{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,14]],"date-time":"2026-05-14T10:19:52Z","timestamp":1778753992526,"version":"3.51.4"},"reference-count":55,"publisher":"MDPI AG","issue":"4","license":[{"start":{"date-parts":[[2025,3,31]],"date-time":"2025-03-31T00:00:00Z","timestamp":1743379200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Research on Key Technologies for Intelligent Diagnosis of Power Information Network Security","award":["521350240008"],"award-info":[{"award-number":["521350240008"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Symmetry"],"abstract":"<jats:p>With the rapid increase in cyber-attacks, intrusion detection systems (IDS) have become essential for network security. However, traditional IDS methods often struggle with class imbalance, leading to asymmetric data distributions that adversely affect detection performance and model generalization. To address this issue and enhance detection accuracy, this paper proposes SE-DWNet, a residual network model incorporating an attention mechanism and one-dimensional depthwise separable convolution, trained on a symmetrically preprocessed dataset using SMOTETomek sampling. First, the feature distributions of the training and test datasets are analyzed using box plots, highlighting the impact of feature difference. To mitigate this difference and restore a more symmetric data distribution, we employ the SMOTETomek integrated sampling method in conjunction with a Focal Loss function. Subsequently, a lightweight residual network, incorporating the SE module and the Res-DWNet module, is designed to improve detection accuracy while maintaining computational efficiency. Extensive experiments on the NSL-KDD, CICIDS2018, and ToN-IoT datasets demonstrate that SE-DWNet outperforms existing neural network-based IDS models, achieving accuracy, precision, recall, and F1-score improvements ranging from 0.17% to 5.33%. The results confirm the effectiveness and superiority of the proposed approach in intrusion detection tasks.<\/jats:p>","DOI":"10.3390\/sym17040526","type":"journal-article","created":{"date-parts":[[2025,3,31]],"date-time":"2025-03-31T05:21:04Z","timestamp":1743398464000},"page":"526","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":3,"title":["SE-DWNet: An Advanced ResNet-Based Model for Intrusion Detection with Symmetric Data Distribution"],"prefix":"10.3390","volume":"17","author":[{"given":"Kunsan","family":"Zhang","sequence":"first","affiliation":[{"name":"State Grid Fujian Electric Power Co., Ltd. Zhangzhou Power Supply Company, No. 13 Shengli East Road, Xiangcheng District, Zhangzhou 363000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Renguang","family":"Zheng","sequence":"additional","affiliation":[{"name":"State Grid Fujian Electric Power Co., Ltd. Zhangzhou Power Supply Company, No. 13 Shengli East Road, Xiangcheng District, Zhangzhou 363000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Chaopeng","family":"Li","sequence":"additional","affiliation":[{"name":"School of Ocean Information Engineering, Jimei University, Xiamen 361021, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Song","family":"Zhang","sequence":"additional","affiliation":[{"name":"State Grid Fujian Electric Power Co., Ltd. Zhangzhou Power Supply Company, No. 13 Shengli East Road, Xiangcheng District, Zhangzhou 363000, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Xinyi","family":"Wu","sequence":"additional","affiliation":[{"name":"School of Ocean Information Engineering, Jimei University, Xiamen 361021, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-7219-5933","authenticated-orcid":false,"given":"Shidan","family":"Sun","sequence":"additional","affiliation":[{"name":"School of Ocean Information Engineering, Jimei University, Xiamen 361021, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiawen","family":"Yang","sequence":"additional","affiliation":[{"name":"School of Ocean Information Engineering, Jimei University, Xiamen 361021, China"}],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiachun","family":"Zheng","sequence":"additional","affiliation":[{"name":"School of Ocean Information Engineering, Jimei University, Xiamen 361021, China"}],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"1968","published-online":{"date-parts":[[2025,3,31]]},"reference":[{"key":"ref_1","first-page":"1","article-title":"Importance of intrusion detection system (IDS)","volume":"2","author":"Ashoor","year":"2011","journal-title":"Int. J. Sci. Eng. Res."