{"id":"https://openalex.org/W7170596658","doi":"https://doi.org/10.1007/s10586-026-06382-5","title":"A hybrid approach: Meta-Heuristic with optimizing machine learning algorithms for intrusion detection systems","display_name":"A hybrid approach: Meta-Heuristic with optimizing machine learning algorithms for intrusion detection systems","publication_year":2026,"publication_date":"2026-07-01","ids":{"openalex":"https://openalex.org/W7170596658","doi":"https://doi.org/10.1007/s10586-026-06382-5"},"language":"en","primary_location":{"id":"doi:10.1007/s10586-026-06382-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10586-026-06382-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10586-026-06382-5.pdf","source":{"id":"https://openalex.org/S106148199","display_name":"Cluster Computing","issn_l":"1386-7857","issn":["1386-7857","1573-7543"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cluster Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://link.springer.com/content/pdf/10.1007/s10586-026-06382-5.pdf","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5143590608","display_name":"Abdullah Khan","orcid":null},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]},{"id":"https://openalex.org/I246743127","display_name":"The University of Agriculture, Peshawar","ror":"https://ror.org/02sp3q482","country_code":"PK","type":"education","lineage":["https://openalex.org/I246743127"]}],"countries":["MY","PK"],"is_corresponding":true,"raw_author_name":"Abdullah Khan","raw_affiliation_strings":["Institute of Computer Sciences and Information Technology, the University of Agriculture, Peshawar, Pakistan","School of Electrical and Electronic Engineering, USM Engineering Campus, Universiti Sains Malaysia, Nibong Tebal, 14300, Pulau Pinang, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Computer Sciences and Information Technology, the University of Agriculture, Peshawar, Pakistan","institution_ids":["https://openalex.org/I246743127"]},{"raw_affiliation_string":"School of Electrical and Electronic Engineering, USM Engineering Campus, Universiti Sains Malaysia, Nibong Tebal, 14300, Pulau Pinang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5141163857","display_name":"Dzati Athiar Ramli","orcid":null},"institutions":[{"id":"https://openalex.org/I139322472","display_name":"Universiti Sains Malaysia","ror":"https://ror.org/02rgb2k63","country_code":"MY","type":"education","lineage":["https://openalex.org/I139322472"]}],"countries":["MY"],"is_corresponding":true,"raw_author_name":"Dzati Athiar Ramli","raw_affiliation_strings":["School of Electrical and Electronic Engineering, USM Engineering Campus, Universiti Sains Malaysia, Nibong Tebal, 14300, Pulau Pinang, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Electrical and Electronic Engineering, USM Engineering Campus, Universiti Sains Malaysia, Nibong Tebal, 14300, Pulau Pinang, Malaysia","institution_ids":["https://openalex.org/I139322472"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5091046843","display_name":"Muhammad Zubair Rehman","orcid":"https://orcid.org/0000-0003-2589-4189"},"institutions":[{"id":"https://openalex.org/I45998257","display_name":"Sohar University","ror":"https://ror.org/02ftvf862","country_code":"OM","type":"education","lineage":["https://openalex.org/I45998257"]}],"countries":["OM"],"is_corresponding":false,"raw_author_name":"Muhammad Zubair Rehman","raw_affiliation_strings":["Faculty of Computing and Information Technology, Sohar University, Sohar, 311, Sultanate of Oman"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computing and Information Technology, Sohar University, Sohar, 311, Sultanate of Oman","institution_ids":["https://openalex.org/I45998257"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5141079814","display_name":"Nazri Mohd Nawi","orcid":null},"institutions":[{"id":"https://openalex.org/I930072361","display_name":"Tun Hussein Onn University of Malaysia","ror":"https://ror.org/01c5wha71","country_code":"MY","type":"education","lineage":["https://openalex.org/I930072361"]}],"countries":["MY"],"is_corresponding":false,"raw_author_name":"Nazri Mohd Nawi","raw_affiliation_strings":["Soft Computing and Data Mining Centre (SMC), Fakulti Sains Komputer dan Teknologi