Ratio (PDR) and lowest delay by leveraging RSU infrastructure as reliable forwarding relays. Moreover, the proposed SDN-SR framework reduces routing overhead and control-plane signaling, improving network resource utilization and thereby indicating its potential to enhance the energy efficiency of vehicular communication infrastructures.
The convergence of optical burst switching (OBS) and elastic optical networks (EON) offers a promising pathway for 6G IoT backhaul. However, existing solutions treat OBS and EON separately and rely on heuristic resource allocation that fails to meet stringent QoS demands. This paper proposes a fully AI-driven converged OBS/EON architecture integrating a hybrid switching fabric, a multi-agent deep reinforcement learning (DRL) orchestrator, and a federated learning (FL) plane for autonomous, QoS-aware resource provisioning. The control plane implements multi-agent Proximal Policy Optimization (PPO) for joint burst scheduling, routing, modulation selection, and spectrum allocation. The orchestration plane employs q-fair FL for privacy-preserving cross-domain traffic prediction. Mathematical formulations of the optimization problem with spectrum, GSNR, and delay constraints are provided, along with pseudo-algorithms. Simulations over a 14-node NSFNET topology demonstrate a 78% reduction in blocking probability, a 42% improvement in spectral efficiency, sub-millisecond URLLC delays, and a Jain’s fairness index of 0.92, while preserving data privacy. The framework builds upon SDN principles for seamless integration with optical transport infrastructures.
Cyber-physical smart infrastructures integrate sensing devices, communication networks, control components, and service platforms, which makes them vulnerable to malicious activities that may evolve gradually through several attack stages. The objective of this study is to develop and evaluate a simulation-based cybersecurity framework capable of detecting a proposed novel multi-stage cyber attack and identifying its internal progression within a realistic smart infrastructure environment. To achieve this objective, a NetSim-based cyber-physical smart infrastructure was modeled to generate both normal operational traffic and staged malicious traffic. The generated traffic was captured, processed, labeled, and transformed into a stage-aware cybersecurity dataset. An artificial neural network (ANN) model was then trained and evaluated for two detection tasks: binary classification of normal versus attack traffic and multi-class classification of compromise, coordination, and execution attack stages. Twenty experimental configurations were designed to examine the model under progressively broader infrastructure contexts, including sensing, service, gateway, control, backbone, and full-span operational scenarios. The best binary testing performance was achieved in the eighteenth experimental configuration, representing a broad full-span infrastructure scenario, with 97.96% accuracy, 97.80% precision, 97.65% recall, 97.72% F1-score, and 1.06% false positive rate. For stage-aware multi-class detection, the ANN model achieved 96.97% accuracy, 96.36% macro-averaged precision, 96.20% macro-averaged recall, 96.28% macro-averaged F1-score, and 96.55% weighted F1-score. Macro-averaged metrics report the unweighted average performance across classes, while weighted F1-score accounts for class support. These results show that the proposed simulation-based framework can generate realistic attack-aware traffic data and support reliable ANN-based detection of both attack presence and attack-stage progression.
The deployment of 5G technology represents a significant advancement in telecommunications, offering unprecedented speed, connectivity, and innovation opportunities. However, this progress comes at a significant cost for Public Land Mobile Network (PLMN) operators, who face challenges in meeting high Quality of Service (QoS) standards for optimal user experience while ensuring appropriate levels of security. This paper addresses the joint optimization of latency and resource consumption under security constraints within 5G networks, focusing on the Packet Data Unit (PDU) session path to ensure compliance with security and latency requirements. We propose an innovative approach in which access control rules are distributed across User Plane Functions (UPFs) in the network. The optimization problem has been formulated as a mixed integer linear programming (MILP) problem that aims to minimize round-trip latency and operational costs for PLMN operators. We evaluate the performance of our model using a discrete event network simulator (NS3). The simulation results demonstrate the effectiveness of our approach, particularly in scenarios with stringent latency requirements. Latency is reduced, and a lower session drop rate is maintained, especially in conditions of network congestion. These findings emphasize the importance of considering both QoS and security in the design of next-generation 5G networks.