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"176","DOI":"10.3390\/smartcities1010011","article-title":"IoT-based implementation of field area network using smart grid communication infrastructure","volume":"1","author":"Chhaya","year":"2018","journal-title":"Smart Cities"},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"1125","DOI":"10.1007\/s10207-023-00682-2","article-title":"A systematic literature review for network intrusion detection system (IDS)","volume":"22","author":"Abdulganiyu","year":"2023","journal-title":"Int. J. Inf. Secur."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"112392","DOI":"10.1109\/ACCESS.2022.3216617","article-title":"Explainable intrusion detection systems (x-ids): A survey of current methods, challenges, and opportunities","volume":"10","author":"Neupane","year":"2022","journal-title":"IEEE Access"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"23","DOI":"10.1007\/s10922-021-09589-6","article-title":"As-ids: Anomaly and signature based ids for the internet of things","volume":"29","author":"Otoum","year":"2021","journal-title":"J. Netw. Syst. Manag."},{"key":"ref_6","unstructured":"Ioulianou, P., Vasilakis, V., Moscholios, I., and Logothetis, M. (2018). A signature-based intrusion detection system for the internet of things. Inf. Commun. Technol. Form, Available online: https:\/\/eprints.whiterose.ac.uk\/133312\/."},{"key":"ref_7","first-page":"35","article-title":"Signature based intrusion detection system using SNORT","volume":"1","author":"Kumar","year":"2012","journal-title":"Int. J. Comput. Appl. Inf. Technol."},{"key":"ref_8","doi-asserted-by":"crossref","unstructured":"Kruegel, C., and Toth, T. (2003). Using decision trees to improve signature-based intrusion detection. International Workshop on Recent Advances in Intrusion Detection, Springer.","DOI":"10.1007\/978-3-540-45248-5_10"},{"key":"ref_9","doi-asserted-by":"crossref","first-page":"713","DOI":"10.1016\/j.eswa.2005.05.002","article-title":"An intelligent intrusion detection system (IDS) for anomaly and misuse detection in computer networks","volume":"29","author":"Depren","year":"2005","journal-title":"Expert Syst. Appl."},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"517","DOI":"10.1016\/j.compeleceng.2008.12.005","article-title":"A hybrid intrusion detection system design for computer network security","volume":"35","author":"Zaim","year":"2009","journal-title":"Comput. Electr. Eng."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"616","DOI":"10.1109\/JIOT.2021.3084796","article-title":"MTH-IDS: A multitiered hybrid intrusion detection system for internet of vehicles","volume":"9","author":"Yang","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_12","doi-asserted-by":"crossref","unstructured":"Khraisat, A., Gondal, I., Vamplew, P., Kamruzzaman, J., and Alazab, A. (2019). A novel ensemble of hybrid intrusion detection system for detecting internet of things attacks. Electronics, 8.","DOI":"10.3390\/electronics8111210"},{"key":"ref_13","first-page":"26","article-title":"A review of anomaly based intrusion detection systems","volume":"28","author":"Jyothsna","year":"2011","journal-title":"Int. J. Comput. Appl."},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"22351","DOI":"10.1109\/ACCESS.2021.3056614","article-title":"Benchmarking of machine learning for anomaly based intrusion detection systems in the CICIDS2017 dataset","volume":"9","author":"Maseer","year":"2021","journal-title":"IEEE Access"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"6882","DOI":"10.1109\/JIOT.2020.2970501","article-title":"Passban IDS: An intelligent anomaly-based intrusion detection system for IoT edge devices","volume":"7","author":"Eskandari","year":"2020","journal-title":"IEEE Internet Things J."