Deep Feature Fusion via Transfer Learning for Multi-Class Network Intrusion Detection
Source abstract
Abstract
With the rapid advancement of network technologies, cyberthreats have become increasingly sophisticated, posing significant challenges to traditional intrusion detection systems. Conventional machine learning and deep learning approaches frequently experience performance degradation when confronted with imbalanced datasets and novel attack vectors. To address these limitations, this study proposes a deep learning-based intrusion detection framework that employs feature fusion through incremental transfer learning between source and target domains. The proposed architecture integrates convolutional neural networks (CNNs) with an attention mechanism to extract and aggregate salient features, thereby enhancing the model’s discriminative capacity between normal traffic and various network attack categories. Experimental results demonstrate that the proposed model achieves a detection accuracy of 94.21% even when trained on only 33% of the available data, outperforming conventional models. These findings underscore the effectiveness of the proposed feature fusion strategy via transfer learning in improving detection capabilities within dynamic and evolving cyberthreat environments.
Source: crossref · Quality: baseline
Research context
OpenAlex topics: Network Security and Intrusion Detection · Internet Traffic Analysis and Secure E-voting · Anomaly Detection Techniques and Applications
SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.
Affiliations
Department of AI and Big Data Engineering, Daegu Catholic University, Gyeongsan-si 38430, Republic of Korea
Electronics and Telecommunications Research Institute, Daejeon 34129, Republic of Korea
Department of Computer Education, Korea National University of Education, Cheongju-si 28173, Republic of Korea
Funding
Institute of Information & Communications Technology Planning & Evaluation (IITP)
References (40)
Show source-provided references
1. Dutton, W.H., and Peltu, M. (1996). Information and Communication Technologies: Visions and Realities, Oxford University Press.10.1093/oso/9780198774594.001.0001 ↗
2. Evolving malware and DDoS attacks: Decadal longitudinal study10.1109/ACCESS.2024.3376682 ↗
3. Securing the digital world: Protecting smart infrastructures and digital industries with artificial intelligence (AI)-enabled malware and intrusion detection
4. Comparative research on network intrusion detection methods based on machine learning10.1016/j.cose.2022.102861 ↗
5. Zaman, M., and Lung, C.-H. (2018, January 23–27). Evaluation of Machine Learning Techniques for Network Intrusion Detection. Proceedings of the NOMS 2018—2018 IEEE/IFIP Network Operations and Management Symposium, Taipei, Taiwan.10.1109/NOMS.2018.8406212 ↗
6. Sikos, L. (2018). Machine learning algorithms for network intrusion detection. AI in Cybersecurity, Springer. Intelligent Systems Reference Library.10.1007/978-3-319-98842-9 ↗
7. Network intrusion detection system using deep learning10.1016/j.procs.2021.05.025 ↗
8. Cantone, M., Marrocco, C., and Bria, A. (2024). On the cross-dataset generalization of machine learning for network intrusion detection. arXiv.10.1109/ACCESS.2024.3472907 ↗
9. Mehedi, S.T., Anwar, A., Rahman, Z., and Ahmed, K. (2021). Deep transfer learning based intrusion detection system for electric vehicular networks. Sensors, 21.10.3390/s21144736 ↗
10. Machine learning-enabled hybrid intrusion detection system with host data transformation and an advanced two-stage classifier10.1016/j.comnet.2024.110576 ↗
11. Selvam, R., and Velliangiri, S. (2024, January 15–16). An Improving Intrusion Detection Model Based on Novel CNN Technique Using Recent CIC-IDS Datasets. Proceedings of the 2024 International Conference on Distributed Computing and Optimization Techniques (ICDCOT), Bengaluru, India.
