{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,10,2]],"date-time":"2026-10-02T19:45:16Z","timestamp":1790970316408,"version":"4.1.0"},"reference-count":55,"publisher":"PeerJ","license":[{"start":{"date-parts":[[2024,10,8]],"date-time":"2024-10-08T00:00:00Z","timestamp":1728345600000},"content-version":"unspecified","delay-in-days":0,"URL":"https:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"content-domain":{"domain":[],"crossmark-restriction":false},"short-container-title":[],"abstract":"<jats:p>Cyberattacks are increasingly becoming more complex, which makes intrusion detection extremely difficult. Several intrusion detection approaches have been developed in the literature and utilized to tackle computer security intrusions. Implementing machine learning and deep learning models for network intrusion detection has been a topic of active research in cybersecurity. In this study, artificial neural networks (ANNs), a type of machine learning algorithm, are employed to determine optimal network weight sets during the training phase. Conventional training algorithms, such as back-propagation, may encounter challenges in optimization due to being entrapped within local minima during the iterative optimization process; global search strategies can be slow at locating global minima, and they may suffer from a low detection rate. In the ANN training, the Artificial Bee Colony (ABC) algorithm enables the avoidance of local minimum solutions by conducting a high-performance search in the solution space but it needs some modifications. To address these challenges, this work suggests a Deep Autoencoder (DAE)-based, vectorized, and parallelized ABC algorithm for training feed-forward artificial neural networks, which is tested on the UNSW-NB15 and NF-UNSW-NB15-v2 datasets. Our experimental results demonstrate that the proposed DAE-based parallel ABC-ANN outperforms existing metaheuristics, showing notable improvements in network intrusion detection. The experimental results reveal a notable improvement in network intrusion detection through this proposed approach, exhibiting an increase in detection rate (DR) by 0.76 to 0.81 and a reduction in false alarm rate (FAR) by 0.016 to 0.005 compared to the ANN-BP algorithm on the UNSW-NB15 dataset. Furthermore, there is a reduction in FAR by 0.006 to 0.0003 compared to the ANN-BP algorithm on the NF-UNSW-NB15-v2 dataset. These findings underscore the effectiveness of our proposed approach in enhancing network security against network intrusions.<\/jats:p>","DOI":"10.7717\/peerj-cs.2333","type":"journal-article","created":{"date-parts":[[2024,10,8]],"date-time":"2024-10-08T08:13:32Z","timestamp":1728375212000},"page":"e2333","source":"Crossref","is-referenced-by-count":8,"title":["Network anomaly detection using Deep Autoencoder and parallel Artificial Bee Colony algorithm-trained neural network"],"prefix":"10.7717","volume":"10","author":[{"given":"Hilal","family":"Hac\u0131lar","sequence":"first","affiliation":[{"name":"Department of Computer Engineering, Abdullah Gul University, Kayseri, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Bilge Kagan","family":"Dedeturk","sequence":"additional","affiliation":[{"name":"Erciyes University, Department of Software Engineering, Kayseri, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Burcu","family":"Bakir-Gungor","sequence":"additional","affiliation":[{"name":"Department of Computer Engineering, Abdullah Gul University, Kayseri, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Vehbi Cagri","family":"Gungor","sequence":"additional","affiliation":[{"name":"Turkcell, Istanbul, Turkey"}],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"4443","published-online":{"date-parts":[[2024,10,8]]},"reference":[{"key":"10.7717\/peerj-cs.2333\/ref-1","article-title":"TensorFlow: large-scale machine learning on heterogeneous systems","author":"Abadi","year":"2015"},{"issue":"10","key":"10.7717\/peerj-cs.2333\/ref-2","doi-asserted-by":"publisher","first-page":"8112","DOI":"10.1016\/j.jksuci.2022.07.023","article-title":"DRaNN_PSO: a deep random neural network with particle swarm optimization for intrusion detection in the industrial internet of things","volume":"34","author":"Ahmad","year":"2022","journal-title":"Journal of King Saud