{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T09:05:02Z","timestamp":1790154302489,"version":"4.0.1"},"reference-count":34,"publisher":"MDPI AG","issue":"19","license":[{"start":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T00:00:00Z","timestamp":1790121600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"name":"Guangxi Science and Technology Major Project","award":["AA19254016"],"award-info":[{"award-number":["AA19254016"]}]}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":["Sensors"],"abstract":"<jats:p>With the rapid advancement of network technology and the Internet of Things (IoT), massive, high-dimensional traffic data pose significant challenges to Network Intrusion Detection Systems (NIDS). Existing deep learning methods face two major limitations: (1) Insufficient feature extraction: single models struggle to concurrently capture local and global features, while serial hybrid architectures are prone to feature information loss. (2) Superficial feature fusion: existing strategies overlook deep interactions between features and lack adaptive filtering mechanisms to eliminate redundant information. To address these issues, a Parallel Local\u2013Global Feature Extraction (PLGFE) module is constructed, incorporating a dual-stream architecture with parallel Temporal Convolutional Network (TCN) and Bidirectional Long Short-Term Memory (BiLSTM) branches. This module utilizes TCN\u2019s dilated convolutions and BiLSTM\u2019s bidirectional memory units to concurrently extract complementary local and global features. The Cross-Attention Gating (CAG) module integrates cross-attention and gating mechanisms for feature fusion: the former enables deep interaction between heterogeneous features, while the latter adaptively selects key features and suppresses redundant interaction features through gated weights. Experiments on the CICIDS2017 and CICIoV2024 datasets demonstrate the proposed method achieves multi-classification accuracies of 99.85% and 99.64%, with F1-Scores of 97.03% and 97.64%, respectively. Comparisons and ablation experiments confirm its competitive detection performance and component effectiveness.<\/jats:p>","DOI":"10.3390\/s26196016","type":"journal-article","created":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T08:14:39Z","timestamp":1790151279000},"page":"6016","update-policy":"https:\/\/doi.org\/10.3390\/mdpi_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["Parallel Local\u2013Global Feature Extraction and Cross-Attention Gated Fusion for Network Intrusion Detection"],"prefix":"10.3390","volume":"26","author":[{"given":"Tinghui","family":"Huang","sequence":"first","affiliation":[{"name":"School of Computer Science and Information Security, Guilin University of Electronic Technology, Guilin 541004, China"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"conceptualization","vocabulary":"credit"},{"role":"resources","vocabulary":"credit"},{"role":"writing-review-editing","vocabulary":"credit"},{"role":"supervision","vocabulary":"credit"},{"role":"project-administration","vocabulary":"credit"},{"role":"funding-acquisition","vocabulary":"credit"}]},{"given":"Yu","family":"Wang","sequence":"additional","affiliation":[{"name":"School of Electronic Information, Guilin University of Electronic Technology, Beihai 536000, China"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"conceptualization","vocabulary":"credit"},{"role":"methodology","vocabulary":"credit"},{"role":"software","vocabulary":"credit"},{"role":"validation","vocabulary":"credit"},{"role":"formal-analysis","vocabulary":"credit"},{"role":"data-curation","vocabulary":"credit"},{"role":"writing-original-draft","vocabulary":"credit"},{"role":"writing-review-editing","vocabulary":"credit"},{"role":"visualization","vocabulary":"credit"}]},{"given":"Yuming","family":"Qin","sequence":"additional","affiliation":[{"name":"School of Electronic Information, Guilin University of Electronic Technology, Beihai 536000, China"}],"role":[{"vocabulary":"crossref","role":"author"},{"role":"visualization","vocabulary":"credit"},{"role":"data-curation","vocabulary":"credit"}]}],"member":"1968","published-online":{"date-parts":[[2026,9,23]]},"reference":[{"key":"ref_1","doi-asserted-by":"crossref","first-page":"100467","DOI":"10.1016\/j.cosrev.2022.100467","article-title":"Landscape of IoT security","volume":"44","author":"Schiller","year":"2022","journal-title":"Comput. Sci. Rev."},{"key":"ref_2","doi-asserted-by":"crossref","first-page":"1","DOI":"10.1145\/3372823","article-title":"The AI-based cyber threat landscape: A survey","volume":"53","author":"Kaloudi","year":"2020","journal-title":"ACM Comput. Surv."