{"id":"https://openalex.org/W4412374904","doi":"https://doi.org/10.1155/sec/5729035","title":"From Flow to Packet: A Unified Machine Learning Approach for Advanced Intrusion Detection","display_name":"From Flow to Packet: A Unified Machine Learning Approach for Advanced Intrusion Detection","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4412374904","doi":"https://doi.org/10.1155/sec/5729035"},"language":"en","primary_location":{"id":"doi:10.1155/sec/5729035","doi":"https://doi.org/10.1155/sec/5729035","is_oa":true,"landing_page_url":"https://doi.org/10.1155/sec/5729035","pdf_url":null,"source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","poland-20"],"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1155/sec/5729035","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5029661382","display_name":"Didik Sudyana","orcid":"https://orcid.org/0000-0001-5378-2622","observed_orcids":["https://orcid.org/0000-0001-5378-2622"]},"institutions":[{"id":"https://openalex.org/I91807558","display_name":"National Cheng Kung University","ror":"https://ror.org/01b8kcc49","country_code":"TW","type":"education","lineage":["https://openalex.org/I91807558"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Didik Sudyana","raw_affiliation_strings":["Computer and Network Center ,  National Cheng Kung University ,  Tainan ,  701 ,  Taiwan , ncku.edu.tw"],"raw_orcid":"https://orcid.org/0000-0001-5378-2622","affiliations":[{"raw_affiliation_string":"Computer and Network Center ,  National Cheng Kung University ,  Tainan ,  701 ,  Taiwan , ncku.edu.tw","institution_ids":["https://openalex.org/I91807558"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5082477793","display_name":"Fietyata Yudha","orcid":"https://orcid.org/0000-0002-4590-1780","observed_orcids":["https://orcid.org/0000-0002-4590-1780"]},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Fietyata Yudha","raw_affiliation_strings":["Department of Computer Science ,  National Yang Ming Chiao Tung University ,  Hsinchu ,  300 ,  Taiwan , nctu.edu.tw"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science ,  National Yang Ming Chiao Tung University ,  Hsinchu ,  300 ,  Taiwan , nctu.edu.tw","institution_ids":["https://openalex.org/I148366613"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5021844836","display_name":"Ying\u2013Dar Lin","orcid":"https://orcid.org/0000-0002-5226-4396","observed_orcids":["https://orcid.org/0000-0002-5226-4396"]},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":true,"raw_author_name":"Ying-Dar Lin","raw_affiliation_strings":["Department of Computer Science ,  National Yang Ming Chiao Tung University ,  Hsinchu ,  300 ,  Taiwan , nctu.edu.tw"],"raw_orcid":"https://orcid.org/0000-0002-5226-4396","affiliations":[{"raw_affiliation_string":"Department of Computer Science ,  National Yang Ming Chiao Tung University ,  Hsinchu ,  300 ,  Taiwan , nctu.edu.tw","institution_ids":["https://openalex.org/I148366613"]}]},{"author_position":"middle","author":{"id":null,"display_name":"Chia-Hung Lai","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4210148468","display_name":"Industrial Technology Research Institute","ror":"https://ror.org/05szzwt63","country_code":"TW","type":"nonprofit","lineage":["https://openalex.org/I4210148468"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Chia-Hung Lai","raw_affiliation_strings":["Industrial Technology Research Institute ,  Hsinchu ,  310 ,  Taiwan , itri.org.tw"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Industrial Technology Research Institute ,  Hsinchu ,  310 ,  Taiwan , itri.org.tw","institution_ids":["https://openalex.org/I4210148468"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084330488","display_name":"Po\u2010Ching Lin","orcid":"https://orcid.org/0000-0001-8294-5857","observed_orcids":["https://orcid.org/0000-0001-8294-5857"]},"institutions":[{"id":"https://openalex.org/I148099254","display_name":"National Chung Cheng University","ror":"https://ror.org/0028v3876","country_code":"TW","type":"education","lineage":["https://openalex.org/I148099254"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Po-Ching Lin","raw_affiliation_strings":["Department of Computer Science and Information Engineering ,  National Chung Cheng University ,  Chiayi ,  600 ,  Taiwan , ccu.edu.tw"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Information Engineering ,  National Chung Cheng University ,  Chiayi ,  600 ,  Taiwan , ccu.edu.tw","institution_ids":["https://openalex.org/I148099254"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5035925200","display_name":"Ren\u2010Hung