{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T00:56:10Z","timestamp":1781312170867,"version":"3.54.1"},"reference-count":50,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-017"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-037"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-012"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-029"},{"start":{"date-parts":[[2026,8,1]],"date-time":"2026-08-01T00:00:00Z","timestamp":1785542400000},"content-version":"stm-asf","delay-in-days":0,"URL":"https:\/\/doi.org\/10.15223\/policy-004"}],"funder":[{"DOI":"10.13039\/501100003787","name":"Natural Science Foundation of Hebei Province","doi-asserted-by":"publisher","award":["F2025201052"],"award-info":[{"award-number":["F2025201052"]}],"id":[{"id":"10.13039\/501100003787","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003787","name":"Natural Science Foundation of Hebei Province","doi-asserted-by":"publisher","award":["No.F2025201052"],"award-info":[{"award-number":["No.F2025201052"]}],"id":[{"id":"10.13039\/501100003787","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100003482","name":"Department of Education of Hebei Province","doi-asserted-by":"publisher","award":["QN2025014"],"award-info":[{"award-number":["QN2025014"]}],"id":[{"id":"10.13039\/501100003482","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Expert Systems with Applications"],"published-print":{"date-parts":[[2026,8]]},"DOI":"10.1016\/j.eswa.2026.132328","type":"journal-article","created":{"date-parts":[[2026,4,3]],"date-time":"2026-04-03T15:43:39Z","timestamp":1775231019000},"page":"132328","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":1,"special_numbering":"C","title":["CCEP-WAE-IDS: A cross-level consistency enhancement paradigm for imbalanced network intrusion detection"],"prefix":"10.1016","volume":"322","author":[{"ORCID":"https:\/\/orcid.org\/0009-0003-4242-0361","authenticated-orcid":false,"given":"Yilong","family":"She","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0005-7380-7993","authenticated-orcid":false,"given":"Yifan","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0007-6918-4855","authenticated-orcid":false,"given":"Wenlei","family":"Chai","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0003-4397-8754","authenticated-orcid":false,"given":"Yi","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0008-2484-9603","authenticated-orcid":false,"given":"Fan","family":"Feng","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7466-4622","authenticated-orcid":false,"given":"Zhenpeng","family":"Liu","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.eswa.2026.132328_bib0001","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2024.112500","article-title":"CIRA: Class imbalance resilient adaptive gaussian process classifier","volume":"304","author":"Abdelmonem","year":"2024","journal-title":"Knowledge-Based Systems"},{"key":"10.1016\/j.eswa.2026.132328_bib0002","series-title":"International conference on artificial intelligence and statistics","first-page":"3315","article-title":"Generative oversampling for imbalanced data via majority-guided VAE","author":"Ai","year":"2023"},{"key":"10.1016\/j.eswa.2026.132328_bib0003","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2024.112455","article-title":"Anomaly-based network intrusion detection using denoising autoencoder and Wasserstein GAN synthetic attacks","volume":"168","author":"Arafah","year":"2025","journal-title":"Applied Soft Computing"},{"key":"10.1016\/j.eswa.2026.132328_bib0004","doi-asserted-by":"crossref","DOI":"10.1016\/j.mlwa.2025.100692","article-title":"Enhanced credit risk prediction using deep learning and SMOTE-ENN resampling","volume":"21","author":"Aruleba","year":"2025","journal-title":"Machine Learning with Applications"},{"key":"10.1016\/j.eswa.2026.132328_bib0005","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2021.116387","article-title":"Geometric SMOTE for regression","volume":"193","author":"Camacho","year":"2022","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.132328_bib0006","doi-asserted-by":"crossref","first-page":"321","DOI":"10.1613\/jair.953","article-title":"SMOTE: Synthetic minority over-sampling technique","volume":"16","author":"Chawla","year":"2002","journal-title":"Journal of Artificial Intelligence Research"},{"key":"10.1016\/j.eswa.2026.132328_bib0007","series-title":"Proceedings of the 22nd ACM SIGKDD international conference on knowledge discovery and data mining","first-page":"785","article-title":"Xgboost: A scalable tree boosting system","author":"Chen","year":"2016"},{"key":"10.1016\/j.eswa.2026.132328_bib0008","series-title":"2025 28th international conference on computer supported cooperative work in design (CSCWD)","first-page":"1764","article-title":"A dual-module intrusion