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1016\/j.procs.2016.06.047","article-title":"Random forest modeling for network intrusion detection system","volume":"89","author":"Farnaaz","year":"2016","journal-title":"Procedia Comput. Sci."},{"key":"ref_17","first-page":"240217","article-title":"A new intrusion detection system based on KNN classification algorithm in wireless sensor network","volume":"2014","author":"Li","year":"2014","journal-title":"J. Electr. Comput. Eng."},{"key":"ref_18","first-page":"2828","article-title":"Decision tree based algorithm for intrusion detection","volume":"7","author":"Rai","year":"2016","journal-title":"Int. J. Adv. Netw. Appl."},{"key":"ref_19","doi-asserted-by":"crossref","first-page":"102983","DOI":"10.1016\/j.jnca.2021.102983","article-title":"A comprehensive survey and taxonomy of the SVM-based intrusion detection systems","volume":"178","author":"Mohammadi","year":"2021","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_20","unstructured":"Syarif, I., Zaluska, E., Prugel-Bennett, A., and Wills, G. (2012). Application of bagging, boosting and stacking to intrusion detection. Machine Learning and Data Mining in Pattern Recognition: 8th International Conference, MLDM 2012, Berlin, Germany, July 13\u201320, 2012. Proceedings 8, Springer."},{"key":"ref_21","doi-asserted-by":"crossref","unstructured":"Tang, Y., Gu, L., and Wang, L. (2021). Deep stacking network for intrusion detection. Sensors, 22.","DOI":"10.3390\/s22010025"},{"key":"ref_22","doi-asserted-by":"crossref","unstructured":"Mohammadpour, L., Ling, T.C., Liew, C.S., and Aryanfar, A. (2022). A survey of CNN-based network intrusion detection. Appl. Sci., 12.","DOI":"10.3390\/app12168162"},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"65","DOI":"10.1186\/s40537-021-00448-4","article-title":"Intrusion detection systems using long short-term memory (LSTM)","volume":"8","author":"Laghrissi","year":"2021","journal-title":"J. Big Data"},{"key":"ref_24","doi-asserted-by":"crossref","first-page":"115524","DOI":"10.1016\/j.eswa.2021.115524","article-title":"A bidirectional LSTM deep learning approach for intrusion detection","volume":"185","author":"Imrana","year":"2021","journal-title":"Expert Syst. Appl."},{"key":"ref_25","doi-asserted-by":"crossref","unstructured":"Seo, E., Song, H.M., and Kim, H.K. (2018, January 28\u201330). GIDS: GAN based intrusion detection system for in-vehicle network. Proceedings of the 2018 16th Annual Conference on Privacy, Security and Trust (PST), Belfast, Ireland.","DOI":"10.1109\/PST.2018.8514157"},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"102688","DOI":"10.1016\/j.jnca.2020.102688","article-title":"A network intrusion detection method based on semantic re-encoding and deep learning","volume":"164","author":"Wu","year":"2020","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"102289","DOI":"10.1016\/j.cose.2021.102289","article-title":"A fast network intrusion detection system using adaptive synthetic oversampling and LightGBM","volume":"106","author":"Liu","year":"2021","journal-title":"Comput. Secur."},{"key":"ref_28","doi-asserted-by":"crossref","unstructured":"Guo, Y., Xiong, G., Li, Z., Shi, J., Cui, M., and Gou, G. (2021, January 18\u201322). Ta-gan: Gan based traffic augmentation for imbalanced network traffic classification. Proceedings of the 2021 International Joint Conference on Neural Networks (IJCNN), Shenzhen, China.","DOI":"10.1109\/IJCNN52387.2021.9533942"},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"1000","DOI":"10.1109\/TR.2022.3164877","article-title":"Intrusion detection system after data augmentation schemes based on the VAE and CVAE","volume":"71","author":"Liu","year":"2022","journal-title":"IEEE Trans. Reliab."