Intrusion Detection System Model Research Articles

Intrusion detection in cluster‐based wireless sensor networks: Current issues, opportunities and future research directions

AbstractWireless sensor network (WSN) cluster‐based architecture is a system designed to control and monitor specific events or phenomena remotely, and one of the important concerns that need quick attention is security risks such as an intrusion in WSN traffic. At the same time, a high‐level security method may refer to an intrusion detection system|intrusion detection systems (IDS), which may be employed effectively to achieve a higher level of security in detecting an intruder attack or any attack initiated within a WSN system. The significance of the detection of network intrusions on heterogeneous cluster‐based sensor networks with wireless connections, as well as the approaches to machine learning utilised in IDS model development, were discussed. In addition, this research conducted several comparative studies of feature selection techniques and machine learning methodologies in the development of intrusion detection systems. The authors used a bibliometric indicator to identify the leading trends when it comes to IDS, and the VOS viewer was used to create a spatial mapping of co‐authorship, co‐occurrence, and citation types of analysis with their respective units of study. The purpose of this research paper is to generate relevant findings and a research problem formulation that can lead to a research gap in the research topic's domain area.

Multi-Agent Locally Trained Progressive Instance Selected Assisted Federated Learning Architecture for Intrusion Detection in Industrial-IoT

In this work the focus is made on designing and developing a robust federated learning model (FLM) and architecture for multi-type network intrusion detection system (MT-NIDS) for IIoT applications. Unlike traditional intrusion detection systems, where the key focus is made on detecting and classifying single type of intrusion or attack condition, this research targets to perform multi-type network intrusion detection. This as a result can contribute a fit-to-all NIDS solution for IIoT environment.

Fed-Evolver: An automated evolving approach for federated Intrusion Detection System using adversarial autoencoder in SDN-enabled networks

Intrusion Detection Systems (IDS) have garnered escalating significance in response to the evolving landscape of cyberattacks, driven by the adaptability and versatility of Software Defined Networking (SDN)-based networks in enhancing security orchestration. Although Machine Learning (ML) models have been developed for IDS, they require large amounts of labeled data to achieve high performance. However, acquiring labels for attacks is a time-consuming process and can cause problems in deploying the existing ML models in new systems or lower performance due to a shortage of labeled data on pre-trained datasets. Additionally, such ML-based IDS models lack the self-learning function to automatically adapt to new cyberattacks during network operations. To overcome these challenges, our work proposes Fed-Evolver, an automated evolving approach for federated IDS that combines Generative Adversarial Networks (GANs) with Auto Encoder (AE) and a semi-supervised adversarial Autoencoder (SSAAE) for spotting intrusion actions. Our Fed-Evolver leverages supervised and unsupervised learning strategies to build efficient IDS models in the context of labeled data scarcity with the help of Federated Learning (FL). It allows data owners to collaborate for training intrusion detection models to provide the self-evolving capability in SDN-enabled networks. Our proposed framework is evaluated on 6 cyberattack datasets, including CICIDS2018, CIC-ToN-IoT, NF-UNSW-NB15, InSDN, InSecLab-IDS2021, DNP3 Intrusion Detection, and it outperforms other ML methods even when trained with only 1% proportion of labeled data, achieving consistently high performance across all metrics on the datasets.

An adaptive multistage intrusion detection and prevention system in software defined networking environment

The advancements made in Software-Defined Networking (SDN) technology seem quite promising, with potential wide application in managing and controlling the latest network infrastructures. SDN technology decouples the control plane from the data plane, enabling effective and flexible network management. However, this dynamic phenomenon brings new security challenges. With the increasing dynamism and programmable nature of networks, conventional security protocols may not sufficient to protect against advanced and sophisticated attacks. Although Intrusion Detection Systems (IDSs) have been extensively applied for identifying and preventing security threats in traditional network environments, IDS models designed specifically for traditional network requirements may not be adequate for SDN environments. These issues may stem from the static nature of conventional networks, contrasting with the dynamicity of advanced SDN networks, and the traditional IDS’s inability to adapt to the dynamic nature of SDN. To address these challenges, the current research proposes a novel Deep Hybrid IDS model to enhance network security in SDN environments and prevent attacks using Scapy. The proposed model detects signature-based attacks by integrating Gated Recurrent Units (GRU) and Long Short-Term Memory (LSTM) for real-time simulated datasets, achieving an accuracy of 97.8%, which is comparatively better than existing models.