detection framework for industrial internet collaboration: Tackling data imbalance challenges","author":"Cui","year":"2025"},{"issue":"1","key":"10.1016\/j.eswa.2026.132328_bib0009","doi-asserted-by":"crossref","first-page":"272","DOI":"10.1007\/s10489-022-03361-2","article-title":"A novel multi-module integrated intrusion detection system for high-dimensional imbalanced data","volume":"53","author":"Cui","year":"2023","journal-title":"Applied Intelligence"},{"key":"10.1016\/j.eswa.2026.132328_bib0010","series-title":"Proceedings of the IEEE\/CVF conference on computer vision and pattern recognition","first-page":"9268","article-title":"Class-balanced loss based on effective number of samples","author":"Cui","year":"2019"},{"key":"10.1016\/j.eswa.2026.132328_bib0011","doi-asserted-by":"crossref","first-page":"240","DOI":"10.1016\/j.future.2022.01.026","article-title":"Imbalanced data classification: A KNN and generative adversarial networks-based hybrid approach for intrusion detection","volume":"131","author":"Ding","year":"2022","journal-title":"Future Generation Computer Systems"},{"key":"10.1016\/j.eswa.2026.132328_bib0012","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1016\/j.ins.2018.06.056","article-title":"Improving imbalanced learning through a heuristic oversampling method based on k-means and SMOTE","volume":"465","author":"Douzas","year":"2018","journal-title":"Information Sciences"},{"key":"10.1016\/j.eswa.2026.132328_bib0013","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2025.114680","article-title":"PHO-HGNN: Hypergraph neural network based on persistent homology optimization for class-imbalanced intrusion detection","volume":"330","author":"Gao","year":"2025","journal-title":"Knowledge-Based Systems"},{"key":"10.1016\/j.eswa.2026.132328_bib0014","unstructured":"Ghiasvand, E., Ray, S., Iqbal, S., Dadkhah, S., & Ghorbani, A.A. (2024). CICAPT-IIoT: A provenance-based APT attack dataset for IIoT environment. Canadian Institute for Cybersecurity, University of New Brunswick. https:\/\/www.unb.ca\/cic\/datasets\/iiot-dataset-2024.html."},{"issue":"1","key":"10.1016\/j.eswa.2026.132328_bib0015","first-page":"723","article-title":"A kernel two-sample test","volume":"13","author":"Gretton","year":"2012","journal-title":"The Journal of Machine Learning Research"},{"key":"10.1016\/j.eswa.2026.132328_bib0016","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2023.110986","article-title":"Adaptive SV-borderline SMOTE-SVM algorithm for imbalanced data classification","volume":"150","author":"Guo","year":"2024","journal-title":"Applied Soft Computing"},{"key":"10.1016\/j.eswa.2026.132328_bib0017","first-page":"1","article-title":"Novel key-value pair attention neural network based on trend and period features for fault diagnosis","volume":"74","author":"Hu","year":"2025","journal-title":"IEEE Transactions on Instrumentation and Measurement"},{"key":"10.1016\/j.eswa.2026.132328_bib0018","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.122778","article-title":"A review of ensemble learning and data augmentation models for class imbalanced problems: Combination, implementation and evaluation","volume":"244","author":"Khan","year":"2024","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.132328_bib0019","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.122198","article-title":"HDA-IDS: A hybrid dos attacks intrusion detection system for IoT by using semi-supervised CL-GAN","volume":"238","author":"Li","year":"2024","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.132328_bib0020","doi-asserted-by":"crossref","DOI":"10.1016\/j.dsp.2024.104869","article-title":"Adaptive weights-based relaxed broad learning system for imbalanced classification","volume":"156","author":"Li","year":"2025","journal-title":"Digital Signal Processing"},{"key":"10.1016\/j.eswa.2026.132328_bib0021","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2024.111319","article-title":"Complemented subspace-based weighted collaborative representation model for imbalanced learning","volume":"153","author":"Li","year":"2024","journal-title":"Applied Soft Computing"},{"key":"10.1016\/j.eswa.2026.132328_bib0022","doi-asserted-by":"crossref","DOI":"10.1016\/j.asoc.2025.113543","article-title":"Imbalanced broad learning system with label relaxation and sample weight adaptation","volume":"182","author":"Li","year":"2025","journal-title":"Applied Soft Computing"},{"key":"10.1016\/j.eswa.2026.132328_bib0023","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2024.110724","article-title":"An intrusion detection method combining variational auto-encoder and generative adversarial networks","volume":"253","author":"Li","year":"2024","journal-title":"Computer