{"id":"https://openalex.org/W4415482614","doi":"https://doi.org/10.1109/access.2025.3624952","title":"A Survey on the Applications of Deep Learning in Network Intrusion Detection Systems to Enhance Network Security","display_name":"A Survey on the Applications of Deep Learning in Network Intrusion Detection Systems to Enhance Network Security","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415482614","doi":"https://doi.org/10.1109/access.2025.3624952"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3624952","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3624952","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3624952","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5010318039","display_name":"Fatima M. Anis","orcid":"https://orcid.org/0000-0002-4916-8977"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Fatima M. Anis","raw_affiliation_strings":["Information and Computer Science Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-4916-8977","affiliations":[{"raw_affiliation_string":"Information and Computer Science Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5092161951","display_name":"Maryam Alabdullatif","orcid":"https://orcid.org/0009-0004-3479-2058"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]},{"id":"https://openalex.org/I76571253","display_name":"Imam Abdulrahman Bin Faisal University","ror":"https://ror.org/038cy8j79","country_code":"SA","type":"education","lineage":["https://openalex.org/I76571253"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Maryam Alabdullatif","raw_affiliation_strings":["Information and Computer Science Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","Computing Department, Applied College, Imam Abdulrahman Bin Faisal University, Dammam, Saudi Arabia"],"raw_orcid":"https://orcid.org/0009-0004-3479-2058","affiliations":[{"raw_affiliation_string":"Information and Computer Science Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]},{"raw_affiliation_string":"Computing Department, Applied College, Imam Abdulrahman Bin Faisal University, Dammam, Saudi Arabia","institution_ids":["https://openalex.org/I76571253"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5120111431","display_name":"Sarah Aljbli","orcid":null},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Sarah Aljbli","raw_affiliation_strings":["Information and Computer Science Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia"],"raw_orcid":"https://orcid.org/0009-0002-8360-862X","affiliations":[{"raw_affiliation_string":"Information and Computer Science Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5089637331","display_name":"Mohammad Hammoudeh","orcid":"https://orcid.org/0000-0003-1058-0996"},"institutions":[{"id":"https://openalex.org/I134085113","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163","country_code":"SA","type":"education","lineage":["https://openalex.org/I134085113"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Mohammad Hammoudeh","raw_affiliation_strings":["Information and Computer Science Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0003-1058-0996","affiliations":[{"raw_affiliation_string":"Information and Computer Science Department, King Fahd University of Petroleum and Minerals, Dhahran, Saudi Arabia","institution_ids":["https://openalex.org/I134085113"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":3.2276,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":{"value":0.9315237,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"13","issue":null,"first_page":"185357","last_page":"185373"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9907000064849854,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.7199000120162964},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6158999800682068},{"id":"https://openalex.org/keywords/software-deployment","display_name":"Software deployment","score":0.5343999862670898},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.4431999921798706},{"id":"https://openalex.org/keywords/transformative-learning","display_name":"Transformative learning","score":0.4350999891757965},{"id":"https://openalex.org/keywords/network-security","display_name":"Network security","score":0.4309000074863434},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.4235000014305115},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.387800008058548},{"id":"https://openalex.org/keywords/deep-packet-inspection","display_name":"Deep packet inspection","score":0.3709999918937683}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8095999956130981},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.7199000120162964},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6158999800682068},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5444999933242798},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.5343999862670898},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4440000057220459},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.4431999921798706},{"id":"https://openalex.org/C70587473","wikidata":"https://www.wikidata.org/wiki/Q7834111","display_name":"Transformative learning","level":2,"score":0.4350999891757965},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.4309000074863434},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.4235000014305115},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.387800008058548},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.37389999628067017},{"id":"https://openalex.org/C204679922","wikidata":"https://www.wikidata.org/wiki/Q734252","display_name":"Deep