{"id":"https://openalex.org/W4415345762","doi":"https://doi.org/10.26418/elkha.v17i2.95037","title":"Mitigating Class Imbalance in DDoS Detection: The Impact of Random Over Sampling on Machine Learning Performance","display_name":"Mitigating Class Imbalance in DDoS Detection: The Impact of Random Over Sampling on Machine Learning Performance","publication_year":2025,"publication_date":"2025-10-20","ids":{"openalex":"https://openalex.org/W4415345762","doi":"https://doi.org/10.26418/elkha.v17i2.95037"},"language":"en","primary_location":{"id":"doi:10.26418/elkha.v17i2.95037","doi":"https://doi.org/10.26418/elkha.v17i2.95037","is_oa":true,"landing_page_url":"https://doi.org/10.26418/elkha.v17i2.95037","pdf_url":"https://jurnal.untan.ac.id/index.php/Elkha/article/download/95037/pdf/75676768294","source":{"id":"https://openalex.org/S4210224787","display_name":"ELKHA","issn_l":"1858-1463","issn":["1858-1463","2580-6807"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310315223","host_organization_name":"Tanjungpura University","host_organization_lineage":["https://openalex.org/P4310315223"],"host_organization_lineage_names":["Tanjungpura University"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ELKHA","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://jurnal.untan.ac.id/index.php/Elkha/article/download/95037/pdf/75676768294","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114767152","display_name":"Wildanil Ghozi","orcid":"https://orcid.org/0009-0003-9214-1061","observed_orcids":["https://orcid.org/0009-0003-9214-1061"]},"institutions":[{"id":"https://openalex.org/I4210127958","display_name":"Universitas Dian Nuswantoro","ror":"https://ror.org/02csxcg02","country_code":"ID","type":"education","lineage":["https://openalex.org/I4210127958"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Wildanil Ghozi","raw_affiliation_strings":["Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia","institution_ids":["https://openalex.org/I4210127958"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120062087","display_name":"Jasim Nadheer Hussein","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I4401726868","display_name":"Alfa University College","ror":"https://ror.org/01qz28660","country_code":"MY","type":"education","lineage":["https://openalex.org/I4401726868"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Jasim Nadheer Hussein","raw_affiliation_strings":["School of Business, Management and Technology, Alfa International College, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Business, Management and Technology, Alfa International College, Malaysia","institution_ids":["https://openalex.org/I4401726868"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5014166866","display_name":"Ramadhan Rakhmat Sani","orcid":"https://orcid.org/0009-0003-9335-7999","observed_orcids":["https://orcid.org/0009-0003-9335-7999"]},"institutions":[{"id":"https://openalex.org/I4210127958","display_name":"Universitas Dian Nuswantoro","ror":"https://ror.org/02csxcg02","country_code":"ID","type":"education","lineage":["https://openalex.org/I4210127958"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Ramadhan Rakhmat Sani","raw_affiliation_strings":["Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia","institution_ids":["https://openalex.org/I4210127958"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5031942384","display_name":"Fauzi Adi Rafrastara","orcid":"https://orcid.org/0000-0003-3046-2276","observed_orcids":["https://orcid.org/0000-0003-3046-2276"]},"institutions":[{"id":"https://openalex.org/I4210127958","display_name":"Universitas Dian Nuswantoro","ror":"https://ror.org/02csxcg02","country_code":"ID","type":"education","lineage":["https://openalex.org/I4210127958"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Fauzi Adi Rafrastara","raw_affiliation_strings":["Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia","institution_ids":["https://openalex.org/I4210127958"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5008326989","display_name":"Cinantya Paramita","orcid":"https://orcid.org/0009-0000-7321-0541","observed_orcids":["https://orcid.org/0009-0000-7321-0541"]},"institutions":[{"id":"https://openalex.org/I4210127958","display_name":"Universitas Dian Nuswantoro","ror":"https://ror.org/02csxcg02","country_code":"ID","type":"education","lineage":["https://openalex.org/I4210127958"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Cinantya Paramita","raw_affiliation_strings":["Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia","institution_ids":["https://openalex.org/I4210127958"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5056721487","display_name":"Catur Supriyanto","orcid":"https://orcid.org/0000-0002-8682-9295","observed_orcids":["https://orcid.org/0000-0002-8682-9295"]},"institutions":[{"id":"https://openalex.org/I4210127958","display_name":"Universitas Dian Nuswantoro","ror":"https://ror.org/02csxcg02","country_code":"ID","type":"education","lineage":["https://openalex.org/I4210127958"]}],"countries":["ID"],"is_corresponding":false,"raw_author_name":"Catur