Networks"},{"issue":"2","key":"10.1016\/j.eswa.2026.132328_bib0024","doi-asserted-by":"crossref","first-page":"1000","DOI":"10.1109\/TR.2022.3164877","article-title":"Intrusion detection system after data augmentation schemes based on the VAE and CVAE","volume":"71","author":"Liu","year":"2022","journal-title":"IEEE Transactions on Reliability"},{"key":"10.1016\/j.eswa.2026.132328_bib0025","doi-asserted-by":"crossref","first-page":"332","DOI":"10.1016\/j.knosys.2018.08.036","article-title":"CNN and RNN based payload classification methods for attack detection","volume":"163","author":"Liu","year":"2019","journal-title":"Knowledge-Based Systems"},{"key":"10.1016\/j.eswa.2026.132328_bib0026","doi-asserted-by":"crossref","DOI":"10.1016\/j.engappai.2025.110851","article-title":"An adaptive graph neural network-based intrusion detection system for airborne network","volume":"152","author":"Liu","year":"2025","journal-title":"Engineering Applications of Artificial Intelligence"},{"key":"10.1016\/j.eswa.2026.132328_bib0027","doi-asserted-by":"crossref","DOI":"10.1016\/j.compeleceng.2025.110320","article-title":"BOA-ACRF: An intrusion detection method for data imbalance problems","volume":"124","author":"Long","year":"2025","journal-title":"Computers and Electrical Engineering"},{"key":"10.1016\/j.eswa.2026.132328_bib0028","doi-asserted-by":"crossref","first-page":"113","DOI":"10.1016\/j.ins.2013.07.007","article-title":"An insight into classification with imbalanced data: Empirical results and current trends on using data intrinsic characteristics","volume":"250","author":"L\u00f3pez","year":"2013","journal-title":"Information Sciences"},{"issue":"2","key":"10.1016\/j.eswa.2026.132328_bib0029","doi-asserted-by":"crossref","first-page":"943","DOI":"10.1109\/TNSE.2020.3004312","article-title":"AESMOTE: Adversarial reinforcement learning with SMOTE for anomaly detection","volume":"8","author":"Ma","year":"2020","journal-title":"IEEE Transactions on Network Science and Engineering"},{"key":"10.1016\/j.eswa.2026.132328_bib0030","doi-asserted-by":"crossref","DOI":"10.1016\/j.patcog.2021.108511","article-title":"FW-SMOTE: A feature-weighted oversampling approach for imbalanced classification","volume":"124","author":"Maldonado","year":"2022","journal-title":"Pattern Recognition"},{"key":"10.1016\/j.eswa.2026.132328_bib0031","doi-asserted-by":"crossref","DOI":"10.1016\/j.jnca.2024.103925","article-title":"Recent endeavors in machine learning-powered intrusion detection systems for the internet of things","volume":"229","author":"Manivannan","year":"2024","journal-title":"Journal of Network and Computer Applications"},{"key":"10.1016\/j.eswa.2026.132328_bib0032","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2024.111745","article-title":"Handling class imbalance and overlap with a hesitation-based instance selection method","volume":"294","author":"Moradi","year":"2024","journal-title":"Knowledge-Based Systems"},{"key":"10.1016\/j.eswa.2026.132328_bib0033","doi-asserted-by":"crossref","DOI":"10.1016\/j.scs.2021.102994","article-title":"A new distributed architecture for evaluating AI-based security systems at the edge: Network TON-IoT datasets","volume":"72","author":"Moustafa","year":"2021","journal-title":"Sustainable Cities and Society"},{"key":"10.1016\/j.eswa.2026.132328_bib0034","series-title":"2015 Military communications and information systems conference (MilCIS)","first-page":"1","article-title":"UNSW-NB15: A comprehensive data set for network intrusion detection systems","author":"Moustafa","year":"2015"},{"issue":"5","key":"10.1016\/j.eswa.2026.132328_bib0035","doi-asserted-by":"crossref","first-page":"166","DOI":"10.1007\/s11222-024-10479-5","article-title":"AR-ADASYN: Angle radius-adaptive synthetic data generation approach for imbalanced learning","volume":"34","author":"Park","year":"2024","journal-title":"Statistics and Computing"},{"key":"10.1016\/j.eswa.2026.132328_bib0036","doi-asserted-by":"crossref","DOI":"10.1016\/j.eswa.2023.120420","article-title":"DUEN: Dynamic ensemble handling class imbalance in network intrusion detection","volume":"229","author":"Ren","year":"2023","journal-title":"Expert Systems with Applications"},{"key":"10.1016\/j.eswa.2026.132328_bib0037","series-title":"Proceedings of the 4th international conference on information systems security and privacy (ICISSP)","first-page":"108","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","author":"Sharafaldin","year":"2018"},{"key":"10.1016\/j.eswa.2026.132328_bib0038","article-title":"Deep generative approaches for oversampling in imbalanced data classification problems: A comprehensive review and comparative analysis","volume":"170","author":"Shirvan","year":"2025","journal-title":"Applied Soft Computing"},{"key":"10.1016\/j.eswa.2026.132328_bib0039","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2024.112143","article-title":"Robust