{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T05:48:35Z","timestamp":1783576115023,"version":"3.55.0"},"reference-count":45,"publisher":"Springer Science and Business Media LLC","issue":"1-2","license":[{"start":{"date-parts":[[2025,3,24]],"date-time":"2025-03-24T00:00:00Z","timestamp":1742774400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"},{"start":{"date-parts":[[2025,3,24]],"date-time":"2025-03-24T00:00:00Z","timestamp":1742774400000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by-nc-nd\/4.0"}],"funder":[{"name":"Key Research and Development Project of Henan Province","award":["221111210300"],"award-info":[{"award-number":["221111210300"]}]}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":["J. King Saud Univ. Comput. Inf. Sci."],"DOI":"10.1007\/s44443-025-00015-4","type":"journal-article","created":{"date-parts":[[2025,3,25]],"date-time":"2025-03-25T02:00:07Z","timestamp":1742868007000},"update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":1,"title":["ADHS-EL: Dynamic ensemble learning with adversarial augmentation for accurate and robust network intrusion detection"],"prefix":"10.1007","volume":"37","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4430-946X","authenticated-orcid":false,"given":"Huajuan","family":"Ren","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Yonghe","family":"Tang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shuai","family":"Ren","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ruimin","family":"Wang","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Weiyu","family":"Dong","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,3,24]]},"reference":[{"key":"15_CR1","doi-asserted-by":"publisher","unstructured":"Abou Khamis R, Shafiq MO, Matrawy A (2020) Investigating resistance of deep learning-based IDS against adversaries using min-max optimization. In: 2020 IEEE international conference on communications (ICC), pp 1\u20137. https:\/\/doi.org\/10.1109\/ICC40277.2020.9149117","DOI":"10.1109\/ICC40277.2020.9149117"},{"key":"15_CR2","unstructured":"Aleksander M, Aleksandar M, Ludwig S et\u00a0al (2019) Towards deep learning models resistant to adversarial attacks. arXiv:1706.06083"},{"key":"15_CR3","doi-asserted-by":"publisher","unstructured":"Arjovsky M, Chintala S, Bottou L (2017) Wasserstein Generative Adversarial Networks. In: ICML\u201917: Proceedings of the 34th international conference on machine learning, pp 214\u2013223. https:\/\/doi.org\/10.5555\/3305381.3305404","DOI":"10.5555\/3305381.3305404"},{"key":"15_CR4","unstructured":"Brendel W, Rauber J, Bethge M (2017) Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Models. arXiv:1712.04248"},{"key":"15_CR5","doi-asserted-by":"publisher","unstructured":"Carlini N, Wagner D (2017) Towards Evaluating the Robustness of Neural Networks. In: 2017 IEEE symposium on security and privacy (SP), pp 39\u201357. https:\/\/doi.org\/10.1109\/SP.2017.49","DOI":"10.1109\/SP.2017.49"},{"key":"15_CR6","doi-asserted-by":"publisher","unstructured":"Casas P, Mar\u00edn G, Capdehourat G et\u00a0al (2019) MLSEC-benchmarking shallow and deep machine learning models for network security. In: 2019 IEEE security and privacy workshops (SPW), pp 230\u2013235. https:\/\/doi.org\/10.1109\/SPW.2019.00050","DOI":"10.1109\/SPW.2019.00050"},{"key":"15_CR7","doi-asserted-by":"publisher","unstructured":"Chen PY, Zhang H, Sharma Y et\u00a0al (2017) ZOO: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models. In: AISec\u201917: Proceedings of the 10th ACM workshop on artificial intelligence and security, pp 15\u201326. https:\/\/doi.org\/10.1145\/3128572.3140448","DOI":"10.1145\/3128572.3140448"},{"key":"15_CR8","doi-asserted-by":"publisher","unstructured":"Chen J, Jordan MI, Wainwright MJ (2020) HopSkipJumpAttack: A