A lightweight attention-based hybrid GhostNet model for enhanced IoT threat detection

Abdallah Altrad, Saed Adnan Mustafa, Malik Jawarneh and Wael Alniamat

Technological Sustainability, 2026, vol. 5, issue 2, 154-170

Abstract: PurposeInternet of things (IoT) networks have grown cyber-attack exponentially, which demands efficient intrusion detection systems with high accuracy and interpretability. Existing deep learning (DL) techniques are usually heavily computationally expensive and non-interpretable and therefore are not viable in resource-constrained IoT scenarios.Design/methodology/approachTo bridge this gap, this paper introduces sustainable lightweight attention-based GhostNet-LSTM (LAGL), a novel hybrid model which consists of an efficient lightweight GhostNet structure for extracting features, a long short-term memory network to capture temporal information and an attention mechanism to enhance both detection accuracy and model interpretability. The LAGL model was evaluated on the large-scale CICIoT2023 dataset and showed improved performance over the baseline CNN-LSTM model.FindingsThis essential reduction in model complexity directly explains lower memory requirements and faster processing. The model supports sustainability in computing of the IoT systems; thus, it is highly suitable for deployment on resource-constrained IoT gateways where traditional DL models are often infeasible. The attention weights also provide crucial insights into the model’s decision-making process, addressing the critical black-box problem. The first specific quantitative finding showed that the LAGL model achieved a higher F1 score (0.9844) than the baseline CNN-LSTM, demonstrating superior classification performance. This reduced the trainable parameters by 27.3%, a demonstration of its ability to provide the best balance solution for deploying real-world IoT security applications.Originality/valueIn addition to computational effectiveness, in this paper, the model is viewed as a design that relies on limited intelligence, energy sensitivity, interpretability and long-term operation sustainability. LAGL model purposefully avoids extensive complexity, hence promoting responsible, goal-oriented AI implementation, but not just trying to maximize its performance. The proposed model can not only support explainable, real-time intrusion detection at the IoT edge but also support human-in-the-loop security processes and reduce energy usage, hardware reliance and lifecycle costs at the same time.

Keywords: Internet of things (IoT); Intrusion detection systems (IDS); Lightweight attention-based GhostNet-LSTM (LAGL); Deep learning; Explainable AI; Technological sustainability (search for similar items in EconPapers)
Date: 2026
References: Add references at CitEc
Citations:

Downloads: (external link)
https://www.emerald.com/techs/article/5/2/154/1357 ... ased-hybrid-GhostNet (text/html)
https://www.emerald.com/techs/article-pdf/5/2/154/ ... s-10-2025-0233en.pdf (application/pdf)

Related works:
This item may be available elsewhere in EconPapers: Search for items with the same title.

Export reference: BibTeX RIS (EndNote, ProCite, RefMan) HTML/Text

Persistent link: https://EconPapers.repec.org/RePEc:eme:techsp:techs-10-2025-0233

DOI: 10.1108/TECHS-10-2025-0233

Access Statistics for this article

Technological Sustainability is currently edited by Dr Shahla Seifi

More articles in Technological Sustainability from Emerald Group Publishing Limited
Bibliographic data for series maintained by Emerald Support ().