Smart and sustainable mobility increasingly relies on distributed sensing, low-power communication technologies, and cloud-based ICT platforms. This article presents a comprehensive scientific analysis of the technological foundations of sensitized mobility, reviewing the state of the art in embedded sensing, distributed systems, and communication paradigms for future mobility challenges. The research project “MOST” and in particular its subgroup “Spoke 5” falls within this framework of sustainable and sensorized mobility, with numerous activities in data collection, analysis, and field experimentation. In order to allow data collection, retention and analysis, one of the challenges that we must address is the definition of an adequate ICT architecture. The core contribution of this work is the presentation of the MOST ICT architecture, designed as a containerized, scalable, and resilient infrastructure capable of integrating heterogeneous data coming from field-deployed systems. In addition, it discusses the primary research challenges encountered in the definition and development of the presented architecture by examining two representative case studies within the MOST-Spoke 5 research project: renewable energy charging stations for light electric vehicles and cyclists monitoring systems.
Blockchain technology has introduced a rapidly expanding range of consensus mechanisms, each designed to satisfy different operational requirements related to security, scalability, decentralization, transaction throughput, and energy efficiency. Selecting an appropriate consensus mechanism has consequently become a complex multi-criteria decision problem, particularly for developers and organizations without extensive expertise in distributed systems and blockchain architectures. Existing tools primarily address protocol benchmarking and static documentation, leaving the decision-support dimension largely unaddressed. This paper presents a web-based expert system designed to support the selection of blockchain consensus mechanisms according to specific user-defined operational requirements. The proposed solution was implemented using the MERN technology stack, consisting of MongoDB, Express.js, React, and Node.js, enabling a modular and scalable architecture suitable for future expansion and maintenance. The recommendation process is based on a two-phase filtering and scoring algorithm. In the first phase, mechanisms incompatible with mandatory user-defined constraints, including network type and key resource type, are systematically eliminated. In the second phase, the remaining mechanisms are ranked using attribute matching across criteria encompassing energy efficiency, scalability, security, decentralization, and transaction speed. The system returns the three most suitable consensus mechanisms for the given operational scenario together with their key characteristics. In addition to recommendation functionality, the application supports user authentication, recommendation history management, and administrative maintenance of the consensus mechanism database, which currently contains 38 distinct blockchain consensus protocols. Experimental evaluation through twelve representative usage scenarios demonstrated that the system consistently produces contextually relevant recommendations aligned with user-specified requirements. A comparative analysis with existing tools confirms that the proposed system occupies a distinct decision-support role currently absent from the available tooling landscape. A comparative analysis against four representative existing tools indicates that the proposed system combines a set of decision-support capabilities not jointly offered by any one of them. The presented approach contributes a transparent and extensible decision-support framework intended to simplify architectural planning and management of blockchain-based distributed systems.
Secure and trustworthy data exchange across distributed data sources remains a major challenge in the health domain, where strict legal, regulatory, and privacy requirements must be satisfied. Data space technologies provide a promising approach to enabling interoperable and sovereign data sharing among diverse stakeholders while preserving data ownership and regulatory compliance. The NextGEM Innovation and Knowledge Hub (NIKH) was developed as a collaborative ecosystem for FAIR data access and evidence-based health risk assessment. This paper describes the NIKH Data Space (NIKH-DS), the underlying network provisioning platform within NIKH that enables secure data exchange in a health data space environment. The work outlines the key requirements, intended uses, and core implemented functionalities necessary for enabling secure network-provisioned data sharing among distributed data locations. Based on these requirements, a prototype architectural framework is proposed that integrates secure networking and interoperable services. The implementation of the individual components is described, including the data space controller, access control mechanisms, and a user-oriented dashboard that enables data visualization and interaction with distributed data sources. The NIKH-DS platform is validated through a set of case studies that demonstrate the feasibility and effectiveness of the platform in supporting secure, interoperable, and Findable, Accessible, Interoperable and Reusable (FAIR)-compliant health data sharing and risk assessment for the investigation of potential health effects of radio-frequency electromagnetic fields (EMF).