University-Computer and Information Sciences"},{"key":"10.7717\/peerj-cs.2333\/ref-3","first-page":"165","article-title":"Distributed denial of service attack detection using ant bee colony and artificial neural network in cloud computing","volume-title":"Proceedings of CSI 2015. Nature inspired computing","author":"Ali","year":"2018"},{"issue":"2","key":"10.7717\/peerj-cs.2333\/ref-4","doi-asserted-by":"crossref","first-page":"597","DOI":"10.14569\/IJACSA.2021.0120275","article-title":"Detecting generic network intrusion attacks using tree-based machine learning methods","volume":"12","author":"Alsariera","year":"2021","journal-title":"International Journal of Advanced Computer Science and Applications"},{"key":"10.7717\/peerj-cs.2333\/ref-5","first-page":"31","article-title":"Hybrid artificial neural network with Artificial Bee Colony algorithm for crime classification","author":"Anuar","year":"2015"},{"issue":"5","key":"10.7717\/peerj-cs.2333\/ref-6","doi-asserted-by":"publisher","first-page":"72","DOI":"10.1109\/MSP.2004.87","article-title":"The shellcode generation","volume":"2","author":"Arce","year":"2004","journal-title":"IEEE Security & Privacy"},{"issue":"9","key":"10.7717\/peerj-cs.2333\/ref-7","doi-asserted-by":"publisher","first-page":"4837","DOI":"10.1007\/s00521-018-03965-1","article-title":"Artificial bee colony-based neural network for the prediction of the fundamental period of infilled frame structures","volume":"31","author":"Asteris","year":"2019","journal-title":"Neural Computing and Applications"},{"issue":"1","key":"10.7717\/peerj-cs.2333\/ref-8","doi-asserted-by":"crossref","first-page":"014008","DOI":"10.1088\/1749-4699\/8\/1\/014008","article-title":"Hyperopt: a python library for model selection and hyperparameter optimization","volume":"8","author":"Bergstra","year":"2015","journal-title":"Computational Science & Discovery"},{"key":"10.7717\/peerj-cs.2333\/ref-9","doi-asserted-by":"publisher","first-page":"102600","DOI":"10.1016\/j.cose.2021.102600","article-title":"An efficient network behavior anomaly detection using a hybrid DBN-LSTM network","volume":"114","author":"Chen","year":"2022","journal-title":"Computers & Security"},{"key":"10.7717\/peerj-cs.2333\/ref-10","article-title":"Cybersecurity threat trends report","author":"Cisco","year":"2023"},{"issue":"6","key":"10.7717\/peerj-cs.2333\/ref-11","doi-asserted-by":"crossref","first-page":"e01802","DOI":"10.1016\/j.heliyon.2019.e01802","article-title":"Machine learning for email spam filtering: review, approaches and open research problems","volume":"5","author":"Dada","year":"2019","journal-title":"Heliyon"},{"key":"10.7717\/peerj-cs.2333\/ref-12","first-page":"4027","article-title":"Graph neural network-based anomaly detection in multivariate time series","author":"Deng","year":"2021"},{"key":"10.7717\/peerj-cs.2333\/ref-13","first-page":"2448","article-title":"Few-shot network anomaly detection via cross-network meta-learning","author":"Ding","year":"2021"},{"key":"10.7717\/peerj-cs.2333\/ref-14","doi-asserted-by":"publisher","first-page":"9469","DOI":"10.1109\/ACCESS.2023.3240109","article-title":"Optimization of intrusion detection using likely point PSO and enhanced LSTM-RNN hybrid technique in communication networks","volume":"11","author":"Donkol","year":"2023","journal-title":"IEEE Access"},{"issue":"5","key":"10.7717\/peerj-cs.2333\/ref-15","doi-asserted-by":"publisher","first-page":"643","DOI":"10.1016\/j.comnet.2003.10.003","article-title":"DDoS attacks and defense mechanisms: classification and state-of-the-art","volume":"44","author":"Douligeris","year":"2004","journal-title":"Computer Networks"},{"key":"10.7717\/peerj-cs.2333\/ref-16","doi-asserted-by":"publisher","first-page":"107042","DOI":"10.1016\/j.comnet.2019.107042","article-title":"Evolving deep learning architectures for network intrusion detection using a double PSO metaheuristic","volume":"168","author":"Elmasry","year":"2020","journal-title":"Computer Networks"},{"issue":"1","key":"10.7717\/peerj-cs.2333\/ref-17","doi-asserted-by":"publisher","first-page":"119","DOI":"10.1006\/jcss.1997.1504","article-title":"A decision-theoretic generalization of on-line learning and an application to boosting","volume":"55","author":"Freund","year":"1997","journal-title":"Journal