{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,14]],"date-time":"2026-07-14T12:53:28Z","timestamp":1784033608138,"version":"3.55.0"},"reference-count":43,"publisher":"MDPI AG","issue":"1","license":[{"start":{"date-parts":[[2025,1,14]],"date-time":"2025-01-14T00:00:00Z","timestamp":1736812800000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["JCP"],"abstract":"<jats:p>Intrusion detection has been a vast-surveyed topic for many decades as network attacks are tremendously growing. This has heightened the need for security in networks as web-based communication systems are advanced nowadays. The proposed work introduces an intelligent semi-supervised intrusion detection system based on different algorithms to classify the network attacks accurately. Initially, the pre-processing is accomplished using null value dropping and standard scaler normalization. After pre-processing, an enhanced Deep Reinforcement Learning (EDRL) model is employed to extract high-level representations and learn complex patterns from data by means of interaction with the environment. The enhancement of deep reinforcement learning is made by associating a deep autoencoder (AE) and an improved flamingo search algorithm (IFSA) to approximate the Q-function and optimal policy selection. After feature representations, a support vector machine (SVM) classifier, which discriminates the input into normal and attack instances, is employed for classification. The presented model is simulated in the Python platform and evaluated using the UNSW-NB15, CICIDS2017, and NSL-KDD datasets. The overall classification accuracy is 99.6%, 99.93%, and 99.42% using UNSW-NB15, CICIDS2017, and NSL-KDD datasets, which is higher than the existing detection frameworks.<\/jats:p>","DOI":"10.3390\/jcp5010003","type":"journal-article","created":{"date-parts":[[2025,1,14]],"date-time":"2025-01-14T06:13:07Z","timestamp":1736835187000},"page":"3","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":6,"title":["Enhanced Deep Autoencoder-Based Reinforcement Learning Model with Improved Flamingo Search Policy Selection for Attack Classification"],"prefix":"10.3390","volume":"5","author":[{"ORCID":"https:\/\/orcid.org\/0000-0002-4994-1093","authenticated-orcid":false,"given":"Dharani Kanta","family":"Roy","sequence":"first","affiliation":[{"name":"Department of Computer Science & Engineering, Central Institute of Technology Kokrajhar, Assam 783370, India"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Hemanta Kumar","family":"Kalita","sequence":"additional","affiliation":[{"name":"Department of Computer Science & Engineering, Central Institute of Technology Kokrajhar, Assam 783370, India"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"1968","published-online":{"date-parts":[[2025,1,14]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","unstructured":"More, S., Idrissi, M., Mahmoud, H., and Asyhari, A.T. (2024). Enhanced Intrusion Detection Systems Performance with UNSW-NB15 Data Analysis. Algorithms, 17.","DOI":"10.3390\/a17020064"},{"key":"ref_2","doi-asserted-by":"crossref","unstructured":"Kumar, A., Guleria, K., Chauhan, R., and Upadhyay, D. (2024, January 28\u201329). Advancing Intrusion Detection with Machine Learning: Insights from the UNSW-NB15 Dataset. Proceedings of the 2024 IEEE International Conference on Information Technology, Electronics and Intelligent Communication Systems (ICITEICS), Bangalore, India.","DOI":"10.1109\/ICITEICS61368.2024.10625148"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"453","DOI":"10.1007\/s11276-023-03495-2","article-title":"Towards an efficient model for network intrusion detection system (IDS): Systematic literature review","volume":"30","author":"Abdulganiyu","year":"2024","journal-title":"Wirel. Netw."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"102767","DOI":"10.1016\/j.jnca.2020.102767","article-title":"Deep learning methods in network intrusion detection: A survey and an objective comparison","volume":"169","author":"Gamage","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_5","unstructured":"Kimanzi, R., Kimanga, P., Cherori, D., and Gikunda, P.K. (2024). Deep Learning Algorithms Used in Intrusion Detection Systems\u2014A Review. arXiv."},{"key":"ref_6","doi-asserted-by":"crossref","unstructured":"Sasikumar, A., and Lilly, S.S. (2024, January 21\u201323). A Systematic Review of Various Deep Learning Techniques for Network Intrusion Detection System. Proceedings of the International Conference on Computational Intelligence in Data Science, Chennai, India.","DOI":"10.1007\/978-3-031-69986-3_2"},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"9310","DOI":"10.1109\/JIOT.2021.3130434","article-title":"Hierarchical adversarial attacks against graph-neural-network-based IoT network intrusion detection system","volume":"9","author":"Zhou","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"29575","DOI":"10.1109\/ACCESS.2020.2972627","article-title":"BAT: Deep learning methods on network intrusion detection using NSL-KDD dataset","volume":"8","author":"Su","year":"2020","journal-title":"IEEE Access"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"2227","DOI":"10.1016\/j.procs.2024.04.211","article-title":"Network anomaly detection and performance evaluation of Convolutional Neural Networks on UNSW-NB15 dataset","volume":"235","author":"Vibhute","year":"2024","journal-title":"Procedia Comput. Sci."