12. Bhattacharyya, D., and Thirupathi Rao, N. (2021). A Two-Level Hybrid Intrusion Detection Learning Method. Machine Intelligence and Soft Computing, Proceedings of the ICMISC 2021, Guntur, India, 22–24 September 2021, Springer.10.1007/978-981-15-9516-5 ↗
13. Transfer learning in environmental remote sensing10.1016/j.rse.2023.113924 ↗
14. A transfer learning-based intrusion detection system for zero-day attack in communication-based train control system10.1007/s10586-024-04376-9 ↗
15. Transfer learning based intrusion detection scheme for Internet of vehicles10.1016/j.ins.2020.05.130 ↗
16. DFN-PSAN: Multi-level deep information feature fusion extraction network for interpretable plant disease classification10.1016/j.compag.2023.108481 ↗
17. Jabeen, K., Khan, M.A., Alhaisoni, M., Tariq, U., Zhang, Y.-D., Hamza, A., Mickus, A., and Damaševičius, R. (2022). Breast cancer classification from ultrasound images using probability-based optimal deep learning feature fusion. Sensors, 22.10.3390/s22030807 ↗
18. MFFSP: Multi-scale feature fusion scene parsing network for landslides detection based on high-resolution satellite images10.1016/j.engappai.2023.107337 ↗
19. ADED: Method and device for automatically detecting early depression using multimodal physiological signals evoked and perceived via various emotional scenes in virtual reality
20. Han, Y., Choi, Y., Lee, J., and Bae, J.-H. (2025). Feature fusion model using transfer learning and bidirectional attention mechanism for plant pipeline leak detection. Appl. Sci., 15.10.3390/app15020490 ↗
21. Mori, P., Furnell, S., and Camp, O. (2019). Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization. Proceedings of the 4th International Conference on Information Systems Security and Privacy (ICISSP 2018), Funchal–Madeira, Portugal, 22–24 January 2018, Springer.10.1007/978-3-030-25109-3 ↗
22. (2025, April 22). The CIC-IDS2017 Dataset and CIC-IDS2018 Dataset. Available online: https://www.unb.ca/cic/datasets/index.html.
23. Francazi, E., Baity-Jesi, M., and Lucchi, A. (2024). A theoretical analysis of the learning dynamics under class imbalance. arXiv.
24. New metric formulas that include measurement errors in machine learning for natural sciences10.1016/j.eswa.2023.120013 ↗
25. Ayinde, B.O., and Zurada, J.M. (2018). Building efficient ConvNets using redundant feature pruning. arXiv.
26. Learning from imbalanced data10.1109/TKDE.2008.239 ↗
27. Data oversampling and imbalanced datasets: An investigation of performance for machine learning and feature engineering10.1186/s40537-024-00943-4 ↗
28. Under sampling techniques for handling unbalanced data with various imbalance rates: A comparative study
29. Clustering based under-sampling for imbalanced data classification
30. A pre-processing study to solve the problem of rare class classification of network traffic data
31. The choice of scaling technique matters for classification performance10.1016/j.asoc.2022.109924 ↗
32. Vaswani, A., Shazeer, N., Parmar, N., Uszkoreit, J., Jones, L., Gomez, A.N., Kaiser, L., and Polosukhin, I. (2023). Attention is all you need. arXiv.
33. Parallel convolutional transfer network for bearing fault diagnosis under varying operation states
34. A comprehensive review of transfer learning on deep convolutional neural network models10.30534/ijatcse/2020/196952020 ↗
35. Mungoli, N. (2023). Adaptive ensemble learning: Boosting model performance through intelligent feature fusion in deep neural networks. arXiv.
36. Al-Deen, H.S.S., Zeng, Z., Al-Sabri, R., and Hekmat, A. (2021). An improved model for analyzing textual sentiment based on a deep neural network using multi-head attention mechanism. Appl. Syst. Innov., 4.10.3390/asi4040085 ↗
37. Roy, S., Mehera, R., Pal, R.K., and Bandyopadhyay, S.K. (2023). Hyperparameter optimization for deep neural network models: A comprehensive study on methods and techniques. Innov. Syst. Softw. Eng.10.1007/s11334-023-00540-3 ↗
38. Fix, E., and Hodges, J.L. (1951). Discriminatory Analysis. Nonparametric Discrimination: Consistency Properties, USAF School of Aviation Medicine.10.1037/e471672008-001 ↗
39. The regression analysis of binary sequences10.1111/j.2517-6161.1958.tb00292.x ↗
40. Support-vector networks10.1007/BF00994018 ↗