},{"key":"ref_3","doi-asserted-by":"crossref","first-page":"16","DOI":"10.1016\/j.jnca.2012.09.004","article-title":"Intrusion detection system: A comprehensive review","volume":"36","author":"Liao","year":"2013","journal-title":"J. Netw. Comput. Appl."},{"key":"ref_4","doi-asserted-by":"crossref","first-page":"20","DOI":"10.1186\/s42400-019-0038-7","article-title":"Survey of intrusion detection systems: Techniques, datasets and challenges","volume":"2","author":"Khraisat","year":"2019","journal-title":"Cybersecurity"},{"key":"ref_5","doi-asserted-by":"crossref","first-page":"1669","DOI":"10.1007\/s00521-015-1964-2","article-title":"A hybrid method consisting of GA and SVM for intrusion detection system","volume":"27","author":"Rahmani","year":"2016","journal-title":"Neural Comput. Appl."},{"key":"ref_6","doi-asserted-by":"crossref","first-page":"13492","DOI":"10.1016\/j.eswa.2012.07.009","article-title":"A network intrusion detection system based on a Hidden Na\u00efve Bayes multiclass classifier","volume":"39","author":"Koc","year":"2012","journal-title":"Expert Syst. Appl."},{"key":"ref_7","doi-asserted-by":"crossref","first-page":"213","DOI":"10.1016\/j.procs.2016.06.047","article-title":"Random forest modeling for network intrusion detection system","volume":"89","author":"Farnaaz","year":"2016","journal-title":"Procedia Comput. Sci."},{"key":"ref_8","doi-asserted-by":"crossref","first-page":"360","DOI":"10.1016\/j.asoc.2015.10.011","article-title":"A novel SVM-kNN-PSO ensemble method for intrusion detection system","volume":"38","author":"Aburomman","year":"2016","journal-title":"Appl. Soft Comput."},{"key":"ref_9","doi-asserted-by":"crossref","unstructured":"Qazi, E.U.H., Almorjan, A., and Zia, T. (2022). A one-dimensional convolutional neural network (1D-CNN) based deep learning system for network intrusion detection. Appl. Sci., 12.","DOI":"10.3390\/app12167986"},{"key":"ref_10","doi-asserted-by":"crossref","first-page":"170","DOI":"10.1016\/j.comcom.2023.04.018","article-title":"CANET: A hierarchical CNN-attention model for network intrusion detection","volume":"205","author":"Ren","year":"2023","journal-title":"Comput. Commun."},{"key":"ref_11","doi-asserted-by":"crossref","first-page":"102031","DOI":"10.1016\/j.simpat.2019.102031","article-title":"Deep recurrent neural network for IoT intrusion detection system","volume":"101","author":"Almiani","year":"2020","journal-title":"Simul. Model. Pract. Theory"},{"key":"ref_12","doi-asserted-by":"crossref","first-page":"123027","DOI":"10.1016\/j.eswa.2023.123027","article-title":"Dugat-LSTM: Deep learning based network intrusion detection system using chaotic optimization strategy","volume":"245","author":"Devendiran","year":"2024","journal-title":"Expert Syst. Appl."},{"key":"ref_13","doi-asserted-by":"crossref","first-page":"149054","DOI":"10.1109\/ACCESS.2025.3598777","article-title":"LRT-DDPM: A Diffusion Model-Based Approach for Network Traffic Data Generation in Intrusion Detection","volume":"13","author":"Wang","year":"2025","journal-title":"IEEE Access"},{"key":"ref_14","doi-asserted-by":"crossref","first-page":"2377","DOI":"10.1109\/ACCESS.2024.3523938","article-title":"MARNet: An efficient two-stage intrusion detection model based on deep learning","volume":"13","author":"Wu","year":"2024","journal-title":"IEEE Access"},{"key":"ref_15","doi-asserted-by":"crossref","first-page":"101923","DOI":"10.1016\/j.cose.2020.101923","article-title":"HSTF-model: An HTTP-based trojan detection model via the hierarchical spatio-temporal features of traffics","volume":"96","author":"Xie","year":"2020","journal-title":"Comput. Secur."},{"key":"ref_16","doi-asserted-by":"crossref","first-page":"103713","DOI":"10.1016\/j.cose.2024.103713","article-title":"An active learning framework using deep Q-network for zero-day attack detection","volume":"139","author":"Wu","year":"2024","journal-title":"Comput. Secur."},{"key":"ref_17","doi-asserted-by":"crossref","first-page":"110298","DOI":"10.1016\/j.comnet.2024.110298","article-title":"L2-BiTCN-CNN: Spatio-temporal features fusion-based multi-classification model for various internet applications identification","volume":"243","author":"Li","year":"2024","journal-title":"Comput. Netw."},{"key":"ref_18","doi-asserted-by":"crossref","first-page":"112445","DOI":"10.1016\/j.asoc.2024.112445","article-title":"Multiscale spatio-temporal feature fusion based non-intrusive appliance load monitoring for multiple industrial industries","volume":"167","author":"Lin","year":"2024","journal-title":"Appl. Soft Comput."