Maklumat, University Tun Hussein Onn Malaysia (UTHM), Parit Raja, Malaysia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Soft Computing and Data Mining Centre (SMC), Fakulti Sains Komputer dan Teknologi Maklumat, University Tun Hussein Onn Malaysia (UTHM), Parit Raja, Malaysia","institution_ids":["https://openalex.org/I930072361"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5141163857","https://openalex.org/A5143590608"],"corresponding_institution_ids":["https://openalex.org/I139322472","https://openalex.org/I246743127"],"apc_list":{"value":2790,"currency":"USD","value_usd":2790},"apc_paid":{"value":2790,"currency":"USD","value_usd":2790},"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.92239405,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":null,"biblio":{"volume":"29","issue":"9","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8605999946594238,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8605999946594238,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10100","display_name":"Metaheuristic Optimization Algorithms Research","score":0.016200000420212746,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T13324","display_name":"Scientific and Engineering Research Topics","score":0.014800000004470348,"subfield":{"id":"https://openalex.org/subfields/3506","display_name":"Periodontics"},"field":{"id":"https://openalex.org/fields/35","display_name":"Dentistry"},"domain":{"id":"https://openalex.org/domains/4","display_name":"Health Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/cuckoo-search","display_name":"Cuckoo search","score":0.7174000144004822},{"id":"https://openalex.org/keywords/metaheuristic","display_name":"Metaheuristic","score":0.640999972820282},{"id":"https://openalex.org/keywords/particle-swarm-optimization","display_name":"Particle swarm optimization","score":0.6243000030517578},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6000999808311462},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.590399980545044},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.5342000126838684},{"id":"https://openalex.org/keywords/ant-colony-optimization-algorithms","display_name":"Ant colony optimization algorithms","score":0.5307000279426575},{"id":"https://openalex.org/keywords/harmony-search","display_name":"Harmony search","score":0.46219998598098755},{"id":"https://openalex.org/keywords/discriminative-model","display_name":"Discriminative model","score":0.447299987077713},{"id":"https://openalex.org/keywords/genetic-algorithm","display_name":"Genetic algorithm","score":0.4090000092983246}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8626999855041504},{"id":"https://openalex.org/C117241572","wikidata":"https://www.wikidata.org/wiki/Q5192379","display_name":"Cuckoo search","level":3,"score":0.7174000144004822},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6690000295639038},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6442000269889832},{"id":"https://openalex.org/C109718341","wikidata":"https://www.wikidata.org/wiki/Q1385229","display_name":"Metaheuristic","level":2,"score":0.640999972820282},{"id":"https://openalex.org/C85617194","wikidata":"https://www.wikidata.org/wiki/Q2072794","display_name":"Particle swarm optimization","level":2,"score":0.6243000030517578},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6000999808311462},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.590399980545044},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.5342000126838684},{"id":"https://openalex.org/C40128228","wikidata":"https://www.wikidata.org/wiki/Q460851","display_name":"Ant colony optimization algorithms","level":2,"score":0.5307000279426575},{"id":"https://openalex.org/C33099171","wikidata":"https://www.wikidata.org/wiki/Q26208718","display_name":"Harmony search","level":2,"score":0.46219998598098755},{"id":"https://openalex.org/C97931131","wikidata":"https://www.wikidata.org/wiki/Q5282087","display_name":"Discriminative model","level":2,"score":0.447299987077713},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4230000078678131},{"id":"https://openalex.org/C8880873","wikidata":"https://www.wikidata.org/wiki/Q187787","display_name":"Genetic