Query-Efficient Decision-Based Attack. In: 2020 IEEE symposium on security and privacy (SP), pp 1277\u20131294. https:\/\/doi.org\/10.1109\/SP40000.2020.00045","DOI":"10.1109\/SP40000.2020.00045"},{"key":"15_CR9","doi-asserted-by":"publisher","DOI":"10.1016\/j.jisa.2023.103472","volume":"74","author":"PT Duy","year":"2023","unstructured":"Duy PT, Khoa NH, Do Hoang H et al (2023) Investigating on the robustness of flow-based intrusion detection system against adversarial samples using generative adversarial networks. J Inf Secur Appl 74:103472. https:\/\/doi.org\/10.1016\/j.jisa.2023.103472","journal-title":"J Inf Secur Appl"},{"key":"15_CR10","doi-asserted-by":"publisher","unstructured":"Engelen G, Rimmer V, Joosen W (2021) Troubleshooting an intrusion detection dataset: the CICIDS2017 Case Study. In: 2021 IEEE security and privacy workshops (SPW), pp 7\u201312. https:\/\/doi.org\/10.1109\/SPW53761.2021.00009","DOI":"10.1109\/SPW53761.2021.00009"},{"key":"15_CR11","unstructured":"Goodfellow IJ, Shlens J, Szegedy C (2014a) Explaining and harnessing adversarial examples. arXiv:1412.6572"},{"key":"15_CR12","doi-asserted-by":"publisher","unstructured":"Goodfellow I, Pouget-Abadie J, Mirza M et\u00a0al (2014b) Generative adversarial nets. In: NIPS\u201914: Proceedings of the 27th international conference on neural information processing systems, pp 2672\u20132680. https:\/\/doi.org\/10.5555\/2969033.2969125","DOI":"10.5555\/2969033.2969125"},{"issue":"8","key":"15_CR13","doi-asserted-by":"publisher","first-page":"2632","DOI":"10.1109\/JSAC.2021.3087242","volume":"39","author":"D Han","year":"2021","unstructured":"Han D, Wang Z, Zhong Y et al (2021) Evaluating and improving adversarial robustness of machine learning-based network intrusion detectors. IEEE J Sel Areas Commun 39(8):2632\u20132647. https:\/\/doi.org\/10.1109\/JSAC.2021.3087242","journal-title":"IEEE J Sel Areas Commun"},{"key":"15_CR14","doi-asserted-by":"publisher","first-page":"194","DOI":"10.1016\/j.future.2022.02.019","volume":"132","author":"H Jiang","year":"2022","unstructured":"Jiang H, Lin J, Kang H (2022) FGMD: A robust detector against adversarial attacks in the IoT network. Future Gener Comput Syst 132:194\u2013210. https:\/\/doi.org\/10.1016\/j.future.2022.02.019","journal-title":"Future Gener Comput Syst"},{"key":"15_CR15","doi-asserted-by":"publisher","unstructured":"Khan FA, Gumaei A, Derhab A et al (2019) A novel two-stage deep learning model for efficient network intrusion detection. IEEE Access 7:30373\u201330385. https:\/\/doi.org\/10.1109\/ACCESS.2019.2899721","DOI":"10.1109\/ACCESS.2019.2899721"},{"key":"15_CR16","doi-asserted-by":"publisher","DOI":"10.1016\/j.adhoc.2023.103330","volume":"153","author":"MS Korium","year":"2024","unstructured":"Korium MS, Saber M, Beattie A et al (2024) Intrusion detection system for cyberattacks in the internet of vehicles environment. Ad Hoc Network 153:103330. https:\/\/doi.org\/10.1016\/j.adhoc.2023.103330","journal-title":"Ad Hoc Network"},{"issue":"2","key":"15_CR17","doi-asserted-by":"publisher","first-page":"2107","DOI":"10.1109\/TII.2022.3212003","volume":"19","author":"Y Li","year":"2023","unstructured":"Li Y, Abdallah S (2023) A multi-stage automated online network data stream analytics framework for iiot systems. IEEE Trans Ind Informatics 19(2):2107\u20132116. https:\/\/doi.org\/10.1109\/TII.2022.3212003","journal-title":"IEEE Trans Ind Informatics"},{"key":"15_CR18","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.103000","volume":"124","author":"A Lichy","year":"2023","unstructured":"Lichy A, Bader O, Dubin R et al (2023) When a RF beats a CNN and GRU, together-A comparison of deep learning and classical machine learning approaches for encrypted malware traffic classification. Comput Secur 