Intrusion Detection System Using Chaotic Walrus Optimization-based Convolutional Echo State Networks for IoT-assisted Wireless Sensor Networks

Wireless Sensor Networks (WSN) based Internet of Things (IoT) networks have achieved greater research interest due to their multi-purpose data collection and transmission over different geographical locations. However, the fabrication of different cyber-attacks in these networks has been a severe concern for applications such as remote healthcare, military communications, etc. These attacks question the integrity and security of WSN-IOT networks for such applications, and the traditional Intrusion Detection Systems (IDS) have shown increased false alarm rates because of their substantial processing overhead, resource constraints, and low detection rates. This paper presents an intelligent IDS model using Chaotic Walrus Optimization-based Convolutional Echo State Networks (CWO-CESN) to solve existing problems. It increases the detection accuracy of different attacks. In this CWO-CESN-based IDS model, the data are gathered from the sensor/IoT nodes and are pre-processed. Then, the proposed CWO-CESN learns the features from these data and classifies them into attacks and standard data classes. This proposed CWO-CESN is a hybrid classifier model that integrates Convolutional Neural Networks (CNN) and Echo State Networks (ESN) as a single model and employs Chaotic map-based population initialized Walrus Optimizer for optimizing the hyperparameters. Validated on benchmark datasets, the proposed CWO-CESN-based IDS model attained accuracies of 99%, 99.5%, and 99.8% for the detection of different attacks for NSL-KDD, WSN-DS and IoT-23 datasets, respectively, and ensured secured and reliable application in significant fields.

Evolving Adversarial Training (EAT) for AI-Powered Intrusion Detection Systems (IDS)

Intrusion Detection Systems (IDS) are crucial components of network security, yet traditional IDS models often fail to cope with rapidly evolving adversarial attacks that exploit their static nature. This study proposes a novel approach, Evolving Adversarial Training (EAT), to enhance the adaptability and robustness of AI-powered IDS against dynamic threats. The EAT framework integrates continuous model evolution with advanced adversarial training techniques, enabling the IDS to dynamically adjust to new attack patterns. Experimental results demonstrate that the EAT framework significantly enhances IDS performance, leading to increased detection accuracy and reduced false positive rates compared to conventional methods. These findings emphasize the potential of EAT in fortifying network defenses against evolving cyber threats, offering a promising avenue for future research in scalable and adaptive IDS solutions that can effectively combat the complexities of modern cyber adversaries. The research explores three key objectives: dynamic adaptation and adversarial training, continuous learning and enhanced threat detection, and robustness and generalization. By focusing on these objectives, the study aims to develop AI-powered IDS that can effectively navigate the ever-changing cyber threat landscape. The research methodology includes data collection, model architecture design, training and evaluation, continuous learning, simulation, and real-world testing, all aimed at enhancing the resilience of AI-powered IDS against adversarial attacks. By systematically following this framework, the study intends to enhance the security system of IDS through the effective implementation of EAT.

Enhanced intrusion detection model based on principal component analysis and variable ensemble machine learning algorithm

The intrusion detection system (IDS) model, which can identify the presence of intruders in the network and take some predefined action for safe data transit across the network, is advantageous in achieving security in both simple and advanced network systems. Several IDS models have various security problems, such as low detection accuracy and high false alarms, which can be caused by the network traffic dataset's excessive dimensionality and class imbalance in the creation of IDS models. Principal Component Analysis (PCA) has proven to be a helpful feature selection technique for dimensionality reduction. As a result, because it is a linear transformation, it has challenges capturing non-linear relationships between feature properties in the network traffic datasets. This paper proposes a variable ensemble machine learning method to solve the problem and achieve a low variance model with high accuracy and low false alarm. First, PCA is combined with the AdaBoost ensemble machine learning algorithm, which acts as stagewise additive modelling to compensate for PCA's deficiency in feature selection in network traffic by minimizing the exponential loss function. Secondly, PCA is used for feature selection, and a LogitBoost classifier algorithm can be used for multiclass classification and acts as an additive tree regression to compensate for the PCA's weakness by minimizing the Logistic Loss to provide an optimal classifier output. Finally, the low variance ability of RandomForest, which employs the bagging approach, is applied to eliminate overfittings. The experiments of the IDS model developed from the proposed methods were evaluated on the WSN-DS, NSL-KDD, and UNSW-N15 datasets. The performance of the methods, PCA with AdaBoost, on the WSN-DS dataset has an accuracy score of 92.3 %, an 89.0 % accuracy score on the NSL-KDD dataset, and a 67.9 % accuracy score on UNSW-N15, which is the least accurate score. PCA and RandomForest surpassed them by scoring 100 % accuracy on all three datasets. PCA and Bagging have an accuracy score of 99.8 % on the WSN-DS dataset, 100 % on the NSL-KDD dataset, and 93.4 % on the UNSW-N15 dataset. In comparison, PCA and LogitBoost have an accuracy score of 98.9 % on the WSN-DS dataset, 100 % on the NSL-KDD dataset, and 88.7 % on the UNSW-N15 dataset.

