journal article·2025Open access

Addressing Modern Cybersecurity Challenges: A Hybrid Machine Learning and Deep Learning Approach for Network Intrusion Detection

Khadija Bouzaachane, El Mahdi El Guarmah, Abdullah M. Alnajim, Sheroz Khan

Computers, Materials & Continua· Volume 84· Issue 2

Abstract

The rapid increase in the number of Internet of Things (IoT) devices, coupled with a rise in sophisticated cyberattacks, demands robust intrusion detection systems. This study presents a holistic, intelligent intrusion detection system. It uses a combined method that integrates machine learning (ML) and deep learning (DL) techniques to improve the protection of contemporary information technology (IT) systems. Unlike traditional signature-based or single-model methods, this system integrates the strengths of ensemble learning for binary classification and deep learning for multi-class classification. This combination provides a more nuanced and adaptable defense. The research utilizes the NF-UQ-NIDS-v2 dataset, a recent, comprehensive benchmark for evaluating network intrusion detection systems (NIDS). Our methodological framework employs advanced artificial intelligence techniques. Specifically, we use ensemble learning algorithms (Random Forest, Gradient Boosting, AdaBoost, and XGBoost) for binary classification. Deep learning architectures are also employed to address the complexities of multi-class classification, allowing for fine-grained identification of intrusion types. To mitigate class imbalance, a common problem in multi-class intrusion detection that biases model performance, we use oversampling and data augmentation. These techniques ensure equitable class representation. The results demonstrate the efficacy of the proposed hybrid ML-DL system. It achieves significant improvements in intrusion detection accuracy and reliability. This research contributes substantively to cybersecurity by providing a more robust and adaptable intrusion detection solution.
Source: openalex_inverted_index · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Anomaly Detection Techniques and Applications · Internet Traffic Analysis and Secure E-voting

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

References (35)

Show source-provided references
1. Radoglou Grammatikis · Sensors · 2020 · 20 · 530510.3390/s20185305 ↗
2. A survey on cyber security for smart grid communications10.1109/SURV.2012.010912.00035 ↗
3. Ensemble model based on hybrid deep learning for intrusion detection in smart grid networks10.3390/s23177464 ↗
4. Internet of things (IoT): a survey
5. Deep learning in mobile and wireless networking: a survey10.1109/COMST.2019.2904897 ↗
6. Detecting cybersecurity attacks in Internet of Things using artificial intelligence methods: a systematic literature review10.3390/electronics11020198 ↗
7. Cross-datasets evaluation of machine learning models for intrusion detection systems
8. The cross-evaluation of machine learning-based network intrusion detection systems10.1109/TNSM.2022.3157344 ↗
9. Applications of machine learning in cyber security: a review10.3390/jcp4040045 ↗
10. Luay M, Layeghy S, Hosseininoorbin S, Sarhan M, Moustafa N, Portmann M. Temporal analysis of NetFlow datasets for network intrusion detection systems. arXiv:2503.04404. 2025.
11. Performance analysis of machine learning algorithms in intrusion detection system: a review10.1016/j.procs.2020.04.133 ↗
12. Benchmarking of machine learning for anomaly based intrusion detection systems in the CICIDS2017 dataset10.1109/ACCESS.2021.3056614 ↗
13. Machine learning for network intrusion detection—a comparative study10.3390/fi15070243 ↗
14. CICIDS-2017 dataset feature analysis with information gain for anomaly detection10.1109/ACCESS.2020.3009843 ↗
15. Evaluation of machine learning algorithms for anomaly detection
16. Machine learning methods for cyber security intrusion detection: datasets and comparative study10.1016/j.comnet.2021.107840 ↗
17. Network intrusion detection using oversampling technique and machine learning algorithms10.7717/peerj-cs.820 ↗
18. Impact of data balancing and feature selection on machine learning-based network intrusion detection10.30630/joiv.7.1.1041 ↗
19. An effective intrusion detection model for class-imbalanced learning based on SMOTE and attention mechanism
20. Network intrusion detection using machine learning approaches: addressing data imbalance10.1049/cps2.12013 ↗
21. Increasing the performance of machine learning-based IDSs on an imbalanced and up-to-date dataset10.1109/ACCESS.2020.2973219 ↗
22. Deep learning for cyber security intrusion detection: approaches, datasets, and comparative study
23. A method for network intrusion detection based on GAN-CNN-BiLSTM
24. Hybrid intrusion detection system based on data resampling and deep learning
25. Enhanced intrusion detection with LSTM-based model, feature selection, and SMOTE for imbalanced data10.3390/app14020479 ↗
26. A novel two-stage deep learning model for network intrusion detection: lSTM-AE10.1109/ACCESS.2023.3266979 ↗
27. Towards a standard feature set for network intrusion detection system datasets
28. Securing mobile edge computing using hybrid deep learning method10.3390/computers13010025 ↗
29. Gu Z, Lopez DT, Alrahis L, Sinanoglu O. Always be pre-training: representation learning for network intrusion detection with GNNs. arXiv:2402.18986v1. 2024.10.1109/ISQED60706.2024.10528371 ↗
30. Sarhan · Big data technologies and applications · 2021 · 11710.1007/978-3-030-72802-1_9 ↗
31. Dataset selection for attacker group identification methods
32. UNSW-NB15 computer security dataset: analysis through visualization10.1002/spy2.331 ↗
33. An analysis of cyber security attack taxonomies
34. Ben Fredj · Risks and security of internet and systems · 2021 · 23510.1007/978-3-030-68887-5_14 ↗
35. Evaluation metrics for intrusion detection systems—a study