of Computer and System Sciences"},{"key":"10.7717\/peerj-cs.2333\/ref-18","article-title":"PyGAD: an intuitive genetic algorithm python library","author":"Gad","year":"2021"},{"issue":"6","key":"10.7717\/peerj-cs.2333\/ref-19","doi-asserted-by":"publisher","first-page":"7575","DOI":"10.1007\/s12652-023-04571-3","article-title":"A novel network intrusion detection method based on metaheuristic optimisation algorithms","volume":"14","author":"Ghanbarzadeh","year":"2023","journal-title":"Journal of Ambient Intelligence and Humanized Computing"},{"key":"10.7717\/peerj-cs.2333\/ref-20","doi-asserted-by":"publisher","first-page":"130452","DOI":"10.1109\/ACCESS.2020.3009533","article-title":"An efficient intrusion detection model based on hybridization of artificial bee colony and dragonfly algorithms for training multilayer perceptrons","volume":"8","author":"Ghanem","year":"2020","journal-title":"IEEE Access"},{"issue":"1","key":"10.7717\/peerj-cs.2333\/ref-21","doi-asserted-by":"publisher","first-page":"56","DOI":"10.1016\/j.icte.2018.01.014","article-title":"Intrusion detection for cloud computing using neural networks and artificial bee colony optimization algorithm","volume":"5","author":"Hajimirzaei","year":"2019","journal-title":"Ict Express"},{"key":"10.7717\/peerj-cs.2333\/ref-22","doi-asserted-by":"publisher","first-page":"104650","DOI":"10.1109\/ACCESS.2020.3000179","article-title":"A taxonomy of network threats and the effect of current datasets on intrusion detection systems","volume":"8","author":"Hindy","year":"2020","journal-title":"IEEE Access"},{"key":"10.7717\/peerj-cs.2333\/ref-23","doi-asserted-by":"publisher","first-page":"113160","DOI":"10.1016\/j.compstruct.2020.113160","article-title":"A new and robust hybrid artificial bee colony algorithm\u2014ANN model for FRP-concrete bond strength evaluation","volume":"257","author":"Jahangir","year":"2021","journal-title":"Composite Structures"},{"key":"10.7717\/peerj-cs.2333\/ref-24","doi-asserted-by":"publisher","first-page":"116510","DOI":"10.1016\/j.eswa.2022.116510","article-title":"A K-Means clustering and SVM based hybrid concept drift detection technique for network anomaly detection","volume":"193","author":"Jain","year":"2022","journal-title":"Expert Systems with Applications"},{"key":"10.7717\/peerj-cs.2333\/ref-25","doi-asserted-by":"publisher","first-page":"315","DOI":"10.1016\/j.ins.2023.01.067","article-title":"Fuzzy logic-based DDoS attacks and network traffic anomaly detection methods: classification, overview, and future perspectives","volume":"626","author":"Javaheri","year":"2023","journal-title":"Information Sciences"},{"key":"10.7717\/peerj-cs.2333\/ref-26","doi-asserted-by":"publisher","first-page":"116545","DOI":"10.1016\/j.eswa.2022.116545","article-title":"Hybrid intrusion detection using mapreduce based black widow optimized convolutional long short-term memory neural networks","volume":"194","author":"Kanna","year":"2022","journal-title":"Expert Systems with Applications"},{"key":"10.7717\/peerj-cs.2333\/ref-27","first-page":"1","article-title":"Artificial bee colony (ABC) algorithm on training artificial neural networks","author":"Karaboga","year":"2007"},{"issue":"1","key":"10.7717\/peerj-cs.2333\/ref-28","doi-asserted-by":"publisher","first-page":"e2948","DOI":"10.1002\/jnm.2948","article-title":"Chronological salp swarm algorithm based deep belief network for intrusion detection in cloud using fuzzy entropy","volume":"35","author":"Karuppusamy","year":"2022","journal-title":"International Journal of Numerical Modelling: Electronic Networks, Devices and Fields"},{"issue":"4","key":"10.7717\/peerj-cs.2333\/ref-29","doi-asserted-by":"crossref","first-page":"4519","DOI":"10.1007\/s11063-022-11055-6","article-title":"Application of meta-heuristic algorithms for training neural networks and deep learning architectures: a comprehensive review","volume":"55","author":"Kaveh","year":"2022","journal-title":"Neural Processing Letters"},{"issue":"1","key":"10.7717\/peerj-cs.2333\/ref-30","doi-asserted-by":"publisher","first-page":"5","DOI":"10.1109\/TNNLS.2022.3182979","article-title":"Backdoor learning: a survey","volume":"35","author":"Li","year":"2022","journal-title":"IEEE Transactions on Neural Networks and Learning