An innovative model for an enhanced dual intrusion detection system using LZ‐JC‐DBSCAN, EPRC‐RPOA and EG‐GELU‐GRU

AbstractThe rise of suspicious activities in network communication, driven by increased internet accessibility, necessitates the development of advanced intrusion detection systems (IDS). Existing IDS solutions often exhibit poor performance in detecting suspicious activity and fail to identify various attack types within packet capture (PCAP) files, which monitor network traffic. This paper proposes a deep learning‐based dual IDS model designed to address these issues. The process begins with utilizing the CSE‐CIC‐IDS2019 dataset to extract features from PCAP files. Suspicious activities are detected using the Exponential Geometric‐Gaussian Error Linear Units‐Gated Recurrent Unit (EG‐GELU‐GRU) method. Normal data undergoes further feature extraction and preprocessing through Log ZScore‐Jacosine Density‐Based Spatial Clustering of Applications with Noise (LZ‐JC‐DBSCAN). Feature selection is optimized using the Entropy Pearson R Correlation‐Red Panda optimization algorithm. Suspicious files are flagged, while load balancing is performed on normal data. Attack detection is achieved through word embedding with the Glorot Kaufman‐bidirectional encoder representations from transformers technique and classification via the EG‐GELU‐GRU model. Attacked packets are blocked, and the method is reapplied for attack‐type classification. Experimental results using Python demonstrate the model’s superior performance, achieving 98.18% accuracy and 98.73% precision, surpassing existing approaches and significantly enhancing intrusion detection capabilities.

Intrusion detection system for cloud environment based on convolutional neural networks and PSO algorithm

Authentication of clients and their applications to cloud services is a major concern. Network security and the identification of hostile activities are greatly aided by intrusion detection systems (IDS). In general, optimisation strategies can be applied to improve IDS model performance. Convolutional neural networks (CNN) and other deep learning (DL) algorithms is utilised to enhance IDS’s capability to identify and categories intrusions. IDSs can identify prior attacks, adapt to changing threats, and minimise false positives by utilising these strategies. In this work, a lightweight CNN is proposed for intrusion detection in cloud environment. The main contribution of this research is to use particle swarm optimization (PSO), ametaheuristic algorithm to find the CNNs optimal parameters that comprise the number of convolutional layers, the size of the filter utilized in the convolutional procedure, the number of convolutional filters, and the batch size. Heuristic based searches are useful for solving these kinds of problems. The experimental outcomes demonstrate that the proposed method reaches 91.70% of accuracy, 91.82% of precision, 91.99% of recall and 91.90% of F1-score. Cloud providers can gain from improved security measures by incorporating the proposed IDS paradigm into cloud settings, thereby minimizing unauthorized access and any data breaches.

Fair XIDS: Ensuring fairness and transparency in intrusion detection models

SummaryAn intrusion detection system (IDS) is valuable for detecting anomalies and unauthorized access to a system or network. Due to the black‐box nature of these IDS models, network experts need more trust in systems to act on alerts and transparency to understand the model's inner logic. Moreover, biased models' decisions affect the model performance and increase the false positive rates, directly affecting the model's accuracy. So, maintaining Transparency and Fairness simultaneously in IDS models is essential for accurate decision‐making. Existing methods face challenges of the tradeoff between fairness and accuracy, which also affects the reliability and robustness of the model. Motivated by these research gaps, we developed the Fair‐XIDS model. This model clarifies its internal logic with visual explanations and promotes fairness across its entire lifecycle. The Fair‐XIDS model successfully integrates complex transparency and fairness algorithms to address issues like Imbalanced datasets, algorithmic bias, and postprocessing bias with an average 85% reduction in false positive rate. To ensure reliability, the proposed model effectively mitigates the tradeoff between accuracy and fairness with an average of 90% accuracy and more than 85% fairness. The assessment results of the proposed model over diverse datasets and classifiers mark its model‐agnostic nature. Overall, the model achieves more than 85% consistency among diverse classifiers.