This paper presents an organization-managed IMAP Agent framework for extending email functionality in environments that rely on outsourced mail services. In this study, outsourced mail services refer to externally operated mailbox providers offering sufficiently scalable email infrastructures and standard IMAP interfaces, such as Gmail, Microsoft 365, and other commercial mailbox providers. In the proposed framework, IMAP Agents are operated within an organization, while user authentication continues to rely on existing institutional infrastructures such as Identity Providers (IdP) or Integrated Authentication Infrastructure (IAI). The IMAP Agent operates as a post-authentication processing component using credentials issued by these infrastructures, without modifying or intervening in the outsourced mail service itself. The framework enables organization-managed mailbox-side email processing without requiring administrative control over the mail server or dependence on provider-specific APIs. As a proof of concept, representative email-processing functions are implemented, including detection of suspicious messages based on header-level authentication information and automatic insertion of thread-consistent warning messages without altering the original email content. To evaluate the feasibility of the proposed framework, a prototype system was implemented using multiple containerized IMAP Agent instances. The experimental results showed that warning messages were typically appended within approximately 300 ms after message detection. Multi-container evaluations ranging from 1 to 100 concurrent IMAP Agent instances demonstrated low CPU overhead and approximately linear memory growth under idle-monitoring conditions, indicating the operational feasibility of deploying multiple IMAP Agent instances on a single host. These results suggest that the proposed framework can provide provider-independent and organization-managed extension of email functionality in outsourced mail environments through standard IMAP operations.
Network Intrusion Detection Systems (NIDS) face increasing challenges from sophisticated cyber threats, particularly zero-day attacks that evade signature-based methods. While supervised learning is effective for known attack classification, it struggles with novel threats, whereas anomaly-based approaches suffer from high false positive rates and unstable thresholds. To address these limitations, this paper proposes a decision-level adaptive intrusion-detection framework combining hierarchical CNN-based closed-set classification with autoencoder-based zero-day detection in a cascade architecture. The framework enables deployment-time adaptation by dynamically adjusting class-specific confidence thresholds and fusion parameters without model retraining. Experiments on the CSE-CIC-IDS2018 dataset demonstrate strong closed-set performance, achieving 98.98% accuracy and a macro-F1-score of 0.9342, with improved recall for minority attack classes under adaptive thresholding. Under a zero-day evaluation protocol in which Web_Attacks and Infiltration are excluded from training and validation, the proposed approach achieves an F1-score of 0.9319 while maintaining a low false positive rate of 0.0019. The framework is further evaluated on the Simulated University Network Environment (SUNE) dataset representing campus network traffic, achieving 96.18% closed-set accuracy and 97.54% accuracy in the integrated cascade setting. These results demonstrate that the proposed framework effectively balances minority attack detection, zero-day identification, and false-alarm control in dynamic and resource-constrained network environments.
Vehicular Ad Hoc Networks (VANETs) face significant challenges in high-mobility environments, where dynamic channel conditions, particularly Doppler Shift (DS), degrade communication reliability and increase latency, thereby undermining safety-critical applications. To address these limitations, this paper proposes a neural network (NN)-based link adaptation strategy trained using the Scaled Conjugate Gradient (SCG) algorithm. SCG is selected as a second-order approximation optimizer that leverages curvature information to produce well-conditioned weight updates particularly suited to the small, physics-constrained training dataset. The SCG-optimized model dynamically adjusts transmission parameters to mitigate DS effects, improving real-time adaptability by explicitly incorporating Doppler Shift as a key input feature. Simulation results demonstrate that the proposed approach outperforms both the conventional Auto Rate Fallback (ARF) method and the SampleRate baseline. Specifically, the SCG-based strategy achieves an overall throughput improvement of +34.6% relative to ARF (1.77 Mbps vs. 1.32 Mbps) across all tested conditions, with condition-specific gains of +16.1% at 5 Hz Doppler (0.9 km/h), +21.7% at 750 Hz (137.3 km/h), and +35.2% at 1500 Hz (274.6 km/h), while consistently reducing transmission duration. A formal ablation study confirms that the Doppler Shift feature alone contributes +67% to +78% throughput gain at high mobility (DS > 900 Hz) compared to an SNR-only model. The main contributions of this work are threefold: (i) the explicit integration of Doppler Shift as a first-class input feature for link adaptation; (ii) the application of SCG optimization for fast, stable training of a lightweight feedforward neural network on a compact, physics-constrained dataset; and (iii) the formal ablation study that isolates and quantifies the Doppler feature’s contribution, establishing that the performance gain is attributable to feature engineering rather than the neural network architecture alone. This approach offers a scalable, real-time solution for Doppler-resilient VANET link adaptation.