},{"key":"ref_30","doi-asserted-by":"crossref","unstructured":"Benaddi, H., Jouhari, M., Ibrahimi, K., Benslimane, A., and Amhoud, E.M. (2022, January 4\u20138). Adversarial attacks against iot networks using conditional gan based learning. Proceedings of the GLOBECOM 2022-2022 IEEE Global Communications Conference, Rio de Janeiro, Brazil.","DOI":"10.1109\/GLOBECOM48099.2022.10000726"},{"key":"ref_31","doi-asserted-by":"crossref","unstructured":"Lin, T.Y., Goyal, P., Girshick, R., He, K., and Doll\u00e1r, P. (2017, January 22\u201329). Focal loss for dense object detection. Proceedings of the IEEE International Conference on Computer Vision, Venice, Italy.","DOI":"10.1109\/ICCV.2017.324"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Khanam, S., Ahmedy, I., Idris, M.Y.I., and Jaward, M.H. (2022). Towards an effective intrusion detection model using focal loss variational autoencoder for internet of things (IoT). Sensors, 22.","DOI":"10.3390\/s22155822"},{"key":"ref_33","doi-asserted-by":"crossref","unstructured":"Peng, H., Wu, C., and Xiao, Y. (2023). CBF-IDS: Addressing class imbalance using CNN-BiLSTM with focal loss in network intrusion detection system. Appl. Sci., 13.","DOI":"10.3390\/app132111629"},{"key":"ref_34","doi-asserted-by":"crossref","first-page":"512","DOI":"10.1016\/j.icte.2021.04.006","article-title":"Intrusion detection for network based cloud computing by custom RC-NN and optimization","volume":"7","author":"Thilagam","year":"2021","journal-title":"ICT Express"},{"key":"ref_35","doi-asserted-by":"crossref","first-page":"418","DOI":"10.1016\/j.future.2020.07.042","article-title":"Genetic convolutional neural network for intrusion detection systems","volume":"113","author":"Nguyen","year":"2020","journal-title":"Future Gener. Comput. Syst."},{"key":"ref_36","doi-asserted-by":"crossref","first-page":"235","DOI":"10.1007\/s10207-022-00634-2","article-title":"Deep SARSA-based reinforcement learning approach for anomaly network intrusion detection system","volume":"22","author":"Mohamed","year":"2023","journal-title":"Int. J. Inf. Secur."},{"key":"ref_37","doi-asserted-by":"crossref","unstructured":"Jouhari, M., Benaddi, H., and Ibrahimi, K. (2024, January 23\u201325). Efficient Intrusion Detection: Combining X 2 Feature Selection with CNN-BiLSTM on the UNSW-NB15 Dataset. Proceedings of the 2024 11th International Conference on Wireless Networks and Mobile Communications (WINCOM), Leeds, UK.","DOI":"10.1109\/WINCOM62286.2024.10658099"},{"key":"ref_38","doi-asserted-by":"crossref","first-page":"43116","DOI":"10.1109\/ACCESS.2023.3271408","article-title":"An attention-based convolutional neural network for intrusion detection model","volume":"11","author":"Wang","year":"2023","journal-title":"IEEE Access"},{"key":"ref_39","doi-asserted-by":"crossref","unstructured":"Hu, J., Shen, L., and Sun, G. (2018, January 18\u201322). Squeeze-and-excitation networks. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Salt Lake City, UT, USA.","DOI":"10.1109\/CVPR.2018.00745"},{"key":"ref_40","doi-asserted-by":"crossref","unstructured":"Chollet, F. (2017, January 21\u201326). Xception: Deep learning with depthwise separable convolutions. Proceedings of the IEEE Conference on Computer Vision and Pattern Recognition, Honolulu, HI, USA.","DOI":"10.1109\/CVPR.2017.195"},{"key":"ref_41","unstructured":"Targ, S., Almeida, D., and Lyman, K. (2016). Resnet in resnet: Generalizing residual architectures. arXiv."},{"key":"ref_42","doi-asserted-by":"crossref","unstructured":"Koonce, B., and Koonce, B. (2021). ResNet 50. Convolutional Neural Networks with Swift for Tensorflow: Image Recognition and Dataset Categorization, Apress.","DOI":"10.1007\/978-1-4842-6168-2"},{"key":"ref_43","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., and Ghorbani, A.A. (2009, January 8\u201310). A Detailed Analysis of the KDD CUP 99 Data Set. Proceedings of the Second IEEE Symposium on Computational Intelligence for Security and Defense Applications (CISDA), Ottawa, ON, Canada.","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"ref_44","unstructured":"(2025, February 17). A Realistic Cyber Defense Dataset (CSE-CIC-IDS2018). Canadian Institute for Cybersecurity. Available online: https:\/\/registry.opendata.aws\/cse-cic-ids2018."