{"id":"https://openalex.org/W4416640364","doi":"https://doi.org/10.1016/j.procs.2025.10.182","title":"Impact of Resampling techniques in Deep Learning based Intrusion Detection: A Comparative Study on NSL-KDD and UNSW-NB15","display_name":"Impact of Resampling techniques in Deep Learning based Intrusion Detection: A Comparative Study on NSL-KDD and UNSW-NB15","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4416640364","doi":"https://doi.org/10.1016/j.procs.2025.10.182"},"language":"en","primary_location":{"id":"doi:10.1016/j.procs.2025.10.182","doi":"https://doi.org/10.1016/j.procs.2025.10.182","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.182","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"},"volume":null,"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://doi.org/10.1016/j.procs.2025.10.182","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5119351466","display_name":"Nisha Dangol","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I92688161","display_name":"Acadia University","ror":"https://ror.org/00839we02","country_code":"CA","type":"education","lineage":["https://openalex.org/I92688161"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Nisha Dangol","raw_affiliation_strings":["Jodrey School of Computer Science, Acadia University, Wolfville, NS, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jodrey School of Computer Science, Acadia University, Wolfville, NS, Canada","institution_ids":["https://openalex.org/I92688161"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5065715044","display_name":"Amir Eaman","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I92688161","display_name":"Acadia University","ror":"https://ror.org/00839we02","country_code":"CA","type":"education","lineage":["https://openalex.org/I92688161"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Amir Eaman","raw_affiliation_strings":["Jodrey School of Computer Science, Acadia University, Wolfville, NS, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jodrey School of Computer Science, Acadia University, Wolfville, NS, Canada","institution_ids":["https://openalex.org/I92688161"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036220430","display_name":"Elhadi Shakshuki","orcid":"https://orcid.org/0000-0002-0226-075X","observed_orcids":["https://orcid.org/0000-0002-0226-075X"]},"institutions":[{"id":"https://openalex.org/I92688161","display_name":"Acadia University","ror":"https://ror.org/00839we02","country_code":"CA","type":"education","lineage":["https://openalex.org/I92688161"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Elhadi Shakshuki","raw_affiliation_strings":["Jodrey School of Computer Science, Acadia University, Wolfville, NS, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jodrey School of Computer Science, Acadia University, Wolfville, NS, Canada","institution_ids":["https://openalex.org/I92688161"]}]},{"author_position":"last","author":{"id":null,"display_name":"Esteve Hassan","orcid":null,"observed_orcids":[]},"institutions":[{"id":"https://openalex.org/I92688161","display_name":"Acadia University","ror":"https://ror.org/00839we02","country_code":"CA","type":"education","lineage":["https://openalex.org/I92688161"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Esteve Hassan","raw_affiliation_strings":["Jodrey School of Computer Science, Acadia University, Wolfville, NS, Canada"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Jodrey School of Computer Science, Acadia University, Wolfville, NS, Canada","institution_ids":["https://openalex.org/I92688161"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5119351466"],"corresponding_institution_ids":["https://openalex.org/I92688161"],"apc_list":null,"apc_paid":null,"fwci":1.3313,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.81645546,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":94},"biblio":{"volume":"272","issue":null,"first_page":"84","last_page":"91"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9789999723434448,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9789999723434448,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.015799999237060547,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.0010999999940395355,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-intrusion-detection","display_name":"network intrusion detection","score":0.9900000095367432},{"id":"https://openalex.org/keywords/data-resampling","display_name":"data resampling","score":0.7789999842643738},{"id":"https://openalex.org/keywords/class-imbalance","display_name":"class imbalance","score":0.9890000224113464},{"id":"https://openalex.org/keywords/adasyn","display_name":"ADASYN","score":0.8090000152587891},{"id":"https://openalex.org/keywords/random-undersampling","display_name":"random undersampling","score":0.6679999828338623},{"id":"https://openalex.org/keywords/tomek-links","display_name":"Tomek links","score":0.9399999976158142},{"id":"https://openalex.org/keywords/nsl-kdd","display_name":"NSL-KDD dataset","score":0.8309999704360962},{"id":"https://openalex.org/keywords/unsw-nb15","display_name":"UNSW-NB15","score":0.9990000128746033},{"id":"https://openalex.org/keywords/attack-classification","display_name":"attack classification","score":0.781000018119812},{"id":"https://openalex.org/keywords/minority-class-performance","display_name":"minority class performance","score":0.8199999928474426},{"id":"https://openalex.org/keywords/permutation-feature-importance","display_name":"permutation