Operational Internet of Things Intrusion Detection Under Domain Shift with a Lipschitz-Constrained Markov Decision Process Decoder
Intrusion detection for Internet of Things (IoT) networks must operate at a very low false-positive rate (FPR): attacks are rare, so even a small FPR floods analysts with alerts and a detection score is useful for triage only if it behaves like a real risk estimate. This study treats these two constraints as first-clas...