Systems"},{"issue":"2","key":"10.7717\/peerj-cs.2333\/ref-31","first-page":"1","article-title":"Hybrid intrusion detection system using artificial bee colony algorithm and multi-layer perceptron","volume":"13","author":"Mahmod","year":"2015","journal-title":"International Journal of Computer Science and Information Security"},{"key":"10.7717\/peerj-cs.2333\/ref-32","doi-asserted-by":"publisher","first-page":"102312","DOI":"10.1016\/j.seta.2022.102312","article-title":"A novel metaheuristics with deep learning enabled intrusion detection system for secured smart environment","volume":"52","author":"Malibari","year":"2022","journal-title":"Sustainable Energy Technologies and Assessments"},{"issue":"4","key":"10.7717\/peerj-cs.2333\/ref-33","doi-asserted-by":"publisher","first-page":"115","DOI":"10.1007\/BF02478259","article-title":"A logical calculus of the ideas immanent in nervous activity","volume":"5","author":"McCulloch","year":"1943","journal-title":"The Bulletin of Mathematical Biophysics"},{"issue":"21","key":"10.7717\/peerj-cs.2333\/ref-34","doi-asserted-by":"publisher","first-page":"433","DOI":"10.21105\/joss.00433","article-title":"PySwarms, a research-toolkit for Particle Swarm Optimization in Python","volume":"3","author":"Miranda","year":"2018","journal-title":"Journal of Open Source Software"},{"key":"10.7717\/peerj-cs.2333\/ref-35","doi-asserted-by":"crossref","DOI":"10.14722\/ndss.2018.23204","article-title":"Kitsune: an ensemble of autoencoders for online network intrusion detection","author":"Mirsky","year":"2018"},{"key":"10.7717\/peerj-cs.2333\/ref-36","first-page":"1","article-title":"UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)","author":"Moustafa","year":"2015"},{"issue":"3","key":"10.7717\/peerj-cs.2333\/ref-37","doi-asserted-by":"publisher","first-page":"1044","DOI":"10.3390\/app14031044","article-title":"Optimizing cybersecurity attack detection in computer networks: a comparative analysis of bio-inspired optimization algorithms using the CSE-CIC-IDS 2018 dataset","volume":"14","author":"Najafi\u00a0Mohsenabad","year":"2024","journal-title":"Applied Sciences"},{"key":"10.7717\/peerj-cs.2333\/ref-38","article-title":"Cupy: a numpy-compatible library for nvidia gpu calculations","author":"Nishino","year":"2017"},{"key":"10.7717\/peerj-cs.2333\/ref-39","first-page":"355","article-title":"Accurate shellcode recognition from network traffic data using artificial neural nets","author":"Onotu","year":"2015"},{"issue":"6","key":"10.7717\/peerj-cs.2333\/ref-40","doi-asserted-by":"publisher","first-page":"431","DOI":"10.1007\/s00271-010-0254-0","article-title":"Neural networks with artificial bee colony algorithm for modeling daily reference evapotranspiration","volume":"29","author":"Ozkan","year":"2011","journal-title":"Irrigation Science"},{"key":"10.7717\/peerj-cs.2333\/ref-41","first-page":"84","article-title":"Hybrid artificial bee colony algorithm for neural network training","author":"Ozturk","year":"2011"},{"issue":"2","key":"10.7717\/peerj-cs.2333\/ref-42","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1145\/3439950","article-title":"Deep learning for anomaly detection: a review","volume":"54","author":"Pang","year":"2021","journal-title":"ACM Computing Surveys (CSUR)"},{"issue":"19","key":"10.7717\/peerj-cs.2333\/ref-43","doi-asserted-by":"publisher","first-page":"e7038","DOI":"10.1002\/cpe.7038","article-title":"Hybrid whale tabu algorithm optimized convolutional neural network architecture for intrusion detection in big data","volume":"34","author":"Ponmalar","year":"2022","journal-title":"Concurrency and Computation: Practice and Experience"},{"key":"10.7717\/peerj-cs.2333\/ref-44","doi-asserted-by":"publisher","first-page":"6086","DOI":"10.1038\/s41598-024-56706-x","article-title":"Evaluation metrics and statistical tests for machine learning","volume":"14","author":"Rainio","year":"2024","journal-title":"Scientific Reports"},{"key":"10.7717\/peerj-cs.2333\/ref-45","doi-asserted-by":"publisher","first-page":"104622","DOI":"10.1016\/j.micpro.2022.104622","article-title":"HIIDS: hybrid intelligent intrusion detection system empowered with machine learning and metaheuristic algorithms for application in IoT based healthcare","author":"Saif","year":"2022","journal-title":"Microprocessors and