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"1803","DOI":"10.1109\/TNSM.2020.3014929","article-title":"Multi-stage optimized machine learning framework for network intrusion detection","volume":"18","author":"Injadat","year":"2020","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"123","DOI":"10.1186\/s13677-024-00685-x","article-title":"Enhancing intrusion detection: A hybrid machine and deep learning approach","volume":"13","author":"Sajid","year":"2024","journal-title":"J. Cloud Comput."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Khan, M.A. (2021). HCRNNIDS: Hybrid convolutional recurrent neural network-based network intrusion detection system. Processes, 9.","DOI":"10.3390\/pr9050834"},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1007\/s11036-021-01843-0","article-title":"Towards a standard feature set for network intrusion detection system datasets","volume":"27","author":"Sarhan","year":"2022","journal-title":"Mob. Netw. Appl."},{"key":"ref_14","doi-asserted-by":"crossref","unstructured":"Alzahrani, A.O., and Alenazi, M.J. (2021). Designing a network intrusion detection system based on machine learning for software defined networks. Future Internet, 13.","DOI":"10.3390\/fi13050111"},{"key":"ref_15","doi-asserted-by":"crossref","unstructured":"Razzaq, H.H., Al-Rammahi, L.F., and Mahdi, A.M. (Int. J. Image Graph., 2024). Modified Whale Algorithm and Morley PSO-ML-Based Hyperparameter Optimization for Intrusion Detection, Int. J. Image Graph., online ready.","DOI":"10.1142\/S0219467826500099"},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"130","DOI":"10.1016\/j.future.2021.03.024","article-title":"Multi-dimensional feature fusion and stacking ensemble mechanism for network intrusion detection","volume":"122","author":"Zhang","year":"2021","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"113","DOI":"10.1016\/j.comcom.2022.12.010","article-title":"A deep learning technique for intrusion detection system using a Recurrent Neural Networks based framework","volume":"199","author":"Kasongo","year":"2023","journal-title":"Comput. Commun."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"6048087","DOI":"10.1155\/2023\/6048087","article-title":"A systematic and comprehensive survey of recent advances in intrusion detection systems using machine learning: Deep learning, datasets, and attack taxonomy","volume":"2023","author":"Momand","year":"2023","journal-title":"J. Sensors"},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"4705982","DOI":"10.1155\/2020\/4705982","article-title":"CNID: Research of network intrusion detection based on convolutional neural network","volume":"2020","author":"Liu","year":"2020","journal-title":"Discret. Dyn. Nat. Soc."},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"167","DOI":"10.1186\/s40537-023-00834-0","article-title":"Network intrusion detection using feature fusion with deep learning","volume":"10","author":"Ayantayo","year":"2023","journal-title":"J. Big Data"},{"key":"ref_21","doi-asserted-by":"crossref","first-page":"4479","DOI":"10.1007\/s11760-024-03088-2","article-title":"Adaptive weighted kernel support vector machine-based circle search approach for intrusion detection in IoT environments","volume":"18","author":"Geetha","year":"2024","journal-title":"Signal Image Video Process."},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Radhika, R. (2024, January 26\u201327). Intrusion Detection System using Improved Pelican Optimization Algorithm-based Support Vector Machine to Secure Data in Cloud. Proceedings of the 2024 International Conference on Data Science and Network Security (ICDSNS), Tiptur, India.","DOI":"10.1109\/ICDSNS62112.2024.10691077"},{"key":"ref_23","doi-asserted-by":"crossref","unstructured":"Singh, Y.R., Singh, C.C., Takhellambam, L., Singh, K.R., and Hoque, N. (2024, January 19\u201320). ML-Based Intrusion Detection with Feature Analysis on Unbalanced UNSW-NB15 Dataset. Proceedings of the International Conference on Communication, Devices and Networking, Rangpo, India.","DOI":"10.1007\/978-981-97-6465-5_26"},{"key":"ref_24","first-page":"405","article-title":"Hybrid model for improving the classification effectiveness of network intrusion detection","volume":"Volume 1267","author":"Dutta","year":"2021","journal-title":"Proceedings of the 13th International Conference on Computational Intelligence in Security for Information Systems (CISIS 2020)"},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"26190","DOI":"10.1109\/ACCESS.2017.2766844","article-title":"A logitboost-based algorithm for detecting known and unknown web attacks","volume":"5","author":"Kamarudin","year":"2017","journal-title":"IEEE Access"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"1397","DOI":"10.1007\/s10586-019-03008-x","article-title":"An integrated rule based intrusion detection system: Analysis on UNSW-NB15 data set and the real time online dataset","volume":"23","author":"Kumar","year":"2020","journal-title":"Clust. Comput."