{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,6,9]],"date-time":"2026-06-09T14:57:04Z","timestamp":1781017024332,"version":"3.54.1"},"reference-count":31,"publisher":"Wiley","issue":"1","license":[{"start":{"date-parts":[[2021,6,16]],"date-time":"2021-06-16T00:00:00Z","timestamp":1623801600000},"content-version":"vor","delay-in-days":166,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Department of Telecommunications at the Higher Institute for Applied Sciences and Technology"}],"content-domain":{"domain":["onlinelibrary.wiley.com"],"crossmark-restriction":true},"short-container-title":["Computational Intelligence and Neuroscience"],"published-print":{"date-parts":[[2021,1]]},"abstract":"<jats:p>Networks are exposed to an increasing number of cyberattacks due to their vulnerabilities. So, cybersecurity strives to make networks as safe as possible, by introducing defense systems to detect any suspicious activities. However, firewalls and classical intrusion detection systems (IDSs) suffer from continuous updating of their defined databases to detect threats. The new directions of the IDSs aim to leverage the machine learning models to design more robust systems with higher detection rates and lower false alarm rates. This research presents a novel network IDS, which plays an important role in network security and faces the current cyberattacks on networks using the UNSW\u2010NB15 dataset benchmark. Our proposed system is a dynamically scalable multiclass machine learning\u2010based network IDS. It consists of several stages based on supervised machine learning. It starts with the Synthetic Minority Oversampling Technique (SMOTE) method to solve the imbalanced classes problem in the dataset and then selects the important features for each class existing in the dataset by the Gini Impurity criterion using the Extremely Randomized Trees Classifier (Extra Trees Classifier). After that, a pretrained extreme learning machine (ELM) model is responsible for detecting the attacks separately, \u201cOne\u2010Versus\u2010All\u201d as a binary classifier for each of them. Finally, the ELM classifier outputs become the inputs to a fully connected layer in order to learn from all their combinations, followed by a logistic regression layer to make soft decisions for all classes. Results show that our proposed system performs better than related works in terms of accuracy, false alarm rate, Receiver Operating Characteristic (ROC), and Precision\u2010Recall Curves (PRCs).<\/jats:p>","DOI":"10.1155\/2021\/5557577","type":"journal-article","created":{"date-parts":[[2021,6,16]],"date-time":"2021-06-16T17:35:07Z","timestamp":1623864907000},"update-policy":"https:\/\/doi.org\/10.1002\/crossmark_policy","source":"Crossref","is-referenced-by-count":76,"title":["Improving the Performance of Machine Learning\u2010Based Network Intrusion Detection Systems on the UNSW\u2010NB15 Dataset"],"prefix":"10.1155","volume":"2021","author":[{"ORCID":"https:\/\/orcid.org\/0000-0003-0876-8869","authenticated-orcid":false,"given":"Soulaiman","family":"Moualla","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-6194-8255","authenticated-orcid":false,"given":"Khaldoun","family":"Khorzom","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-7868-8621","authenticated-orcid":false,"given":"Assef","family":"Jafar","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"311","published-online":{"date-parts":[[2021,6,16]]},"reference":[{"key":"e_1_2_9_1_2","volume-title":"Computer and Cyber Security: Principles, Algorithm, Applications, and Perspectives","author":"Gupta B. B.","year":"2018"},{"key":"e_1_2_9_2_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-13-1444-5"},{"key":"e_1_2_9_3_2","doi-asserted-by":"crossref","unstructured":"SommerR.andPaxsonV. Outside the closed world: on using machine learning for network intrusion detection Proceedings of the IEEE Symposium on Security and Privacy May 2010 Berkeley California 305\u2013316.","DOI":"10.1109\/SP.2010.25"},{"key":"e_1_2_9_4_2","doi-asserted-by":"publisher","DOI":"10.1613\/jair.953"},{"key":"e_1_2_9_5_2","doi-asserted-by":"publisher","DOI":"10.1007\/s10994-006-6226-1"},{"key":"e_1_2_9_6_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.neucom.2005.12.126"},{"key":"e_1_2_9_7_2","doi-asserted-by":"crossref","unstructured":"GharaeeH.andHamidH. A new feature selection IDS based on genetic algorithm and SVM Proceedings of the 2016 8th International Symposium on Telecommunications (IST) June 2016 Tehran Iran IEEE.","DOI":"10.1109\/ISTEL.2016.7881798"},{"key":"e_1_2_9_8_2","doi-asserted-by":"crossref","unstructured":"SalmanT.et al. Machine learning for anomaly detection and categorization in multi-cloud environments Proceedings of the 2017 IEEE 4th International Conference on Cyber Security and Cloud Computing (CSCloud) June 2017 New York NY USA IEEE.","DOI":"10.1109\/CSCloud.2017.15"},{"key":"e_1_2_9_9_2","doi-asserted-by":"crossref","unstructured":"PotluriS. AhmedS. andDiedrichC. Convolutional neural networks for multi-class intrusion detection system Proceedings of the International Conference on Mining Intelligence and Knowledge