two-stage instance-level cost-sensitive learning method for class imbalance problem","volume":"300","author":"Tang","year":"2024","journal-title":"Knowledge-Based Systems"},{"key":"10.1016\/j.eswa.2026.132328_bib0040","series-title":"2009 IEEE symposium on computational intelligence for security and defense applications","first-page":"1","article-title":"A detailed analysis of the KDD CUP 99 data set","author":"Tavallaee","year":"2009"},{"issue":"1","key":"10.1016\/j.eswa.2026.132328_bib0041","doi-asserted-by":"crossref","first-page":"190","DOI":"10.1016\/j.dcan.2023.03.008","article-title":"IDS-INT: Intrusion detection system using transformer-based transfer learning for imbalanced network traffic","volume":"10","author":"Ullah","year":"2024","journal-title":"Digital Communications and Networks"},{"key":"10.1016\/j.eswa.2026.132328_bib0042","series-title":"Optimal transport: old and new","volume":"vol. 338","author":"Villani","year":"2009"},{"issue":"6","key":"10.1016\/j.eswa.2026.132328_bib0043","doi-asserted-by":"crossref","first-page":"5335","DOI":"10.1007\/s10115-025-02377-7","article-title":"CTVAE: Contrastive tabular variational autoencoder for imbalance data","volume":"67","author":"Wang","year":"2025","journal-title":"Knowledge and Information Systems"},{"issue":"8","key":"10.1016\/j.eswa.2026.132328_bib0044","doi-asserted-by":"crossref","first-page":"5244","DOI":"10.1109\/TII.2019.2952917","article-title":"LSTM learning with bayesian and gaussian processing for anomaly detection in industrial IoT","volume":"16","author":"Wu","year":"2019","journal-title":"IEEE Transactions on Industrial Informatics"},{"key":"10.1016\/j.eswa.2026.132328_bib0045","article-title":"The acoustic signal denoising method for rotating machinery via the virtual sample based DpConformer","author":"Wu","year":"2026","journal-title":"IEEE Transactions on Industrial Informatics"},{"issue":"12","key":"10.1016\/j.eswa.2026.132328_bib0046","doi-asserted-by":"crossref","first-page":"17159","DOI":"10.1007\/s11227-024-06124-7","article-title":"A deep learning mechanism to detect phishing urls using the permutation importance method and SMOTE-Tomek link","volume":"80","author":"Zaimi","year":"2024","journal-title":"The Journal of Supercomputing"},{"key":"10.1016\/j.eswa.2026.132328_bib0047","doi-asserted-by":"crossref","first-page":"190431","DOI":"10.1109\/ACCESS.2020.3031892","article-title":"Network intrusion detection based on conditional Wasserstein generative adversarial network and cost-sensitive stacked autoencoder","volume":"8","author":"Zhang","year":"2020","journal-title":"IEEE Access"},{"key":"10.1016\/j.eswa.2026.132328_bib0048","doi-asserted-by":"crossref","DOI":"10.1016\/j.knosys.2023.110938","article-title":"Label correlation guided borderline oversampling for imbalanced multi-label data learning","volume":"279","author":"Zhang","year":"2023","journal-title":"Knowledge-Based Systems"},{"key":"10.1016\/j.eswa.2026.132328_bib0049","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104005","article-title":"Enhancing network intrusion detection performance using generative adversarial networks","volume":"145","author":"Zhao","year":"2024","journal-title":"Computers & Security"},{"key":"10.1016\/j.eswa.2026.132328_bib0050","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2024.104155","article-title":"Hidim: A novel framework of network intrusion detection for hierarchical dependency and class imbalance","volume":"148","author":"Zhou","year":"2025","journal-title":"Computers & Security"}],"container-title":["Expert Systems with Applications"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0957417426012418?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S0957417426012418?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,6,13]],"date-time":"2026-06-13T00:04:31Z","timestamp":1781309071000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S0957417426012418"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,8]]},"references-count":50,"alternative-id":["S0957417426012418"],"URL":"https:\/\/doi.org\/10.1016\/j.eswa.2026.132328","relation":{},"ISSN":["0957-4174"],"issn-type":[{"value":"0957-4174","type":"print"}],"subject":[],"published":{"date-parts":[[2026,8]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"CCEP-WAE-IDS: A cross-level consistency enhancement paradigm for imbalanced network intrusion detection","name":"articletitle","label":"Article Title"},{"value":"Expert Systems with Applications","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.eswa.2026.132328","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 Elsevier Ltd. All rights are reserved, including those for text and data mining, AI training, and similar technologies.","name":"copyright","label":"Copyright"}],"article-number":"132328"}}