},{"key":"ref_19","doi-asserted-by":"crossref","unstructured":"Song, Y., Luktarhan, N., Shi, Z., and Wu, H. (2023). TGA: A novel network intrusion detection method based on TCN, BiGRU and attention mechanism. Electronics, 12.","DOI":"10.3390\/electronics12132849"},{"key":"ref_20","doi-asserted-by":"crossref","first-page":"3561","DOI":"10.1109\/JSAC.2023.3310091","article-title":"An intelligent digital twin method based on spatio-temporal feature fusion for IoT attack behavior identification","volume":"41","author":"Wang","year":"2023","journal-title":"IEEE J. Sel. Areas Commun."},{"key":"ref_21","unstructured":"Lu, J., Batra, D., Parikh, D., and Lee, S. (2019, January 8\u201314). ViLBERT: Pretraining task-agnostic visiolinguistic representations for vision-and-language tasks. Proceedings of the Annual Conference on Neural Information Processing Systems 2019, Vancouver, BC, Canada."},{"key":"ref_22","doi-asserted-by":"crossref","first-page":"1326","DOI":"10.1109\/TIP.2022.3197972","article-title":"Decoupled Cross-Modal Phrase-Attention Network for Image-Sentence Matching","volume":"33","author":"Shi","year":"2024","journal-title":"IEEE Trans. Image Process."},{"key":"ref_23","doi-asserted-by":"crossref","first-page":"131938","DOI":"10.1016\/j.neucom.2025.131938","article-title":"CHARM: Cross-modal hierarchical attention for recognizing malicious memes","volume":"664","author":"Zhu","year":"2026","journal-title":"Neurocomputing"},{"key":"ref_24","unstructured":"Bai, S., Kolter, J.Z., and Koltun, V. (2018). An empirical evaluation of generic convolutional and recurrent networks for sequence modeling. arXiv."},{"key":"ref_25","doi-asserted-by":"crossref","first-page":"602","DOI":"10.1016\/j.neunet.2005.06.042","article-title":"Framewise phoneme classification with bidirectional LSTM and other neural network architectures","volume":"18","author":"Graves","year":"2005","journal-title":"Neural Netw."},{"key":"ref_26","doi-asserted-by":"crossref","first-page":"108","DOI":"10.5220\/0006639801080116","article-title":"Toward generating a new intrusion detection dataset and intrusion traffic characterization","volume":"Volume 1","author":"Sharafaldin","year":"2018","journal-title":"Proceedings of the 4th International Conference on Information Systems Security and Privacy (ICISSP)"},{"key":"ref_27","doi-asserted-by":"crossref","first-page":"101209","DOI":"10.1016\/j.iot.2024.101209","article-title":"CICIoV2024: Advancing realistic IDS approaches against DoS and spoofing attack in IoV CAN bus","volume":"26","author":"Neto","year":"2024","journal-title":"Internet Things"},{"key":"ref_28","doi-asserted-by":"crossref","first-page":"427","DOI":"10.1016\/j.ipm.2009.03.002","article-title":"A systematic analysis of performance measures for classification tasks","volume":"45","author":"Sokolova","year":"2009","journal-title":"Inf. Process. Manag."},{"key":"ref_29","doi-asserted-by":"crossref","first-page":"441","DOI":"10.15388\/21-INFOR457","article-title":"Study of multi-class classification algorithms\u2019 performance on highly imbalanced network intrusion datasets","volume":"32","author":"Bulavas","year":"2021","journal-title":"Informatica"},{"key":"ref_30","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1023\/A:1010933404324","article-title":"Random Forests","volume":"45","author":"Breiman","year":"2001","journal-title":"Mach. Learn."},{"key":"ref_31","first-page":"3149","article-title":"LightGBM: A Highly Efficient Gradient Boosting Decision Tree","volume":"Volume 30","author":"Ke","year":"2017","journal-title":"Proceedings of the Advances in Neural Information Processing Systems"},{"key":"ref_32","doi-asserted-by":"crossref","unstructured":"Chen, T., and Guestrin, C. (2016). XGBoost: A Scalable Tree Boosting System. Proceedings of the 22nd ACM SIGKDD International Conference on Knowledge Discovery and Data Mining, Association for Computing Machinery.","DOI":"10.1145\/2939672.2939785"},{"key":"ref_33","first-page":"6679","article-title":"TabNet: Attentive Interpretable Tabular Learning","volume":"35","author":"Arik","year":"2021","journal-title":"Proc. AAAI Conf. Artif. Intell."},{"key":"ref_34","first-page":"18932","article-title":"Revisiting Deep Learning Models for Tabular Data","volume":"Volume 34","author":"Gorishniy","year":"2021","journal-title":"Proceedings of the Advances in Neural Information Processing Systems"}],"container-title":["Sensors"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/19\/6016\/pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T08:20:22Z","timestamp":1790151622000},"score":1,"resource":{"primary":{"URL":"https:\/\/www.mdpi.com\/1424-8220\/26\/19\/6016"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9,23]]},"references-count":34,"journal-issue":{"issue":"19","published-online":{"date-parts":[[2026,10]]}},"alternative-id":["s26196016"],"URL":"https:\/\/doi.org\/10.3390\/s26196016","relation":{},"ISSN":["1424-8220"],"issn-type":[{"value":"1424-8220","type":"electronic"}],"subject":[],"published":{"date-parts":[[2026,9,23]]}}}