Exploration December 2018 Goa India Springer.","DOI":"10.1007\/978-3-030-05918-7_20"},{"key":"e_1_2_9_10_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.comnet.2018.02.028"},{"key":"e_1_2_9_11_2","doi-asserted-by":"publisher","DOI":"10.1007\/978-981-10-7871-2_13"},{"key":"e_1_2_9_12_2","doi-asserted-by":"publisher","DOI":"10.1186\/s13635-019-0098-y"},{"key":"e_1_2_9_13_2","doi-asserted-by":"publisher","DOI":"10.1109\/access.2019.2895334"},{"key":"e_1_2_9_14_2","doi-asserted-by":"crossref","unstructured":"UllahI.andMahmoudQ. H. A two-level hybrid model for anomalous activity detection in IoT networks Proceedings of the 2019 16th IEEE Annual Consumer Communications & Networking Conference (CCNC) January 2019 Las Vegas Nevada USA IEEE.","DOI":"10.1109\/CCNC.2019.8651782"},{"key":"e_1_2_9_15_2","volume-title":"Advanced Intelligent Systems for Sustainable Development","author":"Moukhafi M.","year":"2018"},{"key":"e_1_2_9_16_2","article-title":"Building an effective intrusion detection system by using hybrid data optimization based on machine learning algorithms","volume":"1","author":"Ren J.","year":"2019","journal-title":"Security and Communication Networks"},{"key":"e_1_2_9_17_2","doi-asserted-by":"publisher","DOI":"10.5815\/ijcnis.2019.08.01"},{"key":"e_1_2_9_18_2","doi-asserted-by":"publisher","DOI":"10.1109\/access.2020.2973730"},{"key":"e_1_2_9_19_2","doi-asserted-by":"crossref","unstructured":"SethiK. Deep reinforcement learning based intrusion detection system for cloud infrastructure Proceedings of the 2020 International Conference on COMmunication Systems & NETworkS (COMSNETS) January 2020 Bangalore India IEEE.","DOI":"10.1109\/COMSNETS48256.2020.9027452"},{"key":"e_1_2_9_20_2","doi-asserted-by":"publisher","DOI":"10.14569\/ijacsa.2019.0100969"},{"key":"e_1_2_9_21_2","doi-asserted-by":"publisher","DOI":"10.1016\/j.compeleceng.2013.11.024"},{"key":"e_1_2_9_22_2","doi-asserted-by":"publisher","DOI":"10.1093\/bioinformatics\/bty373"},{"key":"e_1_2_9_23_2","first-page":"8","article-title":"A review of intrusion detection system using machine learning approach","volume":"12","author":"Kok S. H.","year":"2019","journal-title":"International Journal of Engineering Research and Technology"},{"key":"e_1_2_9_24_2","doi-asserted-by":"publisher","DOI":"10.1109\/tpami.2005.127"},{"key":"e_1_2_9_25_2","article-title":"Adam: a method for stochastic optimization","volume":"1412","author":"Kingma D. P.","year":"2014","journal-title":"CoRR. Abs\/"},{"key":"e_1_2_9_26_2","volume-title":"Hands-on Machine Learning with Scikit-Learn, Keras, and TensorFlow: Concepts, Tools, and Techniques to Build Intelligent Systems","author":"G\u00e9ron A.","year":"2019"},{"key":"e_1_2_9_27_2","doi-asserted-by":"crossref","unstructured":"MoustafaN.andSlayJ. Unsw-Nb15: a comprehensive data set for network intrusion detection systems (Unsw-nb15 Network data set) Proceedings of the 2015 Military Communications and Information Systems Conference (MilCIS) December 2015 Canberra Australia 1\u20136.","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"e_1_2_9_28_2","doi-asserted-by":"publisher","DOI":"10.1080\/19393555.2015.1125974"},{"key":"e_1_2_9_29_2","doi-asserted-by":"publisher","DOI":"10.1007\/11941439_114"},{"key":"e_1_2_9_30_2","first-page":"1","article-title":"ROC graphs: notes and practical considerations for researchers","volume":"31","author":"Fawcett T.","year":"2004","journal-title":"Machine Learning"},{"key":"e_1_2_9_31_2","doi-asserted-by":"publisher","DOI":"10.1371\/journal.pone.0118432"}],"container-title":["Computational Intelligence and Neuroscience"],"original-title":[],"language":"en","link":[{"URL":"http:\/\/downloads.hindawi.com\/journals\/cin\/2021\/5557577.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"http:\/\/downloads.hindawi.com\/journals\/cin\/2021\/5557577.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/pdf\/10.1155\/2021\/5557577","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,8,6]],"date-time":"2024-08-06T11:54:18Z","timestamp":1722945258000},"score":1,"resource":{"primary":{"URL":"https:\/\/onlinelibrary.wiley.com\/doi\/10.1155\/2021\/5557577"}},"subtitle":[],"editor":[{"given":"Amparo","family":"Alonso-Betanzos","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"editor"}]}],"short-title":[],"issued":{"date-parts":[[2021,1]]},"references-count":31,"journal-issue":{"issue":"1","published-print":{"date-parts":[[2021,1]]}},"alternative-id":["10.1155\/2021\/5557577"],"URL":"https:\/\/doi.org\/10.1155\/2021\/5557577","archive":["Portico"],"relation":{},"ISSN":["1687-5265","1687-5273"],"issn-type":[{"value":"1687-5265","type":"print"},{"value":"1687-5273","type":"electronic"}],"subject":[],"published":{"date-parts":[[2021,1]]},"assertion":[{"value":"2021-02-21","order":0,"name":"received","label":"Received","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-06-04","order":2,"name":"accepted","label":"Accepted","group":{"name":"publication_history","label":"Publication History"}},{"value":"2021-06-16","order":3,"name":"published","label":"Published","group":{"name":"publication_history","label":"Publication History"}}],"article-number":"5557577"}}