algorithm","level":2,"score":0.4090000092983246},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.390500009059906},{"id":"https://openalex.org/C152124472","wikidata":"https://www.wikidata.org/wiki/Q1204361","display_name":"Redundancy (engineering)","level":2,"score":0.38269999623298645},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.36660000681877136},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.34630000591278076},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.33649998903274536},{"id":"https://openalex.org/C21200559","wikidata":"https://www.wikidata.org/wiki/Q7451068","display_name":"Sensitivity (control systems)","level":2,"score":0.33469998836517334},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.31679999828338623},{"id":"https://openalex.org/C74750220","wikidata":"https://www.wikidata.org/wiki/Q2662197","display_name":"Differential evolution","level":2,"score":0.3093000054359436},{"id":"https://openalex.org/C93768804","wikidata":"https://www.wikidata.org/wiki/Q2518735","display_name":"Artificial immune system","level":2,"score":0.3010999858379364},{"id":"https://openalex.org/C60891933","wikidata":"https://www.wikidata.org/wiki/Q796575","display_name":"Ant colony","level":3,"score":0.298799991607666},{"id":"https://openalex.org/C119487961","wikidata":"https://www.wikidata.org/wiki/Q863960","display_name":"Swarm intelligence","level":3,"score":0.29820001125335693},{"id":"https://openalex.org/C62469222","wikidata":"https://www.wikidata.org/wiki/Q17092103","display_name":"Hybrid algorithm (constraint satisfaction)","level":5,"score":0.29679998755455017},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C123370116","wikidata":"https://www.wikidata.org/wiki/Q1424540","display_name":"Tabu search","level":2,"score":0.28940001130104065},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C2987595161","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Optimization algorithm","level":2,"score":0.2793999910354614},{"id":"https://openalex.org/C93959086","wikidata":"https://www.wikidata.org/wiki/Q6888345","display_name":"Model selection","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.2655999958515167},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.2646999955177307},{"id":"https://openalex.org/C97133563","wikidata":"https://www.wikidata.org/wiki/Q4801057","display_name":"Artificial bee colony algorithm","level":2,"score":0.2621000111103058},{"id":"https://openalex.org/C73555534","wikidata":"https://www.wikidata.org/wiki/Q622825","display_name":"Cluster analysis","level":2,"score":0.25839999318122864}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1007/s10586-026-06382-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10586-026-06382-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10586-026-06382-5.pdf","source":{"id":"https://openalex.org/S106148199","display_name":"Cluster Computing","issn_l":"1386-7857","issn":["1386-7857","1573-7543"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cluster Computing","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1007/s10586-026-06382-5","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s10586-026-06382-5","pdf_url":"https://link.springer.com/content/pdf/10.1007/s10586-026-06382-5.pdf","source":{"id":"https://openalex.org/S106148199","display_name":"Cluster Computing","issn_l":"1386-7857","issn":["1386-7857","1573-7543"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319900","host_organization_name":"Springer Science+Business Media","host_organization_lineage":["https://openalex.org/P4310319900","https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Science+Business Media","Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Cluster Computing","raw_type":"journal-article"},"sustainable_development_goals":[{"score":0.6835892200469971,"id":"https://metadata.un.org/sdg/10","display_name":"Reduced