Hwang","orcid":"https://orcid.org/0000-0001-7996-4184","observed_orcids":["https://orcid.org/0000-0001-7996-4184"]},"institutions":[{"id":"https://openalex.org/I148366613","display_name":"National Yang Ming Chiao Tung University","ror":"https://ror.org/00se2k293","country_code":"TW","type":"education","lineage":["https://openalex.org/I148366613"]}],"countries":["TW"],"is_corresponding":false,"raw_author_name":"Ren-Hung Hwang","raw_affiliation_strings":["College of Artificial Intelligence ,  National Yang Ming Chiao Tung University ,  Tainan ,  710 ,  Taiwan , nctu.edu.tw"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Artificial Intelligence ,  National Yang Ming Chiao Tung University ,  Tainan ,  710 ,  Taiwan , nctu.edu.tw","institution_ids":["https://openalex.org/I148366613"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5021844836"],"corresponding_institution_ids":["https://openalex.org/I148366613"],"apc_list":{"value":2670,"currency":"USD","value_usd":2670},"apc_paid":{"value":2670,"currency":"USD","value_usd":2670},"fwci":1.517,"has_fulltext":false,"cited_by_count":5,"citation_normalized_percentile":{"value":0.81869408,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":89,"max":98},"biblio":{"volume":"2025","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9984999895095825,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.0007999999797903001,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.00039999998989515007,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.9049999713897705},{"id":"https://openalex.org/keywords/network-flow-analysis","display_name":"network flow analysis","score":0.6579999923706055},{"id":"https://openalex.org/keywords/convolutional-neural-networks","display_name":"convolutional neural networks","score":0.9580000042915344},{"id":"https://openalex.org/keywords/confidence-threshold","display_name":"confidence threshold","score":0.4880000054836273},{"id":"https://openalex.org/keywords/microservices-security","display_name":"microservices security","score":0.6859999895095825},{"id":"https://openalex.org/keywords/5g","display_name":"5G","score":0.7020000219345093},{"id":"https://openalex.org/keywords/attack-detection","display_name":"attack detection","score":0.460999995470047},{"id":"https://openalex.org/keywords/computational-efficiency","display_name":"computational efficiency","score":0.5},{"id":"https://openalex.org/keywords/unseen-attack-generalization","display_name":"unseen attack generalization","score":0.6759999990463257}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9004769325256348},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6623595952987671},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.5602697730064392},{"id":"https://openalex.org/C38349280","wikidata":"https://www.wikidata.org/wiki/Q1434290","display_name":"Flow (mathematics)","level":2,"score":0.5158947706222534},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.37346428632736206},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.35013729333877563},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.35006222128868103},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.3203672170639038},{"id":"https://openalex.org/C57879066","wikidata":"https://www.wikidata.org/wiki/Q41217","display_name":"Mechanics","level":1,"score":0.06531623005867004},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1155/sec/5729035","doi":"https://doi.org/10.1155/sec/5729035","is_oa":true,"landing_page_url":"https://doi.org/10.1155/sec/5729035","pdf_url":null,"source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","poland-20"],"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1155/sec/5729035","doi":"https://doi.org/10.1155/sec/5729035","is_oa":true,"landing_page_url":"https://doi.org/10.1155/sec/5729035","pdf_url":null,"source":{"id":"https://openalex.org/S120683614","display_name":"Security and Communication Networks","issn_l":"1939-0114","issn":["1939-0114","1939-0122"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["ccf-c","cwts-core","poland-20"],"host_organization":"https://openalex.org/P4310319869","host_organization_name":"Hindawi Publishing Corporation","host_organization_lineage":["https://openalex.org/P4310319869","https://openalex.org/P4310320595"],"host_organization_lineage_names":["Hindawi Publishing Corporation","Wiley"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Security and Communication Networks","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/9","display_name":"Industry, innovation and infrastructure","score":0.5378999710083008}],"study_designs":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322214","display_name":"Industrial Technology Research