124:103000. https:\/\/doi.org\/10.1016\/j.cose.2022.103000","journal-title":"Comput Secur"},{"key":"15_CR19","doi-asserted-by":"publisher","unstructured":"Lin Z, Shi Y, Xue Z (2022) IDSGAN: Generative adversarial networks for attack generation against intrusion detection. In: Pacific-Asia conference on knowledge discovery and data mining, pp 79\u201391. https:\/\/doi.org\/10.1007\/978-3-031-05981-0_7","DOI":"10.1007\/978-3-031-05981-0_7"},{"key":"15_CR20","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102289","volume":"106","author":"J Liu","year":"2021","unstructured":"Liu J, Gao Y, Hu F (2021) A fast network intrusion detection system using adaptive synthetic oversampling and LightGBM. Comput Secur 106:102289. https:\/\/doi.org\/10.1016\/j.cose.2021.102289","journal-title":"Comput Secur"},{"key":"15_CR21","doi-asserted-by":"publisher","unstructured":"Liu Z, Cao W, Gao Z et\u00a0al (2020) Self-paced ensemble for highly imbalanced massive data classification. In: 2020 IEEE 36th international conference on data engineering (ICDE), pp 841\u2013852,. https:\/\/doi.org\/10.1109\/ICDE48307.2020.00078","DOI":"10.1109\/ICDE48307.2020.00078"},{"key":"15_CR22","doi-asserted-by":"publisher","unstructured":"Li W, Yi P, Wu Y et al (2014) A New Intrusion Detection System Based on KNN Classification Algorithm in Wireless Sensor Network. J Electr Comput Eng 2014. https:\/\/doi.org\/10.1155\/2014\/240217","DOI":"10.1155\/2014\/240217"},{"key":"15_CR23","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2022.102830","volume":"120","author":"H Mohanty","year":"2022","unstructured":"Mohanty H, Roudsari AH, Lashkari AH (2022) Robust stacking ensemble model for darknet traffic classification under adversarial settings. Comput Secur 120:102830. https:\/\/doi.org\/10.1016\/j.cose.2022.102830","journal-title":"Comput Secur"},{"key":"15_CR24","doi-asserted-by":"publisher","unstructured":"Moosavi-Dezfooli SM, Fawzi A, Frossard P (2016) DeepFool: a simple and accurate method to fool deep neural networks. In: 2016 IEEE Conference on Computer Vision and Pattern Recognition (CVPR), pp 2574\u20132582. https:\/\/doi.org\/10.1109\/CVPR.2016.282","DOI":"10.1109\/CVPR.2016.282"},{"key":"15_CR25","unstructured":"Papernot N, McDaniel P, Goodfellow I (2016) Transferability in machine learning: from Phenomena to Black-Box Attacks using adversarial samples. arXiv:1605.07277"},{"key":"15_CR26","doi-asserted-by":"publisher","first-page":"148","DOI":"10.1016\/j.future.2020.04.013","volume":"110","author":"M Pawlicki","year":"2020","unstructured":"Pawlicki M, Chora\u015b M, Kozik R (2020) Defending network intrusion detection systems against adversarial evasion attacks. Future Gener Comput Syst 110:148\u2013154. https:\/\/doi.org\/10.1016\/j.future.2020.04.013","journal-title":"Future Gener Comput Syst"},{"key":"15_CR27","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2023.103546","volume":"136","author":"A Paya","year":"2024","unstructured":"Paya A, Arroni S, Garc\u00eda-D\u00edaz V et al (2024) Apollon: A robust defense system against adversarial machine learning attacks in intrusion detection systems. Comput Secur 136:103546. https:\/\/doi.org\/10.1016\/j.cose.2023.103546","journal-title":"Comput Secur"},{"key":"15_CR28","doi-asserted-by":"publisher","DOI":"10.1016\/j.eswa.2023.120420","volume":"229","author":"H Ren","year":"2023","unstructured":"Ren H, Tang Y, Dong W et al (2023) DUEN: Dynamic ensemble handling class imbalance in network intrusion detection. Expert Syst Appl 229:120420. https:\/\/doi.org\/10.1016\/j.eswa.2023.120420","journal-title":"Expert Syst Appl"},{"key":"15_CR29","doi-asserted-by":"publisher","first-page":"97","DOI":"10.1016\/j.comcom.2023.09.030","volume":"218","author":"K Roshan","year":"2024","unstructured":"Roshan K, Zafar A, Haque SBU (2024) Untargeted