Design and Development of Intrusive Detection Model based on Sequential Deep Recurrent Neural Network (SDRNN) Classifier

Intrusion detection systems (IDS) must defend advanced communication networks. The systems' major goal was to identify broken patterns, signatures, and rules. IDS is crucial to network cyber defense. IDS can now detect both regular and atypical patterns thanks to advances in artificial intelligence, notably machine learning and deep learning. This research discusses a revolutionary deep learning and machine learning approach to intelligent categorization in IDS model development. The main objective is to detect network traffic irregularities utilizing HIKARI-2021. With an optimized feature set for the dataset, a deep learning model achieved 99.78% accuracy for binary and multi-class classification tasks.

HybGBS: A hybrid neural network and grey wolf optimizer for intrusion detection in a cloud computing environment

SummaryThe cloud computing environment is subject to unprecedented cyber‐attacks as its infrastructure and protocols may contain vulnerabilities and bugs. Among these, Distributed Denial of Service (DDoS) is chosen by most cyber extortionists, creating unusual traffic that drains cloud resources, making them inaccessible to customers and end users. Hence, security solutions to combat this attack are in high demand. The existing DDoS detection techniques in literature have many drawbacks, such as overfitting, delay in detection, low detection accuracy for attacks that target multiple victims, and high False Positive Rate (FPR). In this proposed study, an Artificial Neural Network (ANN) based hybrid GBS (Grey Wolf Optimizer (GWO) + Back Propagation Network (BPN) + Self Organizing Map (SOM)) Intrusion Detection System (IDS) is proposed for intrusion detection in the cloud computing environment. The base classifier, BPN, was chosen for our research after evaluating the performance of a comprehensive set of neural network algorithms on the standard benchmark UNSW‐NS 15 dataset. BPN intrusion detection performance is further enhanced by combining it with SOM and GWO. Hybrid Feature Selection (FS) is made using a correlation‐based approach and Stratified 10‐fold cross‐validation (STCV) ranking based on Weight matrix value (W). These selected features are further fine‐tuned using metaheuristic GWO hyperparameter tuning based on a fitness function. The proposed IDS technique is validated using the standard benchmark UNSW‐NS 15 dataset, which consists of 1,75,341 and 82,332 attack cases in the training and testing datasets. This study's findings demonstrate that the proposed ANN‐based hybrid GBS IDS model outperforms other existing IDS models with a higher intrusion detection accuracy of 99.40%, fewer false alarms (0.00389), less error rate (0.001), and faster prediction time (0.29 ns).

Intrusion Detection for Blockchain‐Based Internet of Things Using Gaussian Mixture–Fully Convolutional Variational Autoencoder Model

ABSTRACTThe Internet of Things (IoT) is an evolving paradigm that has dramatically transformed the traditional style of living into a smart lifestyle. IoT devices have recently attained great attention due to their wide range of applications in various sectors, such as healthcare, smart home devices, smart industries, smart cities, and so forth. However, security is still a challenging issue in the IoT environment. Because of the disparate nature of IoT devices, it is hard to detect the different kinds of attacks available in IoT. Various existing works aim to provide a reliable intrusion detection system (IDS) technique. But they failed to work because of several security issues. Thus, the proposed study presents a blockchain‐based deep learning model for IDS. Initially, the input data are preprocessed using min‐max normalization, converting the raw input data into improved quality. In order to detect the presented attacks in the provided dataset, the proposed work introduced Gaussian mixture–fully convolutional variational autoencoder (GM‐FCVAE) model. The implementation is performed in Python, and the performance of the proposed GM‐FCVAE model is analyzed by evaluating several metrics. The proposed GM‐FCVAE model is tested on three datasets and attained superior accuracy of 99.18%, 98.81%, and 98.4% with UNSW‐NB15, CICIDS 2019, and N_BaIoT datasets, respectively. The comparison reveals that the proposed GM‐FCVAE model obtained higher results than the other deep learning techniques. The outperformance shows the efficacy of the proposed study in identifying security attacks.