importance","score":0.6269999742507935}],"concepts":[{"id":"https://openalex.org/C136536468","wikidata":"https://www.wikidata.org/wiki/Q1225894","display_name":"Undersampling","level":2,"score":0.9190999865531921},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8702999949455261},{"id":"https://openalex.org/C150921843","wikidata":"https://www.wikidata.org/wiki/Q1170431","display_name":"Resampling","level":2,"score":0.8116999864578247},{"id":"https://openalex.org/C197323446","wikidata":"https://www.wikidata.org/wiki/Q331222","display_name":"Oversampling","level":3,"score":0.7368999719619751},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.7329000234603882},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6718999743461609},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.664900004863739},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6620000004768372},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5673999786376953},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.49050000309944153},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4844000041484833},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4708999991416931},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.4708000123500824},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.40400001406669617},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3935000002384186},{"id":"https://openalex.org/C58489278","wikidata":"https://www.wikidata.org/wiki/Q1172284","display_name":"Data set","level":2,"score":0.38179999589920044},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.3799000084400177},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.3772999942302704},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.36820000410079956},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.349700003862381},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.2644999921321869},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2529999911785126},{"id":"https://openalex.org/C207609745","wikidata":"https://www.wikidata.org/wiki/Q4944086","display_name":"Bootstrapping (finance)","level":2,"score":0.2522999942302704},{"id":"https://openalex.org/C79581498","wikidata":"https://www.wikidata.org/wiki/Q1367530","display_name":"Suite","level":2,"score":0.2515999972820282}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.procs.2025.10.182","doi":"https://doi.org/10.1016/j.procs.2025.10.182","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.182","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.procs.2025.10.182","doi":"https://doi.org/10.1016/j.procs.2025.10.182","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.procs.2025.10.182","pdf_url":null,"source":{"id":"https://openalex.org/S120348307","display_name":"Procedia Computer Science","issn_l":"1877-0509","issn":["1877-0509"],"is_oa":true,"is_in_doaj":false,"is_core":true,"listed_in":["cwts-core","jufo-1","norway-1"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Procedia Computer Science","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":9,"referenced_works":["https://openalex.org/W3126752450","https://openalex.org/W3156522613","https://openalex.org/W3174223893","https://openalex.org/W3202080502","https://openalex.org/W4220982217","https://openalex.org/W4321240473","https://openalex.org/W4390610752","https://openalex.org/W4405849044","https://openalex.org/W4408153924"],"related_works":[],"abstract_inverted_index":{"This":[0],"study":[1],"examines":[2],"the":[3,60,101,120,127,138,157,171,178],"effectiveness":[4],"of":[5,9,30,54,62,159,173],"a":[6,14,27,34],"specific":[7,179],"set":[8],"data":[10],"resampling":[11,160,175],"techniques":[12],"within":[13,182],"deep":[15,128,187],"learning":[16,129,188],"framework":[17],"to":[18,92,154,177,185],"enhance":[19],"network":[20],"intrusion":[21],"detection":[22,61],"system":[23],"(NIDS)":[24],"which":[25,57,104],"is":[26],"critical":[28,65],"aspect":[29],"cybersecurity.":[31],"We":[32],"evaluate":[33],"CNN-BLSTM":[35],"model":[36,130],"for":[37,100,119],"attack":[38],"classification":[39,115],"on":[40,161],"two":[41],"widely":[42],"used":[43],"benchmark":[44],"NIDS":[45,183],"datasets":[46,184],"(NSL-KDD":[47],"and":[48,76,88,150,165],"UNSW-NB15)":[49],"that":[50,99],"exhibit":[51],"varying":[52],"degrees":[53],"class":[55,163,180],"imbalance":[56],"can":[58],"undermine":[59],"rare":[63],"yet":[64],"cyberattacks.":[66],"Our":[67],"approach":[68],"integrates":[69],"Adaptive":[70],"Synthetic":[71],"(ADASYN)":[72],"oversampling":[73],"both":[74],"independently":[75],"in":[77,190],"combination":[78],"with":[79,111,123],"undersampling":[80],"methods":[81],"such":[82],"as":[83],"Random":[84],"UnderSampling":[85],"(RUS),":[86],"TomekLinks":[87],"One-Sided":[89],"Selection":[90],"(OSS)":[91],"address":[93],"this":[94],"imbalance.":[95],"The":[96],"results":[97],"demonstrate":[98],"NSL-KDD":[102],"dataset":[103],"suffers":[105],"from":[106],"severe":[107],"imbalance,":[108],"ADASYN":[109],"coupled":[110],"OSS":[112],"significantly":[113],"improves":[114],"accuracy.":[116],"In":[117],"contrast,":[118],"UNSW-NB15":[121],"dataset,":[122],"relatively":[124],"milder":[125],"imbalances,":[126],"performs":[131],"comparably":[132],"well":[133],"without":[134],"extensive":[135],"resampling.":[136],"Beyond":[137],"standard":[139],"metrics,":[140],"we":[141],"also":[142],"conduct":[143],"additional":[144],"evaluations":[145],"through":[146],"class-wise":[147],"accuracy":[148],"analysis":[149],"permutation-based":[151],"feature":[152,166],"importance":[153,172],"better":[155],"understand":[156],"impact":[158],"minority":[162],"performance":[164,189],"relevance.":[167],"These":[168],"findings":[169],"underscore":[170],"tailoring":[174],"strategies":[176],"distributions":[181],"optimize":[186],"cybersecurity":[191],"applications.":[192]},"counts_by_year":[{"year":2025,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-11-25T00:00:00"}