white-box adversarial attack with heuristic defence methods in real-time deep learning based network intrusion detection system. Comput Commun 218:97\u2013113. https:\/\/doi.org\/10.1016\/j.comcom.2023.09.030","journal-title":"Comput Commun"},{"key":"15_CR30","doi-asserted-by":"publisher","unstructured":"Sharafaldin I, Lashkari AH, Ghorbani AA (2018) Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: ICISSP 2018: Proceedings of the 4th international conference on information systems security and privacy, pp 108\u2013116. https:\/\/doi.org\/10.5220\/0006639801080116","DOI":"10.5220\/0006639801080116"},{"key":"15_CR31","doi-asserted-by":"publisher","DOI":"10.1016\/j.asoc.2024.111517","volume":"157","author":"Y Shin","year":"2024","unstructured":"Shin Y, Kim M, Kim H et al (2024) Towards unbalanced multiclass intrusion detection with hybrid sampling methods and ensemble classification. Appl Soft Comput 157:111517. https:\/\/doi.org\/10.1016\/j.asoc.2024.111517","journal-title":"Appl Soft Comput"},{"key":"15_CR32","doi-asserted-by":"publisher","unstructured":"Tavallaee M, Bagheri E, Lu W et\u00a0al (2009) A detailed analysis of the KDD CUP 99 data set. In: 2009 IEEE\u00a0Symposium on computational intelligence for security and defense applications, pp 1\u20136. https:\/\/doi.org\/10.1109\/CISDA.2009.5356528","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"15_CR33","doi-asserted-by":"publisher","first-page":"10935","DOI":"10.1007\/s00500-021-05809-y","volume":"25","author":"Q Tian","year":"2021","unstructured":"Tian Q, Han D, Hsieh MY et al (2021) A two-stage intrusion detection approach for software-defined IoT networks. Soft Comput 25:10935\u201310951. https:\/\/doi.org\/10.1007\/s00500-021-05809-y","journal-title":"Soft Comput"},{"key":"15_CR34","doi-asserted-by":"publisher","unstructured":"Usama M, Asim M, Latif S et\u00a0al (2019) Generative adversarial networks for launching and thwarting adversarial attacks on network intrusion detection systems. In: 2019 15th International wireless communications & mobile computing conference (IWCMC), pp 78\u201383. https:\/\/doi.org\/10.1109\/IWCMC.2019.8766353","DOI":"10.1109\/IWCMC.2019.8766353"},{"key":"15_CR35","doi-asserted-by":"publisher","first-page":"41525","DOI":"10.1109\/ACCESS.2019.2895334","volume":"7","author":"R Vinayakumar","year":"2019","unstructured":"Vinayakumar R, Alazab M, Soman KP et al (2019) Deep learning approach for intelligent intrusion detection system. IEEE Access 7:41525\u201341550. https:\/\/doi.org\/10.1109\/ACCESS.2019.2895334","journal-title":"IEEE Access"},{"key":"15_CR36","doi-asserted-by":"publisher","unstructured":"Vinayakumar R, Soman K, Poornachandran P (2017a) Applying convolutional neural network for network intrusion detection. In: 2017 International conference on advances in computing, communications and informatics (ICACCI), pp 1222\u20131228. https:\/\/doi.org\/10.1109\/ICACCI.2017.8126009","DOI":"10.1109\/ICACCI.2017.8126009"},{"key":"15_CR37","doi-asserted-by":"publisher","unstructured":"Vinayakumar R, Soman K, Poornachandran P (2017b) Evaluation of recurrent neural network and its variants for intrusion detection system (IDS). International Journal of Information System Modeling and Design 8(3):43\u201363. https:\/\/doi.org\/10.4018\/IJISMD.2017070103","DOI":"10.4018\/IJISMD.2017070103"},{"key":"15_CR38","doi-asserted-by":"publisher","unstructured":"Wang S, Xu W, Liu Y (2023) Res-TranBiLSTM: An intelligent approach for intrusion detection in the Internet of Things. Comput Networks 235:109982. https:\/\/doi.org\/10.1016\/j.comnet.2023.109982","DOI":"10.1016\/j.comnet.2023.109982"},{"key":"15_CR39","doi-asserted-by":"publisher","unstructured":"Xiao C, Li B, Zhu JY et\u00a0al (2018) Generating adversarial examples with adversarial networks.