journal article·2025-08-07Open access

A Multimodal Framework for Advanced Cybersecurity Threat Detection Using GAN-Driven Data Synthesis

Nikolaos Peppes, Emmanouil Daskalakis, Theodoros Alexakis, Evgenia Adamopoulou

Applied Sciences· Volume 15· Issue 15

Abstract

Cybersecurity threats are becoming increasingly sophisticated, frequent, and diverse, posing a major risk to critical infrastructure, public trust, and digital economies. Traditional intrusion detection systems often struggle with detecting novel or rare attack types, particularly when data availability is limited or heterogeneous. The current study tries to address these challenges by proposing a unified, multimodal threat detection framework that leverages the combination of synthetic data generation through Generative Adversarial Networks (GANs), advanced ensemble learning, and transfer learning techniques. The research objective is to enhance detection accuracy and resilience against zero-day, botnet, and image-based malware attacks by integrating multiple data modalities, including structured network logs and malware binaries, within a scalable and flexible pipeline. The proposed system features a dual-branch architecture: one branch uses a CNN with transfer learning for image-based malware classification, and the other employs a soft-voting ensemble classifier for tabular intrusion detection, both trained on augmented datasets generated by GANs. Experimental results demonstrate significant improvements in detection performance and false positive reduction, especially when multimodal outputs are fused using the proposed confidence-weighted strategy. The findings highlight the framework’s adaptability and practical applicability in real-world intrusion detection and response systems.
Source: crossref · Quality: baseline

Research context

OpenAlex topics: Network Security and Intrusion Detection · Advanced Malware Detection Techniques · Anomaly Detection Techniques and Applications

SciVX discovery tags are terminology-based. OpenAlex topics are source-provided classifications.

Affiliations

Institute of Communication and Computer Systems, National Technical University of Athens, 15773 Athens, Greece

References (45)