Microsystems"},{"issue":"4","key":"10.7717\/peerj-cs.2333\/ref-46","doi-asserted-by":"publisher","first-page":"356","DOI":"10.1016\/j.jer.2023.100122","article-title":"Enhancing intrusion detection in IoT systems: a hybrid metaheuristics-deep learning approach with ensemble of recurrent neural networks","volume":"11","author":"Sanju","year":"2023","journal-title":"Journal of Engineering Research"},{"issue":"4","key":"10.7717\/peerj-cs.2333\/ref-47","doi-asserted-by":"publisher","first-page":"947","DOI":"10.1007\/s10207-023-00676-0","article-title":"From zero-shot machine learning to zero-day attack detection","volume":"22","author":"Sarhan","year":"2023","journal-title":"International Journal of Information Security"},{"key":"10.7717\/peerj-cs.2333\/ref-48","doi-asserted-by":"crossref","first-page":"357","DOI":"10.1007\/s11036-021-01843-0","article-title":"Towards a standard feature set for network intrusion detection system datasets","volume":"27","author":"Sarhan","year":"2022","journal-title":"Mobile Networks and Applications"},{"key":"10.7717\/peerj-cs.2333\/ref-49","doi-asserted-by":"publisher","first-page":"164","DOI":"10.1016\/j.jisa.2019.03.011","article-title":"A framework for zero-day vulnerabilities detection and prioritization","volume":"46","author":"Singh","year":"2019","journal-title":"Journal of Information Security and Applications"},{"issue":"3","key":"10.7717\/peerj-cs.2333\/ref-50","doi-asserted-by":"publisher","first-page":"689","DOI":"10.1007\/s00366-016-0497-3","article-title":"A hybrid artificial bee colony algorithm-artificial neural network for forecasting the blast-produced ground vibration","volume":"33","author":"Taheri","year":"2017","journal-title":"Engineering with Computers"},{"issue":"2","key":"10.7717\/peerj-cs.2333\/ref-51","doi-asserted-by":"publisher","first-page":"173","DOI":"10.15625\/1813-9663\/36\/2\/14786","article-title":"Evaluating effectiveness of ensemble classifiers when detecting fuzzers attacks on the unsw-nb15 dataset","volume":"36","author":"Thanh","year":"2020","journal-title":"Journal of Computer Science and Cybernetics"},{"issue":"5","key":"10.7717\/peerj-cs.2333\/ref-52","first-page":"390","article-title":"A survey on various cyber attacks and their classification","volume":"15","author":"Uma","year":"2013","journal-title":"International Journal of Network Security"},{"key":"10.7717\/peerj-cs.2333\/ref-53","first-page":"1","article-title":"DeepDefense: identifying DDoS attack via deep learning","author":"Yuan","year":"2017"},{"key":"10.7717\/peerj-cs.2333\/ref-54","doi-asserted-by":"publisher","first-page":"107049","DOI":"10.1016\/j.comnet.2019.107049","article-title":"HELAD: a novel network anomaly detection model based on heterogeneous ensemble learning","volume":"169","author":"Zhong","year":"2020","journal-title":"Computer Networks"},{"key":"10.7717\/peerj-cs.2333\/ref-55","doi-asserted-by":"publisher","first-page":"120082","DOI":"10.1016\/j.jclepro.2020.120082","article-title":"Employing artificial bee colony and particle swarm techniques for optimizing a neural network in prediction of heating and cooling loads of residential buildings","volume":"254","author":"Zhou","year":"2020","journal-title":"Journal of Cleaner Production"}],"container-title":["PeerJ Computer Science"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/peerj.com\/articles\/cs-2333.pdf","content-type":"application\/pdf","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/peerj.com\/articles\/cs-2333.xml","content-type":"application\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/peerj.com\/articles\/cs-2333.html","content-type":"text\/html","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/peerj.com\/articles\/cs-2333.pdf","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,10,8]],"date-time":"2024-10-08T08:13:42Z","timestamp":1728375222000},"score":1,"resource":{"primary":{"URL":"https:\/\/peerj.com\/articles\/cs-2333"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024,10,8]]},"references-count":55,"alternative-id":["10.7717\/peerj-cs.2333"],"URL":"https:\/\/doi.org\/10.7717\/peerj-cs.2333","archive":["CLOCKSS","LOCKSS","Portico"],"relation":{},"ISSN":["2376-5992"],"issn-type":[{"value":"2376-5992","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024,10,8]]},"article-number":"e2333"}}