},{"key":"ref_45","doi-asserted-by":"crossref","first-page":"102994","DOI":"10.1016\/j.scs.2021.102994","article-title":"A new distributed architecture for evaluating AI-based security systems at the edge: Network TON_IoT datasets","volume":"72","author":"Moustafa","year":"2021","journal-title":"Sustain. Cities Soc."},{"key":"ref_46","doi-asserted-by":"crossref","first-page":"485","DOI":"10.1109\/JIOT.2021.3085194","article-title":"ToN IoT-The role of heterogeneity and the need for standardization of features and attack types in IoT network intrusion datasets","volume":"9","author":"Booij","year":"2021","journal-title":"IEEE Internet Things J."},{"key":"ref_47","doi-asserted-by":"crossref","first-page":"165130","DOI":"10.1109\/ACCESS.2020.3022862","article-title":"TON_IoT telemetry dataset: A new generation dataset of IoT and IIoT for data-driven Intrusion Detection Systems","volume":"8","author":"Alsaedi","year":"2020","journal-title":"IEEE Access"},{"key":"ref_48","doi-asserted-by":"crossref","unstructured":"Moustafa, N., Keshky, M., Debiez, E., and Janicke, H. (2020\u20131, January 29). Federated TON_IoT Windows Datasets for Evaluating AI-Based Security Applications. Proceedings of the 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), Guangzhou, China.","DOI":"10.1109\/TrustCom50675.2020.00114"},{"key":"ref_49","doi-asserted-by":"crossref","unstructured":"Moustafa, N., Ahmed, M., and Ahmed, S. (2020\u20131, January 29). Data Analytics-Enabled Intrusion Detection: Evaluations of ToN_IoT Linux Datasets. Proceedings of the 2020 IEEE 19th International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom), Guangzhou, China.","DOI":"10.1109\/TrustCom50675.2020.00100"},{"key":"ref_50","unstructured":"Moustafa, N. (2019, January 21\u201325). New Generations of Internet of Things Datasets for Cybersecurity Applications based Machine Learning: TON_IoT Datasets. Proceedings of the eResearch Australasia Conference, Brisbane, Australia."},{"key":"ref_51","unstructured":"Moustafa, N. (2019). A systemic IoT-Fog-Cloud architecture for big-data analytics and cyber security systems: A review of fog computing. arXiv."},{"key":"ref_52","doi-asserted-by":"crossref","first-page":"103041","DOI":"10.1016\/j.scs.2021.103041","article-title":"IoTBoT-IDS: A Novel Statistical Learning-enabled Botnet Detection Framework for Protecting Networks of Smart Cities","volume":"72","author":"Ashraf","year":"2021","journal-title":"Sustain. Cities Soc."},{"key":"ref_53","unstructured":"Viadinugroho, R.A.A. (2021). Imbalanced Classification in Python: SMOTE-Tomek Links Method, Medium."},{"key":"ref_54","first-page":"15288","article-title":"Calibrating deep neural networks using focal loss","volume":"33","author":"Mukhoti","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."},{"key":"ref_55","first-page":"21002","article-title":"Generalized focal loss: Learning qualified and distributed bounding boxes for dense object detection","volume":"33","author":"Li","year":"2020","journal-title":"Adv. Neural Inf. Process. Syst."}],"container-title":["Symmetry"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/2073-8994\/17\/4\/526\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2025,10,9]],"date-time":"2025-10-09T17:06:29Z","timestamp":1760029589000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/2073-8994\/17\/4\/526"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025,3,31]]},"references-count":55,"journal-issue":{"issue":"4","published-online":{"date-parts":[[2025,4]]}},"alternative-id":["sym17040526"],"URL":"https:\/\/doi.org\/10.3390\/sym17040526","relation":{},"ISSN":["2073-8994"],"issn-type":[{"value":"2073-8994","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025,3,31]]}}}