Supriyanto","raw_affiliation_strings":["Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Science, Universitas Dian Nuswantoro, Indonesia","institution_ids":["https://openalex.org/I4210127958"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":350000,"currency":"IDR","value_usd":22},"apc_paid":{"value":350000,"currency":"IDR","value_usd":22},"fwci":0.8396,"has_fulltext":true,"cited_by_count":2,"citation_normalized_percentile":{"value":0.7594274,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":96,"max":97},"biblio":{"volume":"17","issue":"2","first_page":"109","last_page":"117"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9951000213623047,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.00279999990016222,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/ddos-detection","display_name":"DDoS attack detection","score":0.8889999985694885},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.9800000190734863},{"id":"https://openalex.org/keywords/random-oversampling","display_name":"random oversampling","score":0.9010000228881836},{"id":"https://openalex.org/keywords/network-traffic-classification","display_name":"network traffic classification","score":0.8519999980926514},{"id":"https://openalex.org/keywords/unsw-nb15","display_name":"UNSW-NB15","score":0.9330000281333923},{"id":"https://openalex.org/keywords/multiclass-classification","display_name":"multi-class classification","score":0.7870000004768372},{"id":"https://openalex.org/keywords/decision-tree","display_name":"decision tree","score":0.7730000019073486},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.7480000257492065},{"id":"https://openalex.org/keywords/xgboost","display_name":"XGBoost","score":0.9710000157356262},{"id":"https://openalex.org/keywords/naive-bayes","display_name":"naive Bayes","score":0.7850000262260437},{"id":"https://openalex.org/keywords/malicious-traffic-detection","display_name":"malicious traffic detection","score":0.4259999990463257}],"concepts":[{"id":"https://openalex.org/C38822068","wikidata":"https://www.wikidata.org/wiki/Q131406","display_name":"Denial-of-service attack","level":3,"score":0.9186000227928162},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7490000128746033},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.7202000021934509},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6776000261306763},{"id":"https://openalex.org/C166955791","wikidata":"https://www.wikidata.org/wiki/Q629579","display_name":"Macro","level":2,"score":0.656000018119812},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6011999845504761},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.5956000089645386},{"id":"https://openalex.org/C43214815","wikidata":"https://www.wikidata.org/wiki/Q7310987","display_name":"Reliability (semiconductor)","level":3,"score":0.46939998865127563},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.430400013923645},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.38850000500679016},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3878999948501587},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.38510000705718994},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.3695000112056732},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.35350000858306885},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.35339999198913574},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.34139999747276306},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.3411000072956085},{"id":"https://openalex.org/C5481197","wikidata":"https://www.wikidata.org/wiki/Q16766476","display_name":"Decision tree learning","level":3,"score":0.32199999690055847},{"id":"https://openalex.org/C140779682","wikidata":"https://www.wikidata.org/wiki/Q210868","display_name":"Sampling (signal processing)","level":3,"score":0.30959999561309814},{"id":"https://openalex.org/C20353970","wikidata":"https://www.wikidata.org/wiki/Q1056998","display_name":"Simple random sample","level":3,"score":0.3086000084877014},{"id":"https://openalex.org/C2778915421","wikidata":"https://www.wikidata.org/wiki/Q3643177","display_name":"Performance improvement","level":2,"score":0.29910001158714294},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2903999984264374},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C203274722","wikidata":"https://www.wikidata.org/wiki/Q7001161","display_name":"Network performance","level":2,"score":0.26249998807907104}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.26418/elkha.v17i2.95037","doi":"https://doi.org/10.26418/elkha.v17i2.95037","is_oa":true,"landing_page_url":"https://doi.org/10.26418/elkha.v17i2.95037","pdf_url":"https://jurnal.untan.ac.id/index.php/Elkha/article/download/95037/pdf/75676768294","source":{"id":"https://openalex.org/S4210224787","display_name":"ELKHA","issn_l":"1858-1463","issn":["1858-1463","2580-6807"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310315223","host_organization_name":"Tanjungpura