Unveiling intrusions: explainable SVM approaches for addressing encrypted Wi-Fi traffic in UAV networks

AbstractUnmanned aerial vehicles (UAVs), also known as drones, have become instrumental in various domains, including agriculture, geographic information systems, media, logistics, security, and defense. These UAVs often rely on wireless communication networks for data transmission, making them vulnerable to cyberattacks. To address these challenges, it is necessary to detect potential threats by analyzing the encrypted Wi-Fi traffic data generated by UAVs. This study aimed to develop a linear SVM model that is enhanced with explainable artificial intelligence (XAI) techniques and fine-tuned using Bayesian optimization for intrusion detection systems (IDSs); the model is specifically designed to identify malware threats targeting UAVs. This research utilized encrypted Wi-Fi traffic data derived from three different UAV networks, namely, Parrot Bebop 1, DBPower UDI, and DJI Spark, while considering unidirectional and bidirectional communication flow modes. SVM-based intrusion detection models have been modeled on these datasets, identified their key features using the local interpretable model-agnostic explanations (LIME) technique, and conducted a cost analysis of the proposed modeling approach. The incorporation of the LIME method enabled to highlight the features that are highly indicative of cyberattacks and provided valuable insights into the importance of each feature in the context of intrusion detection. In conclusion, this interpretable IDS model, fine-tuned with Bayesian optimization, demonstrated its superiority over the state-of-the-art methods, proving its efficacy in detecting and mitigating threats to UAVs while offering a cost-effective solution.

Intrusion Detection System to Secure a Network using ACNN Model and Machine Learning

As cyber threats continue to evolve in sophistication and diversity, the need for robust Intrusion Detection Systems (IDS) becomes paramount to safeguarding network integrity. This research explores the application of an innovative approach by integrating an Attention-based Convolutional Neural Network (ACNN) model with machine learning techniques to enhance the accuracy and efficiency of intrusion detection. The proposed system leverages the ACNN's ability to capture contextual dependencies in network traffic data, enabling the extraction of intricate patterns indicative of potential intrusions. The ACNN's attention mechanism focuses on relevant features within the data, improving the model's discriminative power and adaptability to dynamic cyber threats. To achieve optimal performance, the ACNN is complemented with a machine learning framework that includes feature engineering, dimensionality reduction, and classification algorithms. This integrated approach allows the system to adapt and learn from evolving attack vectors, providing a proactive defense mechanism against both known and unknown threats. The research evaluates the proposed ACNN-based IDS using benchmark datasets and real-world network traffic scenarios. Comparative analysis against traditional IDS models showcases the superiority of the ACNN in terms of detection accuracy, false positive rates, and computational efficiency. Furthermore, the system's adaptability to emerging threats is demonstrated through continuous learning and retraining mechanisms. Results indicate that the ACNN-based IDS not only exhibits superior performance but also demonstrates resilience against evasion techniques employed by malicious actors. The research findings contribute to the advancement of network security by presenting a cuttingedge solution that combines deep learning and machine learning for effective and adaptive intrusion detection.

MEMFO-KELM: A Deep Learning Approach for Real-Time Intrusion Detection in Cloud Environments

With the increasing importance of network security in cloud environments, effective intrusion detection systems (IDS) are crucial for safeguarding data transmission and protecting against cyber attacks. This research proposes a novel IDS model named Mutation Enhanced Moth-Flame Optimization based Kernel Extreme Learning Machine (MEMFO-KELM) algorithm. The objective is to address the challenges associated with cloud environments and enhance the accuracy of intrusion detection in real-time scenarios. The MEMFO-KELM algorithm incorporates advanced techniques to improve classification performance and ensure accurate detection. The deep learning model architecture includes convolutional layers for capturing complex patterns, recurrent layers for modelling temporal dependencies, and fully connected layers for feature extraction. L1 regularization (Lasso) is applied to the fully connected layers to enhance interpretability and reduce model complexity. Here, four datasets are represented to validate the performance with different attacks and normal classes are implemented: MQTT-IoT-IDS2020, CSE-CIC-IDS2018, NSL-KDD, and Apache Web Server. The proposed IDS model achieves remarkable performance, with an accuracy of 98.4%, a false alarm rate of 0.056, a detection rate of 98%, and a computational time of 120 s. These results highlight the effectiveness of the MEMFO-KELM algorithm in accurately detecting intrusions. Comparative analysis reveals that the proposed real-time IDS model demonstrates its superiority compared to other methods. By addressing the challenges of cloud environments and incorporating advanced techniques, the MEMFO-KELM IDS model contributes to enhanced network security, mitigates the risks associated with cyber attacks, and ensures the integrity of globally distributed resources.

