{"id":"https://openalex.org/W7162190290","doi":"https://doi.org/10.1016/j.array.2026.100925","title":"A lightweight 1D convolutional neural network for malicious network traffic detection on heterogeneous benchmark datasets","display_name":"A lightweight 1D convolutional neural network for malicious network traffic detection on heterogeneous benchmark datasets","publication_year":2026,"publication_date":"2026-05-23","ids":{"openalex":"https://openalex.org/W7162190290","doi":"https://doi.org/10.1016/j.array.2026.100925"},"language":"en","primary_location":{"id":"doi:10.1016/j.array.2026.100925","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.array.2026.100925","pdf_url":null,"source":{"id":"https://openalex.org/S4210194039","display_name":"Array","issn_l":"2590-0056","issn":["2590-0056"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Array","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1016/j.array.2026.100925","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5031916377","display_name":"Raja Waseem Anwar","orcid":"https://orcid.org/0000-0002-5118-7739"},"institutions":[{"id":"https://openalex.org/I39706905","display_name":"German University of Technology","ror":"https://ror.org/055hq4920","country_code":"OM","type":"education","lineage":["https://openalex.org/I39706905"]}],"countries":["OM"],"is_corresponding":true,"raw_author_name":"Raja Waseem Anwar","raw_affiliation_strings":["Department of Computer Science, German University of Technology in Oman, P.O. Box: 1816, P.C, Muscat, 130, Oman"],"raw_orcid":"https://orcid.org/0000-0002-5118-7739","affiliations":[{"raw_affiliation_string":"Department of Computer Science, German University of Technology in Oman, P.O. Box: 1816, P.C, Muscat, 130, Oman","institution_ids":["https://openalex.org/I39706905"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113309135","display_name":"Shaik Mohammad Abrar","orcid":null},"institutions":[{"id":"https://openalex.org/I124391630","display_name":"Arab Open University","ror":"https://ror.org/04dqhen73","country_code":"OM","type":"education","lineage":["https://openalex.org/I124391630","https://openalex.org/I4210093932"]}],"countries":["OM"],"is_corresponding":false,"raw_author_name":"Mohammad Abrar","raw_affiliation_strings":["Faculty of Computer Studies, Arab Open University, P.O., Box 1596, Muscat, 122, Oman"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Faculty of Computer Studies, Arab Open University, P.O., Box 1596, Muscat, 122, Oman","institution_ids":["https://openalex.org/I124391630"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5054926386","display_name":"Abdu Salam","orcid":"https://orcid.org/0000-0001-8580-0223"},"institutions":[{"id":"https://openalex.org/I181063083","display_name":"Abdul Wali Khan University Mardan","ror":"https://ror.org/03b9y4e65","country_code":"PK","type":"education","lineage":["https://openalex.org/I181063083"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Abdu Salam","raw_affiliation_strings":["Department of Computer Science, Abdul Wali Khan University, Mardan, 23200, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Abdul Wali Khan University, Mardan, 23200, Pakistan","institution_ids":["https://openalex.org/I181063083"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102764808","display_name":"Faizan Ullah","orcid":"https://orcid.org/0000-0001-6009-6153"},"institutions":[{"id":"https://openalex.org/I171892758","display_name":"Forschungszentrum J\u00fclich","ror":"https://ror.org/02nv7yv05","country_code":"DE","type":"facility","lineage":["https://openalex.org/I1305996414","https://openalex.org/I171892758"]}],"countries":["DE"],"is_corresponding":false,"raw_author_name":"Faizan Ullah","raw_affiliation_strings":["Institute of Neuroscience and Medicine 4 (INM-4), Forschungszentrum Julich, Germany"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Neuroscience and Medicine 4 (INM-4), Forschungszentrum Julich, Germany","institution_ids":["https://openalex.org/I171892758"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":["https://openalex.org/A5031916377"],"corresponding_institution_ids":["https://openalex.org/I39706905"],"apc_list":{"value":1420,"currency":"USD","value_usd":1420},"apc_paid":{"value":1420,"currency":"USD","value_usd":1420},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.53530757,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"30","issue":null,"first_page":"100925","last_page":"100925"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.41370001435279846,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.41370001435279846,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.36410000920295715,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.04540000110864639,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5792999863624573},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5461000204086304},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4196000099182129},{"id":"https://openalex.org/keywords/noise","display_name":"Noise (video)","score":0.335099995136261},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.3154999911785126},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.2971999943256378}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7164999842643738},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5792999863624573},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5461000204086304},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4390000104904175},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42750000953674316},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4196000099182129},{"id":"https://openalex.org/C99498987","wikidata":"https://www.wikidata.org/wiki/Q2210247","display_name":"Noise (video)","level":3,"score":0.335099995136261},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.3327000141143799},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3154999911785126},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.30970001220703125},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2971999943256378},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.27889999747276306},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.26840001344680786},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.265500009059906},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2578999996185303}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1016/j.array.2026.100925","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.array.2026.100925","pdf_url":null,"source":{"id":"https://openalex.org/S4210194039","display_name":"Array","issn_l":"2590-0056","issn":["2590-0056"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Array","raw_type":"journal-article"},{"id":"pmh:oai:juser.fz-juelich.de:1060260","is_oa":true,"landing_page_url":"https://juser.fz-juelich.de/record/1060260","pdf_url":null,"source":{"id":"https://openalex.org/S4306401090","display_name":"JuSER (Forschungszentrum J\u00fclich)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I171892758","host_organization_name":"Forschungszentrum J\u00fclich","host_organization_lineage":["https://openalex.org/I171892758"],"host_organization_lineage_names":[],"type":"repository"},"license":"other-oa","license_id":"https://openalex.org/licenses/other-oa","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Array 30, 100925 - (2026). doi:10.1016/j.array.2026.100925","raw_type":"info:eu-repo/semantics/article"}],"best_oa_location":{"id":"doi:10.1016/j.array.2026.100925","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.array.2026.100925","pdf_url":null,"source":{"id":"https://openalex.org/S4210194039","display_name":"Array","issn_l":"2590-0056","issn":["2590-0056"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Array","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":14,"referenced_works":["https://openalex.org/W2148143831","https://openalex.org/W2749908420","https://openalex.org/W2919115771","https://openalex.org/W2921573932","https://openalex.org/W2921708219","https://openalex.org/W2924689635","https://openalex.org/W3126698296","https://openalex.org/W3131825464","https://openalex.org/W4319965142","https://openalex.org/W4327750468","https://openalex.org/W4408304291","https://openalex.org/W4408918479","https://openalex.org/W4411347819","https://openalex.org/W4412987679"],"related_works":[],"abstract_inverted_index":{"The":[0,24,80,150,184,224],"rise":[1],"of":[2,42,83,137,146,167,180,205,229],"advanced":[3],"cyber":[4],"threats":[5],"is":[6,132,153,221],"creating":[7],"a":[8,52,58,97,103,191,203],"need":[9],"for":[10,107],"automated,":[11],"computationally":[12],"optimized":[13],"systems":[14],"to":[15],"identify":[16],"malicious":[17],"traffic":[18,200],"across":[19,198],"the":[20,40,147,215,227],"network":[21,62,81,105,234],"at":[22],"scale.":[23],"available":[25],"deep":[26],"learning":[27],"intrusion":[28,235],"detection":[29,163],"platforms":[30],"often":[31],"incur":[32],"significant":[33],"parameter":[34],"overhead,":[35],"and":[36,47,89,96,125,143,160,169,173,182,207,218],"few":[37],"tackle":[38],"both":[39],"challenges":[41],"high-dimensional":[43],"tabular":[44,69],"flow":[45],"features":[46,70],"extreme":[48],"class":[49],"imbalance":[50],"in":[51,233],"single":[53,98],"platform.":[54],"This":[55],"study":[56],"proposes":[57],"one-dimensional":[59],"convolutional":[60,85,231],"neural":[61],"(1D":[63],"CNN)":[64],"that":[65,131,214],"operates":[66],"directly":[67],"on":[68,109,155,171,188],"represented":[71],"as":[72],"vectors,":[73],"transforming":[74],"them":[75],"into":[76],"spatially":[77],"formatted":[78],"input.":[79],"consists":[82],"two":[84,156],"layers":[86],"with":[87,176,190,202],"32":[88],"16":[90],"filters,":[91],"respectively,":[92,175],"global":[93],"average":[94],"pooling,":[95],"sigmoid":[99],"output":[100],"node,":[101],"yielding":[102],"compact":[104],"suitable":[106],"deployment":[108],"resource-constrained":[110],"devices.":[111],"A":[112,128],"strict":[113],"preprocessing":[114,217],"pipeline":[115],"manages":[116],"data":[117],"heterogeneity":[118],"using":[119],"correlation-based":[120],"feature":[121],"filtering,":[122],"MinMax":[123],"scaling,":[124],"one-hot":[126],"encoding.":[127],"training":[129,219],"strategy":[130,220],"imbalance-aware":[133],"combines":[134],"inverse-frequency":[135],"weighting":[136],"classes,":[138],"conditional":[139],"synthetic":[140],"minority":[141],"oversampling,":[142],"validation-based":[144],"optimization":[145],"decision":[148],"threshold.":[149],"recommended":[151],"framework":[152],"tested":[154],"standard":[157],"datasets,":[158],"CSE-CIC-IDS2018":[159,172,189],"UNSW-NB15.":[161],"Binary":[162],"achieved":[164],"ROC-AUC":[165],"scores":[166],"0.9782":[168],"0.9990":[170],"UNSW-NB15,":[174],"corresponding":[177],"balanced":[178],"accuracies":[179],"0.9497":[181],"0.9967.":[183],"supplementary":[185],"multiclass":[186],"experiment":[187],"small":[192],"multilayer":[193],"perceptron":[194],"achieves":[195],"95.2%":[196],"accuracy":[197],"13":[199],"types,":[201],"macro-ROC-AUC":[204],"0.9857":[206],"only":[208],"55,053":[209],"trainable":[210],"parameters,":[211],"further":[212],"indicating":[213],"proposed":[216],"generally":[222],"applicable.":[223],"findings":[225],"underscore":[226],"feasibility":[228],"lightweight":[230],"networks":[232],"detection.":[236]},"counts_by_year":[],"updated_date":"2026-08-14T07:06:38.338062","created_date":"2026-05-24T00:00:00"}