A coupled multi-stage learning framework is presented for joint bit error rate (BER) prediction and beam angle optimization in massive multiple-input multiple-output (MIMO) systems under a controlled simulation protocol. Unlike purely sequential benchmarking pipelines, the proposed method jointly coordinates BER prediction and beam-angle selection through a shared latent representation, an uncertainty-guided refinement mechanism, a cross-stage consistency loss and alternating optimization. Ten diverse approaches are systematically evaluated across two task-specific stages: Stage 1 examines six classical and adapted methods for BER prediction, including polynomial regression and deep unfolding networks; Stage 2 investigates four machine-learning and generative adversarial network (GAN)-based approaches for angle optimization, including conditional GANs and the proposed Direct-Angle neural network. Stage 3 couples the best-performing methods into a unified hybrid architecture through a shared encoder, explicit consistency regularization and alternating cross-stage updates, thereby producing an integrated beamforming decision strategy rather than an independent cascade. It is shown through the evaluation that the coupled hybrid framework achieves 96.0% overall angle-selection accuracy, a mean BER of 8.0 & times;10-5 and 100% BER tolerance compliance within +/- 3 dB. In this framework, a differentiable BER surrogate initialized from a second-degree polynomial-regression teacher is coupled with the proposed Direct-Angle-NN for angle optimization. Relative to the strongest reimplemented literature baseline under the same controlled simulation assumptions, a 33.3% reduction in mean BER is achieved. Ablation experiments show that the coupling mechanism provides a modest but consistent improvement over the decoupled sequential baseline, increasing angle-selection accuracy from 93.5% to 96.0% and reducing mean BER from 1.05 & times;10-4 to 8.0 & times;10-5; the shared encoder accounts for the largest part of this gain while the consistency loss adds 0.6 percentage points. These results indicate that the shared encoder, consistency regularization and uncertainty-guided refinement improve the final beamforming decision, although the gain should be interpreted as incremental rather than as a large architectural breakthrough. A spectral efficiency of 38.0 bps/Hz and an energy efficiency of 0.466 Gbps/W are achieved with a power consumption of only 32.6 W. The theoretical discussion is presented as an analytical characterization of BER sensitivity, complemented by a computational-complexity assessment and empirical convergence diagnostics for the alternating optimization, rather than as a formal optimality proof. The effectiveness of the framework across multiple performance metrics is supported by Monte Carlo simulations, while the limitations of the current setup, including perfect CSI, uncoded QPSK, ideal hardware assumptions and a fixed beam codebook, are explicitly discussed. The complete simulation framework, including code and trained models, can be made available by the corresponding author upon reasonable request to facilitate reproducible research in massive MIMO optimization.
Antivirus (AV) solutions remain a core defence mechanism against malicious software. However, many of these engines struggle to detect metamorphic malware, which continually alters its internal form in unpredictable ways. To address this limitation, we present an adversarially oriented approach that automatically generates novel malicious variants of existing malware that evade detection by a substantial proportion of AV systems, thereby providing material for strengthening defensive techniques. In this work, an Evolutionary Algorithm (EA) is used to evolve undetectable variants, guided by three fitness criteria: the evasiveness of the produced samples, and their behavioural and structural similarity to the original malware. The proposed method is assessed across three malware families to evaluate the effectiveness of the EA-generated variants. Results indicate that the EA produces diverse mutant variants capable of evading up to 94% of AV detectors for a given malware family, significantly surpassing the evasion rate of the original malware. Furthermore, we evaluated whether the mutants produced by the EA could enhance the training of machine learning models. In this context, a pretrained Natural Language Processing (NLP) transformer was employed within a transfer learning framework to improve the classification of metamorphic malware. When the evolved variants were incorporated into the training data, the approach achieved classification accuracies of up to 93%. These results highlight the value of using diverse EA-generated samples to strengthen malware classifiers, thereby improving the robustness of security systems against evolving threats.