},{"key":"ref_27","doi-asserted-by":"crossref","unstructured":"Shieh, C.S., Lin, W.W., Nguyen, T.T., Chen, C.H., Horng, M.F., and Miu, D. (2021). Detection of unknown ddos attacks with deep learning and gaussian mixture model. Appl. Sci., 11.","DOI":"10.3390\/app11115213"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"4197","DOI":"10.1109\/TNSM.2021.3120804","article-title":"Network abnormal traffic detection model based on semi-supervised deep reinforcement learning","volume":"18","author":"Dong","year":"2021","journal-title":"IEEE Trans. Netw. Serv. Manag."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1007\/s10207-022-00634-2","article-title":"Deep SARSA-based reinforcement learning approach for anomaly network intrusion detection system","volume":"22","author":"Mohamed","year":"2023","journal-title":"Int. J. Inf. Secur."},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"531","DOI":"10.1007\/s42452-024-06209-1","article-title":"Hybrid intrusion detection models based on GWO optimized deep learning","volume":"6","author":"Elsaid","year":"2024","journal-title":"Discov. Appl. Sci."},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Jouhari, M., Benaddi, H., and Ibrahimi, K. (2024, January 23\u201325). Efficient Intrusion Detection: Combining X 2 Feature Selection with CNN-BiLSTM on the UNSW-NB15 Dataset. Proceedings of the 2024 11th International Conference on Wireless Networks and Mobile Communications (WINCOM), Leeds, UK.","DOI":"10.1109\/WINCOM62286.2024.10658099"},{"key":"ref_32","doi-asserted-by":"crossref","first-page":"5059","DOI":"10.1007\/s11276-022-03214-3","article-title":"Network intrusion detection system for DDoS attacks in ICS using deep autoencoders","volume":"30","author":"Sestelo","year":"2024","journal-title":"Wirel. Netw."},{"key":"ref_33","doi-asserted-by":"crossref","first-page":"88564","DOI":"10.1109\/ACCESS.2021.3090512","article-title":"Flamingo search algorithm: A new swarm intelligence optimization algorithm","volume":"9","author":"Zhiheng","year":"2021","journal-title":"IEEE Access"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"745","DOI":"10.1080\/07357907.2024.2403088","article-title":"Flamingo Search Sailfish Optimizer Based SqueezeNet for Detection of Breast Cancer Using MRI Images","volume":"42","author":"Vijaya","year":"2024","journal-title":"Cancer Investig."},{"key":"ref_35","doi-asserted-by":"crossref","unstructured":"Fu, Y., Liu, D., Fu, S., Chen, J., and He, L. (2024). Enhanced aquila optimizer based on tent chaotic mapping and new rules. Sci. Rep., 14.","DOI":"10.1038\/s41598-024-53064-6"},{"key":"ref_36","doi-asserted-by":"crossref","unstructured":"Pisner, D.A., and Schnyer, D.M. (2020). Support vector machine. Machine Learning, Elsevier.","DOI":"10.1016\/B978-0-12-815739-8.00006-7"},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Moustafa, N., and Slay, J. (2015, January 10\u201312). UNSW-NB15: A comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set). Proceedings of the 2015 military communications and information systems conference (MilCIS), Canberra, Australia.","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"18","DOI":"10.1080\/19393555.2015.1125974","article-title":"The evaluation of Network Anomaly Detection Systems: Statistical analysis of the UNSW-NB15 data set and the comparison with the KDD99 data set","volume":"25","author":"Moustafa","year":"2016","journal-title":"Inf. Secur. J. Glob. Perspect."},{"key":"ref_39","unstructured":"Moustafa, N. (2017). Designing an Online and Reliable Statistical Anomaly Detection Framework for Dealing with Large High-Speed Network Traffic. [Ph.D. Thesis, UNSW Sydney]."},{"key":"ref_40","doi-asserted-by":"crossref","first-page":"81","DOI":"10.1016\/j.patrec.2024.07.010","article-title":"A micro Reinforcement Learning architecture for Intrusion Detection Systems","volume":"185","author":"Darabi","year":"2024","journal-title":"Pattern Recognit. Lett."},{"key":"ref_41","doi-asserted-by":"crossref","first-page":"1467","DOI":"10.1049\/cit2.12359","article-title":"Analysis of anomalous behaviour in network systems using deep reinforcement learning with convolutional neural network architecture","volume":"9","author":"Modirrousta","year":"2024","journal-title":"CAAI Trans. Intell. Technol."},{"key":"ref_42","doi-asserted-by":"crossref","first-page":"44335","DOI":"10.1109\/ACCESS.2024.3376434","article-title":"Network Intrusion Detection Based on Feature Image and Deformable Vision Transformer Classification","volume":"12","author":"He","year":"2024","journal-title":"IEEE Access"},{"key":"ref_43","doi-asserted-by":"crossref","first-page":"16301","DOI":"10.1007\/s11227-024-06108-7","article-title":"Enhancing network intrusion detection: A dual-ensemble approach with CTGAN-balanced data and weak classifiers","volume":"80","author":"Soflaei","year":"2024","journal-title":"J. Supercomput."}],"container-title":["Journal of Cybersecurity and Privacy"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2624-800X\/5\/1\/3\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,8]],"date-time":"2025-10-08T10:28:29Z","timestamp":1759919309000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2624-800X\/5\/1\/3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,1,14]]},"references-count":43,"journal-issue":{"issue":"1","published-online":{"date-parts":[[2025,3]]}},"alternative-id":["jcp5010003"],"URL":"https:\/\/doi.org\/10.3390\/jcp5010003","relation":{},"ISSN":["2624-800X"],"issn-type":[{"value":"2624-800X","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,1,14]]}}}