\u00a0In: IJCAI\u201918: Proceedings of the 27th international joint conference on artificial intelligence, pp 3905\u20133911. https:\/\/doi.org\/10.24963\/ijcai.2018\/543","DOI":"10.24963\/ijcai.2018\/543"},{"key":"15_CR40","doi-asserted-by":"publisher","unstructured":"Xu L, Skoularidou M, Cuesta-Infante A et\u00a0al (2019) Modeling tabular data using conditional GAN. In: NIPS\u201919: Proceedings of the 33th international conference on neural information processing systems, pp 7333\u20137343. https:\/\/doi.org\/10.5555\/3454287.3454946","DOI":"10.5555\/3454287.3454946"},{"key":"15_CR41","doi-asserted-by":"publisher","unstructured":"Zhang C, Costa-P\u00e9rez X, Patras P (2020a) Tiki-Taka: Attacking and Defending Deep Learning-based Intrusion Detection Systems. In: CCSW\u201920: Proceedings of the 2020 ACM SIGSAC Conference on Cloud Computing Security Workshop, pp 27\u201339. https:\/\/doi.org\/10.1145\/3411495.3421359","DOI":"10.1145\/3411495.3421359"},{"key":"15_CR42","doi-asserted-by":"publisher","unstructured":"Zhang J, Xu X, Han B et al (2020b) Attacks which do not kill training make adversarial learning stronger. In: ICML\u201920: Proceedings of the 37th International Conference on Machine Learning, pp 11278\u201311287. https:\/\/doi.org\/10.5555\/3524938.3525984","DOI":"10.5555\/3524938.3525984"},{"key":"15_CR43","unstructured":"Zhang J, Zhu J, Niu G et\u00a0al (2020c) Geometry-aware instance-reweighted adversarial training. arXiv:2010.01736"},{"key":"15_CR44","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2021.102463","volume":"111","author":"X Zhao","year":"2021","unstructured":"Zhao X, Huang G, Jiang J et al (2021) Research on lightweight anomaly detection of multimedia traffic in edge computing. Comput Secur 111:102463. https:\/\/doi.org\/10.1016\/j.cose.2021.102463","journal-title":"Comput Secur"},{"key":"15_CR45","doi-asserted-by":"publisher","DOI":"10.1016\/j.cose.2024.104005","volume":"145","author":"X Zhao","year":"2024","unstructured":"Zhao X, Fok KW, Thing VL (2024) Enhancing network intrusion detection performance using generative adversarial networks. Comput Secur 145:104005. https:\/\/doi.org\/10.1016\/j.cose.2024.104005","journal-title":"Comput Secur"}],"container-title":["Journal of King Saud University Computer and Information Sciences"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s44443-025-00015-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/article\/10.1007\/s44443-025-00015-4\/fulltext.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/s44443-025-00015-4.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,4,14]],"date-time":"2025-04-14T16:24:23Z","timestamp":1744647863000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/s44443-025-00015-4"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,24]]},"references-count":45,"journal-issue":{"issue":"1-2","published-online":{"date-parts":[[2025,3]]}},"alternative-id":["15"],"URL":"https:\/\/doi.org\/10.1007\/s44443-025-00015-4","relation":{},"ISSN":["1319-1578"],"issn-type":[{"value":"1319-1578","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,3,24]]},"assertion":[{"value":"12 July 2024","order":1,"name":"received","label":"Received","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"31 January 2025","order":2,"name":"accepted","label":"Accepted","group":{"name":"ArticleHistory","label":"Article History"}},{"value":"24 March 2025","order":3,"name":"first_online","label":"First Online","group":{"name":"ArticleHistory","label":"Article History"}},{"order":1,"name":"Ethics","group":{"name":"EthicsHeading","label":"Declarations"}},{"value":"The authors have no relevant financial or non-financial interests to disclose.","order":2,"name":"Ethics","group":{"name":"EthicsHeading","label":"Conflict of interest"}}],"article-number":"7"}}