A Hybrid CNN–LSTM-Based Intrusion Detection System Trained on UNSW-NB15 for Accurate Cyber Threat Detection

Clicks: 1
ID: 312682
2025
Free PDF
Article Quality & Performance Metrics
Overall Quality
Not rated
Combines reader engagement with the AI quality analysis. This article has not been analysed, so there is no overall score — reader engagement is measured and shown alongside.
AI Quality Assessment
Not analyzed
Readership in this journal

Ranked #106 of 705 articles by views in Journal of Computing & Biomedical Informatics

Most read Least read

Bar heights use a square-root scale. Only the 120 most-read articles are drawn; the journal has 705 in total.

Mint this article as an NFT
Not yet minted

Create a permanent, verifiable on-chain record of this article on the Scimatic Network. The NFT is held in your Journament account, and you can withdraw it to your own wallet at any time.

5 SUSD one-off · no wallet required
Sign in to mint
Abstract
The increasing sophistication of cyber threats requires advanced intrusion detection systems that is capable of detecting both known and unknown attack patterns. Traditional Intrusion Detection Systems (IDS) that rely on signatures for detection have fundamental limitations when facing zero-day attacks and advanced persistent threats. This research proposes a hybrid deep learning architecture that combines Convolutional Neural Networks (CNN) with Long Short-Term Memory (LSTM) networks to enhance detection accuracy and maintain reliable performance across intrusion scenarios. While many earlier studies have relied on datasets such as NSL-KDD, this work uses the more contemporary UNSWNB15 dataset which labor under an outdated assumption of attack vectors, our model is built, trained, and evaluated using the UNSW-NB15 dataset that contains modern attack vectors, and more realistic network traffic scenarios. The CNN component is able to extract spatial features from the characteristics of the network traffic, and the LSTM component in the hybrid model is able to learn the temporal dependencies and sequence of packet flows in the traffic. On the UNSW-NB15 dataset, the hybrid architecture reached 96.78% validation accuracy and an F1-score above 96%, indicating competitive performance relative to published UNSW-NB15 benchmarks, while demonstrating improved performance over baseline machine learning and single-model deep learning approaches on UNSW-NB15. Through comprehensive evaluation using confusion matrix, ROC-AUC curves, precision and recall metrics, and computational efficiency, we established evidence of the model’s efficacy for real-time deployments. The findings show that the model achieves strong detection accuracy while maintaining a reasonable balance between precision and false alarms.
Reference Key
imported_1777056002_69ebb902d140a Use this key to autocite in the manuscript while using SciMatic Manuscript Manager or Thesis Manager
Authors Khadija Javed
Journal Journal of Computing & Biomedical Informatics
Year 2025
DOI
10.56979/1001/2025/1129
URL
https://jcbi.org/index.php/Main/article/view/1129
Keywords Keywords not found

Citations

No citations found. To add a citation, contact the admin at info@scimatic.org

Comments

No comments yet. Be the first to comment on this article.