A discrete Hartley transform (DHT)-based orthogonal frequency division multiplexing (OFDM) scheme is investigated for intensity modulation/direct detection (IM/DD) visible light communication (VLC) systems, where transmitted signals are required to be real-valued and non-negative. To address this constraint, a practical unipolar transmission framework with corresponding bipolar reconstruction is developed. By exploiting the real-valued and self-inverse properties of the DHT, the proposed scheme removes the need for Hermitian symmetry and enables full utilization of available subcarriers. Under equal-bandwidth conditions, this results in an approximately 50% reduction in computational complexity compared with conventional DCO-OFDM and ACO-OFDM schemes. Theoretical analysis and numerical results further show that the proposed approach achieves comparable bit error rate (BER) performance while exhibiting improved spectral confinement, as reflected by reduced out-of-band sidelobes under identical filtering conditions. In addition, it maintains spectral efficiency equivalent to DCO-OFDM under the same bandwidth constraint. These advantages are achieved at the cost of restricting subcarrier modulation to real-valued constellations, which may reduce flexibility in frequency-selective channels. Overall, these findings support DHT-OFDM as a low-complexity, spectrally confined multicarrier waveform for IM/DD VLC systems, particularly in scenarios where efficient spectrum utilization and reduced adjacent-channel interference are required.
Over the last two decades, the automotive industry has spearheaded a shift toward data-centric manufacturing, where Real-Time Ethernet (RTE) networks defined in IEC61784-2 serve as critical components for ensuring deterministic communication at the Operation Technology level. Although AI-based systems offer significant potential for predictive maintenance and cybersecurity, their effectiveness is currently limited by a lack of structured datasets from real-world industrial environments. Most existing research relies on small-scale simulations or laboratory setups that fail to capture the scale and complexity of actual production. To address this gap, this paper introduces a novel methodology for repurposing network data collected throughout a plant’s lifecycle, specifically during the commissioning and validation phases of RTE networks according to IEC61918. An additional important contribution is the creation of the first multi-plant dataset for real RTE (PROFINET) traffic in the automotive sector, aggregating 300 GB of data from 54,000+ devices across nearly 700 production lines in 17 industrial sites. The work defines standardized methodologies and replicable processes for systematic data acquisition, validation, and labeling to ensure long-term usability for training AI models. Finally, four case studies (focused on performance, maintenance, security, and machine learning) show how this dataset can be used to enhance the reliability of modern smart manufacturing.
Fifth-generation (5G) mobile networks must simultaneously satisfy stringent latency targets, high user density, and energy-aware operation across heterogeneous services. Cloud Radio Access Networks (C-RAN) provide architectural flexibility through centralized baseband processing, but they also introduce new control challenges related to fronthaul constraints, dynamic traffic variations, and joint radio-compute coordination with Mobile Edge Computing (MEC). This paper proposes a unified AI-driven optimization framework for adaptive 5G C-RAN management, where the controller dynamically tunes key system decisions-including functional split selection, TDD downlink ratio, user-RU association, fronthaul load management, and MEC offloading proportion. To enable fair benchmarking under identical simulation settings, a static baseline policy is compared against five adaptive control strategies: Deep Q-Network (DQN), Proximal Policy Optimization (PPO), Deep Deterministic Policy Gradient (DDPG), Multi-Objective Reinforcement Learning (MORL), and a Deterministic Service-Level Agreement (SLA)-aware controller Penalty-Constrained Hierarchical Action Controller (PCHAC). Performance evaluation across techno-economic and service KPIs shows that intelligent control significantly improves operational profit, tail-latency behavior, and energy efficiency while enhancing SLA compliance compared with non-adaptive operation. The results highlight the practicality of multi-objective and constraint-aware learning for next-generation C-RAN orchestration under scaling traffic demand.