Institute","ror":"https://ror.org/05szzwt63"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":36,"referenced_works":["https://openalex.org/W568197693","https://openalex.org/W2343448572","https://openalex.org/W2743678626","https://openalex.org/W2753434589","https://openalex.org/W2772317693","https://openalex.org/W2789828921","https://openalex.org/W2885239699","https://openalex.org/W2912856897","https://openalex.org/W2918696265","https://openalex.org/W2931122162","https://openalex.org/W2944949445","https://openalex.org/W2949676527","https://openalex.org/W2959716986","https://openalex.org/W3005641848","https://openalex.org/W3045474099","https://openalex.org/W3096966075","https://openalex.org/W3131541364","https://openalex.org/W3205336034","https://openalex.org/W3213995312","https://openalex.org/W4205088899","https://openalex.org/W4206187163","https://openalex.org/W4211016117","https://openalex.org/W4220967601","https://openalex.org/W4285149716","https://openalex.org/W4291743636","https://openalex.org/W4295539309","https://openalex.org/W4296020854","https://openalex.org/W4308335451","https://openalex.org/W4310013333","https://openalex.org/W4313591247","https://openalex.org/W4352976871","https://openalex.org/W4388878537","https://openalex.org/W4402289221","https://openalex.org/W4402634640","https://openalex.org/W4402742274","https://openalex.org/W4403243966"],"related_works":["https://openalex.org/W4415125598","https://openalex.org/W4361018099","https://openalex.org/W7117892272","https://openalex.org/W4416250724","https://openalex.org/W7161149734","https://openalex.org/W2519316756","https://openalex.org/W7077065647","https://openalex.org/W7214216266","https://openalex.org/W4409917248","https://openalex.org/W4299872970"],"abstract_inverted_index":{"In":[0],"the":[1,9,92,111,123,163,184],"era":[2],"of":[3,174,192],"advanced":[4,80],"networking":[5],"with":[6,189],"5G":[7],"integration,":[8],"need":[10],"for":[11,79,88,101,196],"efficient":[12],"and":[13,55,71,96,120,145,157,194,198,211],"scalable":[14],"intrusion":[15,27,81],"detection":[16,28,73,87,100,149,190],"systems":[17],"has":[18],"become":[19],"critical":[20,50],"to":[21,51,168,177],"securing":[22],"large\u2010scale":[23],"digital":[24],"infrastructures.":[25],"Traditional":[26],"approaches":[29],"either":[30],"analyze":[31],"individual":[32],"packets":[33],"yielding":[34],"high":[35],"computational":[36,164],"costs":[37],"or":[38,104],"rely":[39],"solely":[40,179],"on":[41,180],"flow\u2010based":[42,70,86,112],"data,":[43],"which":[44],"can":[45],"miss":[46],"important":[47],"sequence\u2010level":[48],"information":[49],"identifying":[52],"interservice":[53],"communications":[54],"attack":[56],"behaviors.":[57],"To":[58],"address":[59],"this,":[60],"we":[61],"propose":[62],"a":[63,117,131,136],"unified":[64],"machine":[65],"learning":[66],"approach":[67,161],"that":[68],"integrates":[69],"packet\u2010based":[72,99,124,181,199],"using":[74,116,130],"convolutional":[75],"neural":[76],"networks":[77],"(CNNs)":[78],"detection.":[82],"Our":[83],"method":[84,129],"prioritizes":[85],"short":[89],"flows":[90,103],"as":[91],"first":[93],"defense":[94],"layer":[95],"selectively":[97],"invokes":[98],"longer":[102],"cases":[105],"deemed":[106],"uncertain.":[107],"Uncertain":[108],"predictions":[109],"from":[110,135],"stage":[113],"are":[114],"identified":[115],"confidence":[118],"threshold":[119],"re\u2010evaluated":[121],"by":[122,166],"system.":[125],"We":[126],"validate":[127],"our":[128,160],"systematically":[132],"generated":[133,207],"dataset":[134],"microservices":[137],"environment":[138],"alongside":[139],"benchmark":[140],"datasets,":[141],"including":[142],"CIC\u2010IDS\u20102017,":[143],"CIC\u2010IDS\u20102018,":[144],"CREMEv2.":[146],"This":[147],"hybrid":[148],"strategy":[150],"yields":[151],"strong":[152,187],"performance":[153],"in":[154],"both":[155],"accuracy":[156],"efficiency.":[158],"Specifically,":[159],"reduces":[162],"cost":[165],"up":[167],"24":[169],"\u00d7":[170],"(approximately":[171],"1.38":[172],"orders":[173],"magnitude)":[175],"compared":[176],"relying":[178],"analysis.":[182],"Additionally,":[183],"model":[185],"demonstrates":[186],"generalization":[188],"rates":[191],"95%":[193],"100%":[195],"flow\u2010":[197],"detection,":[200],"respectively,":[201],"even":[202],"against":[203],"previously":[204],"unseen":[205],"attacks":[206],"through":[208],"behavioral":[209],"variations":[210],"command\u2010level":[212],"perturbations.":[213]},"counts_by_year":[{"year":2026,"cited_by_count":4},{"year":2025,"cited_by_count":1}],"updated_date":"2026-11-10T11:39:43.021295","created_date":"2025-10-10T00:00:00"}