inequalities"}],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7170596658.pdf","grobid_xml":"https://content.openalex.org/works/W7170596658.grobid-xml"},"referenced_works_count":36,"referenced_works":["https://openalex.org/W2023185832","https://openalex.org/W2794951181","https://openalex.org/W2926701059","https://openalex.org/W2971687862","https://openalex.org/W2991722918","https://openalex.org/W2992854447","https://openalex.org/W3032284425","https://openalex.org/W3033675321","https://openalex.org/W3036351926","https://openalex.org/W3044405156","https://openalex.org/W3089739557","https://openalex.org/W3107237154","https://openalex.org/W3117829857","https://openalex.org/W3125771463","https://openalex.org/W3128447012","https://openalex.org/W3189765012","https://openalex.org/W3196743383","https://openalex.org/W4220697949","https://openalex.org/W4224932126","https://openalex.org/W4291158430","https://openalex.org/W4296344711","https://openalex.org/W4297895296","https://openalex.org/W4306760877","https://openalex.org/W4321365799","https://openalex.org/W4323842737","https://openalex.org/W4378628059","https://openalex.org/W4379380408","https://openalex.org/W4382518183","https://openalex.org/W4396654042","https://openalex.org/W4402343096","https://openalex.org/W4409902461","https://openalex.org/W4410300372","https://openalex.org/W4410703630","https://openalex.org/W4410773906","https://openalex.org/W4411716671","https://openalex.org/W4414153810"],"related_works":[],"abstract_inverted_index":{"The":[0,62],"rising":[1],"complexity":[2],"of":[3,112,151,154,159,174,178,189,196],"cyber":[4],"threats":[5],"has":[6],"underscored":[7],"the":[8,57,110,187,190,218],"critical":[9],"need":[10],"for":[11,53],"intelligent":[12],"Intrusion":[13],"Detection":[14],"Systems":[15],"(IDS)":[16],"that":[17,126],"can":[18],"efficiently":[19],"handle":[20],"high-dimensional":[21],"data":[22,67],"and":[23,33,42,59,72,103,119,133,145,167,176,200,225],"evolving":[24],"attack":[25],"patterns.":[26],"Traditional":[27],"IDS":[28],"often":[29],"suffer":[30],"from":[31],"redundancy":[32],"inefficiencies.":[34],"This":[35],"research":[36],"integrating":[37],"Support":[38],"Vector":[39],"Machine":[40],"(SVM)":[41],"C4.5":[43],"decision":[44],"tree":[45],"models":[46,128,206],"with":[47,156],"metaheuristic":[48,78],"optimized":[49],"machine":[50],"learning":[51],"framework":[52],"intrusion":[54],"detection,":[55],"utilizing":[56],"NSL-KDD":[58],"UNSW-NB15":[60],"datasets.":[61,141],"proposed":[63,191],"methodology":[64],"involves":[65],"comprehensive":[66],"preprocessing,":[68],"discriminative":[69],"feature":[70],"extraction,":[71],"hybrid":[73,127],"model":[74],"development":[75],"using":[76],"various":[77],"algorithms,":[79],"including":[80],"particle":[81],"swarm":[82],"optimization":[83,213],"(PSO),":[84],"modified":[85],"PSO,":[86],"BAT,":[87],"Cuckoo":[88],"Search":[89],"(CS),":[90],"Ant":[91],"Colony":[92],"Optimization":[93,101],"(ACO),":[94],"Grey":[95],"Wolf":[96],"Optimizer":[97],"(GWO),":[98],"Harris":[99],"Hawks":[100],"(HHO),":[102],"Genetic":[104],"Algorithm":[105],"(GA).":[106],"These":[107],"algorithms":[108],"optimize":[109],"selection":[111],"relevant":[113],"features":[114],"to":[115],"enhance":[116],"detection":[117],"accuracy":[118,173],"reduce":[120],"false":[121,201],"positives.":[122],"Experimental":[123],"analysis":[124],"reveals":[125],"particularly":[129,193],"MPSO-C45,":[130],"CS-C45,":[131,166],"BAT-SVM,":[132],"MPSO-SVM":[134],"significantly":[135],"outperform":[136],"traditional":[137],"classifiers":[138],"in":[139,194,211,222],"both":[140],"On":[142],"NSL-KDD,":[143],"MPSO-C45":[144],"CS-C45":[146],"achieved":[147,169],"near-perfect":[148],"metrics":[149],"F-measure":[150],"0.993,":[152],"sensitivity":[153],"0.994":[155],"low":[157],"runtime":[158],"1.7":[160],"s.":[161],"While":[162],"on":[163],"UNSW-NB15,":[164],"GWO-C45,":[165],"PSO-SVM":[168],"high":[170],"classification":[171],"results":[172],"1.000,":[175],"MSE":[177],"0.":[179],"Comparative":[180],"evaluation":[181],"against":[182],"existing":[183],"state-of-the-art":[184],"approaches":[185],"confirms":[186],"superiority":[188],"models,":[192],"terms":[195],"balancing":[197],"accuracy,":[198],"runtime,":[199],"positive":[202],"reduction.":[203],"However,":[204],"GA-based":[205],"consistently":[207],"underperformed,":[208],"indicating":[209],"limitations":[210],"their":[212],"capability.":[214],"Despite":[215],"excellent":[216],"results,":[217],"study":[219],"acknowledges":[220],"challenges":[221],"real-time":[223],"deployment":[224],"computational":[226],"overhead.":[227]},"counts_by_year":[],"updated_date":"2026-07-26T05:49:09.470579","created_date":"2026-07-25T00:00:00"}