University","host_organization_lineage":["https://openalex.org/P4310315223"],"host_organization_lineage_names":["Tanjungpura University"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ELKHA","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:689e6d5290394b86923d48d59b7d2f8a","doi":null,"is_oa":false,"landing_page_url":"https://doaj.org/article/689e6d5290394b86923d48d59b7d2f8a","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Elkha: Jurnal Teknik Elektro, Vol 17, Iss 2, Pp 109-117 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.26418/elkha.v17i2.95037","doi":"https://doi.org/10.26418/elkha.v17i2.95037","is_oa":true,"landing_page_url":"https://doi.org/10.26418/elkha.v17i2.95037","pdf_url":"https://jurnal.untan.ac.id/index.php/Elkha/article/download/95037/pdf/75676768294","source":{"id":"https://openalex.org/S4210224787","display_name":"ELKHA","issn_l":"1858-1463","issn":["1858-1463","2580-6807"],"is_oa":true,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":"https://openalex.org/P4310315223","host_organization_name":"Tanjungpura University","host_organization_lineage":["https://openalex.org/P4310315223"],"host_organization_lineage_names":["Tanjungpura University"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"ELKHA","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.4000000059604645,"display_name":"Reduced inequalities","id":"https://metadata.un.org/sdg/10"}],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4415345762.pdf","grobid_xml":"https://content.openalex.org/works/W4415345762.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":["https://openalex.org/W4403502385","https://openalex.org/W7163591542","https://openalex.org/W4389349988","https://openalex.org/W4322624974","https://openalex.org/W4391448543","https://openalex.org/W3185052486","https://openalex.org/W7117411553","https://openalex.org/W4411208337","https://openalex.org/W7171561710","https://openalex.org/W7223198810"],"abstract_inverted_index":{"Distributed":[0],"Denial":[1],"of":[2,82,122,223,230],"Service":[3],"(DDoS)":[4],"attacks":[5,35],"are":[6],"a":[7,40,87,159,209],"major":[8],"cybersecurity":[9],"threat,":[10],"involving":[11],"malicious":[12],"traffic":[13,38,54],"generated":[14],"from":[15],"numerous":[16],"compromised":[17],"sources":[18],"to":[19,62,151,157],"overwhelm":[20],"and":[21,65,135,155,178],"disable":[22],"targeted":[23],"services.":[24],"Although":[25],"machine":[26,169],"learning":[27,170],"(ML)":[28],"has":[29],"shown":[30],"promise":[31],"in":[32,47,97,118,197,212,226,235],"detecting":[33],"DDoS":[34,99,231],"through":[36],"network":[37],"analysis,":[39],"key":[41],"challenge":[42],"remains:":[43],"the":[44,80,120,181,194,220,228],"class":[45,224],"imbalance":[46,60],"datasets":[48],"such":[49,129,145],"as":[50,130,146],"UNSW-NB15,":[51],"where":[52],"normal":[53],"significantly":[55],"outweighs":[56],"attack":[57,71],"instances.":[58],"This":[59],"leads":[61],"biased":[63],"predictions":[64],"degraded":[66],"detection":[67,95,232],"performance":[68,160],"for":[69,214],"minority":[70],"classes.":[72],"To":[73],"address":[74],"this":[75,204],"issue,":[76],"our":[77,114],"study":[78],"investigates":[79],"impact":[81],"Random":[83,176],"Over":[84],"Sampling":[85],"(ROS),":[86],"simple":[88],"yet":[89],"effective":[90],"balancing":[91,124,225],"technique":[92],"on":[93,108,125],"improving":[94],"accuracy":[96,213],"multi-class":[98,237],"classification":[100],"tasks.":[101],"While":[102],"prior":[103],"works":[104],"have":[105],"primarily":[106],"focused":[107],"ensemble":[109],"algorithms":[110],"or":[111,148],"feature":[112],"selection,":[113],"approach":[115],"is":[116,206],"distinct":[117],"emphasizing":[119],"effect":[121],"data":[123],"macro":[126,131,133,136,198],"evaluation":[127],"metrics":[128],"precision,":[132],"recall,":[134],"F1-score.":[137],"ROS":[138,192],"was":[139],"selected":[140],"over":[141],"more":[142],"complex":[143],"alternatives,":[144],"SMOTE":[147],"ADASYN,":[149],"due":[150],"its":[152],"computational":[153],"efficiency":[154],"ability":[156],"establish":[158],"baseline":[161],"without":[162],"introducing":[163],"synthetic":[164],"noise.":[165],"We":[166],"evaluate":[167],"four":[168],"algorithms:":[171],"Decision":[172,188],"Tree,":[173],"Na\u00efve":[174],"Bayes,":[175],"Forest,":[177],"XGBoost,":[179],"using":[180],"UNSW-NB15":[182],"dataset.":[183],"The":[184],"results":[185],"show":[186],"that":[187],"Tree":[189],"combined":[190],"with":[191],"yields":[193],"highest":[195],"improvement":[196,205],"F1-score,":[199],"increasing":[200],"by":[201,208],"36%.":[202],"However,":[203],"accompanied":[207],"moderate":[210],"reduction":[211],"certain":[215],"algorithms.":[216],"These":[217],"findings":[218],"highlight":[219],"critical":[221],"role":[222],"enhancing":[227],"reliability":[229],"models,":[233],"especially":[234],"imbalanced":[236],"scenarios.":[238]},"counts_by_year":[{"year":2026,"cited_by_count":2}],"updated_date":"2026-10-28T10:33:24.094632","created_date":"2025-10-21T00:00:00"}