Analysis of Machine Learning Methods for Intrusion Detection Systems in Wireless Networks

Wireless networks have become integral to modern communication systems, making them vulnerable to various security threats. Intrusion detection systems (IDSs) are essential for detecting and mitigating these threats and can also powerfully screen network traffic for pernicious activities that are planned to abuse the classification, honesty, realness, and accessibility of the network. Machine learning (ML) and Deep learning (DL) techniques are effective in identifying and classifying network attacks. This study proposes a novel intrusion detection system that employs ML and DL models to classify and distinguish network attacks in wireless networks. The proposed system enhanced detection accuracy and efficiency in IDS, the scalability of IDS systems, and estimated the performance of IDS in wireless networks. It also investigates IDS techniques using machine learning, designs and implements IDS in wireless networks using machine learning, and trains several IDS models regarding wireless networks that are fitted. It contrasts the exhibition of proposed models and existing procedures. The suggested system can therefore be utilized as an effective IDS for wireless networks, providing real-time detection and classification of network attacks.

Statistical Implementation for SD-RNN Model for Multi-Class Classification for Network Intrusion Detection System

With the increasing popularity of technologies that depend on computer networks, providing security is of paramount importance. Consequently, intrusion detection systems (IDS) play a vital role in monitoring these networks. An essential element in securing the network of an organization is the Intrusion Detection System (IDS), which serves as the primary barrier against cyber threats and is tasked with thwarting illegal entry into the network. Flow-based network traffic analysis is commonly used in IDS solutions to identify security concerns. In recent years, several innovative strategies have been proposed and implemented to address the issue of network security, with a specific focus on Intrusion Detection Systems (IDSs). The creation of intrusion detection systems using AI methods is a modern method for finding breaches in a network. Since there are many possible approaches, it is important to have a standardized method that facilitates good judgement when classifying intrusions. This paper presents a novel approach utilizing deep learning and machine learning modelling to develop a model for multi-class classification. The principal objective is to create IDS that can effectively detect anomalies using flow-based analysis. The latest CICIDS2017 dataset is used in experimentation for testing and training. The experiments performed with a deep learning model for IDS produced promising results, achieving a 99.77% accuracy rate for multi-class classification while employing the specific dataset.

Enhancing intrusion detection system using rectified linear unit function in pigeon inspired optimization algorithm

The increasing rate of cybercrime in the digital world highlights the importance of having a reliable intrusion detection system (IDS) to detect unauthorized attacks and notify administrators. IDS can leverage machine learning techniques to identify patterns of attacks and provide real-time notifications. In building a successful IDS, selecting the right features is crucial as it determines the accuracy of the predictions made by the model. This paper presents a new IDS algorithm that combines the rectified linear unit (ReLU) activation function with a pigeon-inspired optimizer in feature selection. The proposed algorithm was evaluated on network security layer - knowledge discovery in databases (NSL-KDD) datasets and demonstrated improved performance in terms of training speed and accuracy compared to previous IDS models. Thus, the use of the ReLU activation function and a pigeon-inspired optimizer in feature selection can significantly enhance the effectiveness of an IDS in detecting unauthorized attacks.

Enhancing Cyber Threat Detection with an Improved Artificial Neural Network Model

Identifying cyber-attacks that attempt to compromise digital systems is a critical function of intrusion detection systems (IDS). Data labeling difficulties, incorrect conclusions, and vulnerability to malicious data injections are only a few drawbacks of using machine learning algorithms for cybersecurity. To overcome these obstacles, researchers have created several network IDS models, such as the Hidden Naive Bayes Multiclass Classifier and supervised/unsupervised machine learning techniques. This study provides an updated learning strategy for artificial neural network (ANN) to address data categorization problems caused by unbalanced data. Compared to traditional approaches, the augmented ANN’s 92% accuracy is a significant improvement owing to the network’s increased resilience to disturbances and computational complexity, brought about by the addition of a random weight and standard scaler. Considering the ever-evolving nature of cybersecurity threats, this study introduces a revolutionary intrusion detection method.