Show source-provided references
1. Fleck, A. (2025, June 20). Cybercrime Expected To Skyrocket in Coming Years. Statista, Available online: https://www.statista.com/chart/28878/expected-cost-of-cybercrime-until-2027.
2. (2025, June 20). Worldometer GDP by Country. Available online: https://www.worldometers.info/gdp/gdp-by-country/.
3. IBM (2024). Cost of a Data Breach Report 2024, IBM Corporation.
4. Griffiths, C. (2025). The Latest 2025 Phishing Statistics (Updated June 2025), AAG.
5. IBM (2024). X-Force Threat Intelligence Index 2024, IBM Corporation.
6. SlashNext (2024). The State of PHISHING 2024 Mid-Year Assessment, SlashNext. The State of Phishing.
7. SonicWall (2025). 2025 Cyber Threat Report the Need for Speed and Strong Allies to Overcome the Cybersecurity Battlefield, SonicWall. Cyber Threat Report.
8. Machine Learning for Cybersecurity: A Bibliometric Analysis from 2019 to 2023
9. Goodfellow, I.J., Pouget-Abadie, J., Mirza, M., Xu, B., Warde-Farley, D., Ozair, S., Courville, A., and Bengio, Y. (2014). Generative Adversarial Networks. arXiv.
10. Malware Image Generation and Detection Method Using Dcgans and Transfer Learning10.1109/ACCESS.2023.3319436 ↗
11. Peppes, N., Alexakis, T., Adamopoulou, E., and Demestichas, K. (2023). The Effectiveness of Zero-Day Attacks Data Samples Generated via GANs on Deep Learning Classifiers. Sensors, 23.10.3390/s23020900 ↗
12. Peppes, N., Daskalakis, E., Alexakis, T., Adamopoulou, E., and Demestichas, K. (2021). Performance of Machine Learning-Based Multi-Model Voting Ensemble Methods for Network Threat Detection in Agriculture 4.0. Sensors, 21.10.3390/s21227475 ↗
13. Mu, Z., Shi, X., and Dogan, S. (2024, January 24–27). Information System Security Reinforcement with WGAN-GP for Detection of Zero-Day Attacks. Proceedings of the 2024 7th International Conference on Artificial Intelligence and Big Data (ICAIBD), Chengdu, China.10.1109/ICAIBD62003.2024.10604482 ↗
14. Zhang, C., Ruan, F., Yin, L., Chen, X., Zhai, L., and Liu, F. (2019, January 25–27). A Deep Learning Approach for Network Intrusion Detection Based on NSL-KDD Dataset. In Proceedings of 2019 IEEE 13th International Conference on Anti-Counterfeiting, Security, and Identification (ASID), Xiamen, China.10.1109/ICASID.2019.8925239 ↗
15. System Call Frequency Analysis-Based Generative Adversarial Network Model for Zero-Day Detection on Mobile Devices
16. Heusel, M., Ramsauer, H., Unterthiner, T., Nessler, B., and Hochreiter, S. (2017, January 4–9). GANs Trained by a Two Time-Scale Update Rule Converge to a Local Nash Equilibrium. Proceedings of the 31st International Conference on Neural Information Processing Systems (NIPS’17), Long Beach, CA, USA.
17. Salimans, T., Goodfellow, I., Zaremba, W., Cheung, V., Radford, A., Chen, X., and Chen, X. (2016, January 5–10). Improved Techniques for Training Gans. Proceedings of the 30th Conference of Neural Information Processing Systems (NIPS 2016), Barcelona, Spain.
18. PlausMal-GAN: Plausible Malware Training Based on Generative Adversarial Networks for Analogous Zero-Day Malware Detection10.1109/TETC.2022.3170544 ↗
19. Alabrah, A. (2022). A Novel Study: GAN-Based Minority Class Balancing and Machine-Learning-Based Network Intruder Detection Using Chi-Square Feature Selection. Appl. Sci., 12.10.3390/app122211662 ↗
20. Benaddi, H., Jouhari, M., Ibrahimi, K., Benslimane, A., and Amhoud, E.M. (2022, January 4–8). Adversarial Attacks against IoT Networks Using Conditional GAN Based Learning. Proceedings of the GLOBECOM 2022–2022 IEEE Global Communications Conference, Rio de Janeiro, Brazil.10.1109/GLOBECOM48099.2022.10000726 ↗
21. Saurabh, K., Singh, A., Singh, U., Vyas, O.P., and Khondoker, R. (2022, January 1–3). GANIBOT: A Network Flow Based Semi Supervised Generative Adversarial Networks Model for IoT Botnets Detection. Proceedings of the 2022 IEEE International Conference on Omni-layer Intelligent Systems (COINS), Barcelona, Spain.10.1109/COINS54846.2022.9854947 ↗
22. Li, M., Luo, L., Xiao, K., Wang, G., and Wang, Y. (2025). Adaptive Semi-Supervised Algorithm for Intrusion Detection and Unknown Attack Identification. Appl. Sci., 15.10.3390/app15041709 ↗
23. Rosay, A., Cheval, E., Carlier, F., and Leroux, P. (2025, January 14–16). Network Intrusion Detection: A Comprehensive Analysis of CIC-IDS2017. Proceedings of the 8th International Conference on Information Systems Security and Privacy, Oxford, UK.
24. Zelichenok, I., and Kotenko, I. (2024, January 13–15). Kitsune Dataset Analysis via BigData and Deep Learning Techniques. Proceedings of the 2024 IEEE Ural-Siberian Conference on Biomedical Engineering, Radioelectronics and Information Technology (USBEREIT), Yekaterinburg, Russia.10.1109/USBEREIT61901.2024.10584030 ↗
25. Chu, H.-C., and Lin, Y.-J. (2023). Improving the IoT Attack Classification Mechanism with Data Augmentation for Generative Adversarial Networks. Appl. Sci., 13.10.3390/app132312592 ↗
26. Towards the Development of Realistic Botnet Dataset in the Internet of Things for Network Forensic Analytics: Bot-IoT Dataset10.1016/j.future.2019.05.041 ↗
27. Tareq, I., Elbagoury, B.M., El-Regaily, S., and El-Horbaty, E.-S.M. (2022). Analysis of ToN-IoT, UNW-NB15, and Edge-IIoT Datasets Using DL in Cybersecurity for IoT. Appl. Sci., 12.10.3390/app12199572 ↗
28. Detection of Zero-Day Attacks via Sample Augmentation for the Internet of Vehicles
29. Synthetic Attack Data Generation Model Applying Generative Adversarial Network for Intrusion Detection10.1016/j.cose.2022.103054 ↗
30. DGM: A Data Generative Model to Improve Minority Class Presence in Anomaly Detection Domain10.1007/s00521-021-05993-w ↗
31. An Unsupervised Generative Adversarial Network System to Detect DDoS Attacks in SDN10.1109/ACCESS.2024.3402069 ↗
32. Deep Reinforcement Learning Based Evasion Generative Adversarial Network for Botnet Detection10.1016/j.future.2023.09.011 ↗
33. Evasion Generative Adversarial Network for Low Data Regimes10.1109/TAI.2022.3196283 ↗
34. Botnet Detection and Information Leakage Mitigation with Differential Privacy Under Generative Adversarial Networks10.1007/s10586-024-04740-9 ↗
35. Ensemble Machine Learning Techniques for Accurate and Efficient Detection of Botnet Attacks in Connected Computers10.3390/eng4010039 ↗
36. Abu Al-Haija, Q., and Al-Dala’ien, M. (2022). ELBA-IoT: An Ensemble Learning Model for Botnet Attack Detection in IoT Networks. J. Sens. Actuator Netw., 11.10.3390/jsan11010018 ↗
37. Hossain, M.A., and Islam, M.S. (2023). A Novel Hybrid Feature Selection and Ensemble-Based Machine Learning Approach for Botnet Detection. Sci. Rep., 13.10.1038/s41598-023-48230-1 ↗
38. Enhancing the Security in Cyber-World by Detecting the Botnets Using Ensemble Classification Based Machine Learning10.1016/j.measen.2022.100624 ↗
39. Peppes, N., Alexakis, T., Demestichas, K., and Adamopoulou, E. (2023). A Comparison Study of Generative Adversarial Network Architectures for Malicious Cyber-Attack Data Generation. Appl. Sci., 13.10.3390/app13127106 ↗
40. Fränti, P., Brown, G., Loog, M., Escolano, F., and Pelillo, M. (2014). Majority Vote of Diverse Classifiers for Late Fusion. Structural, Syntactic, and Statistical Pattern Recognition, Springer.10.1007/978-3-662-44415-3 ↗
41. Schörgendorfer, A., and Elmenreich, W. (2006, January 19–21). Extended Confidence-Weighted Averaging in Sensor Fusion. Proceedings of the Junior Scientist Conference 2006, Vienna, Austria.
42. Fusion of Continuous-Valued Sensor Measurements Using Confidence-Weighted Averaging10.1177/1077546307077457 ↗
43. Bayesian Inference Approach for Information Fusion in Distribution System State Estimation10.1109/TSG.2021.3128053 ↗
44. Dempster-Shafer Theory for Sensor Fusion in Autonomous Mobile Robots10.1109/70.681240 ↗
45. Zemirline, A., Lecornu, L., and Solaiman, B. (2007, January 9–12). Rule-Based Diagnostic System Fusion. Proceedings of the 2007 10th International Conference on Information Fusion, Québec City, QC, Canada.10.1109/ICIF.2007.4408205 ↗