packet inspection","level":3,"score":0.3709999918937683},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.367900013923645},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.35530000925064087},{"id":"https://openalex.org/C2776576444","wikidata":"https://www.wikidata.org/wiki/Q303569","display_name":"Attack surface","level":2,"score":0.34709998965263367},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.3391999900341034},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.32659998536109924},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3262999951839447},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.32269999384880066},{"id":"https://openalex.org/C169988225","wikidata":"https://www.wikidata.org/wiki/Q7832484","display_name":"Traffic classification","level":3,"score":0.32199999690055847},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.31850001215934753},{"id":"https://openalex.org/C2779965156","wikidata":"https://www.wikidata.org/wiki/Q5227350","display_name":"Data sharing","level":3,"score":0.3176000118255615},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.3109000027179718},{"id":"https://openalex.org/C94124525","wikidata":"https://www.wikidata.org/wiki/Q912550","display_name":"Categorization","level":2,"score":0.30390000343322754},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.3003000020980835},{"id":"https://openalex.org/C2778464652","wikidata":"https://www.wikidata.org/wiki/Q309849","display_name":"Open research","level":2,"score":0.2980000078678131},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.2815999984741211},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.2777000069618225},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.2623000144958496}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3624952","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3624952","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:1f0efd318d134d53a8e505589facc49e","is_oa":true,"landing_page_url":"https://doaj.org/article/1f0efd318d134d53a8e505589facc49e","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 185357-185373 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3624952","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3624952","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[{"id":"https://openalex.org/F4320322323","display_name":"King Fahd University of Petroleum and Minerals","ror":"https://ror.org/03yez3163"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":62,"referenced_works":["https://openalex.org/W1985987493","https://openalex.org/W2028070713","https://openalex.org/W2031163547","https://openalex.org/W2077488147","https://openalex.org/W2099940443","https://openalex.org/W2150847526","https://openalex.org/W2167287136","https://openalex.org/W2171331105","https://openalex.org/W2296509296","https://openalex.org/W2343828539","https://openalex.org/W2537766808","https://openalex.org/W2799758613","https://openalex.org/W2924689635","https://openalex.org/W2937056870","https://openalex.org/W2958285686","https://openalex.org/W2959120033","https://openalex.org/W2963197901","https://openalex.org/W2982682021","https://openalex.org/W3022604549","https://openalex.org/W3111118183","https://openalex.org/W3136205675","https://openalex.org/W3136873430","https://openalex.org/W3185244527","https://openalex.org/W4213286035","https://openalex.org/W4226319939","https://openalex.org/W4255738146","https://openalex.org/W4323275401","https://openalex.org/W4380885042","https://openalex.org/W4382281941","https://openalex.org/W4383196772","https://openalex.org/W4385246573","https://openalex.org/W4386282861","https://openalex.org/W4386565855","https://openalex.org/W4386601358","https://openalex.org/W4388948449","https://openalex.org/W4390499810","https://openalex.org/W4392175529","https://openalex.org/W4392296741","https://openalex.org/W4393150251","https://openalex.org/W4396698840","https://openalex.org/W4396938916","https://openalex.org/W4398150616","https://openalex.org/W4399332923","https://openalex.org/W4399451239","https://openalex.org/W4400292687","https://openalex.org/W4400850302","https://openalex.org/W4401295443","https://openalex.org/W4401419497","https://openalex.org/W4401657815","https://openalex.org/W4401833791","https://openalex.org/W4402170787","https://openalex.org/W4402513146","https://openalex.org/W4403719345","https://openalex.org/W4406325182","https://openalex.org/W4407142527","https://openalex.org/W4408292685","https://openalex.org/W4409537256","https://openalex.org/W4410771804","https://openalex.org/W4411175577","https://openalex.org/W4412578217","https://openalex.org/W4412593703","https://openalex.org/W4413610699"],"related_works":[],"abstract_inverted_index":{"Network":[0],"security":[1],"breaches":[2],"continue":[3],"to":[4,30,190,221],"grow":[5],"in":[6,107],"both":[7],"complexity":[8],"and":[9,27,34,87,111,121,135,142,163,172,181,197,199,218,228],"impact,":[10],"making":[11],"intrusion":[12],"detection":[13],"a":[14,64,76,102,113,213],"critical":[15],"component":[16],"of":[17,67,85,104,225],"modern":[18],"defense":[19],"strategies.":[20],"Intrusion":[21],"Detection":[22],"Systems":[23],"(IDS)":[24],"monitor":[25],"system":[26],"network":[28,53],"activity":[29],"identify":[31,186],"malicious":[32,88],"behavior":[33],"stop":[35],"it":[36,51],"before":[37],"causing":[38],"harm.":[39,41],"causes":[40],"Among":[42],"them,":[43],"Network-based":[44],"IDS":[45],"(NIDS)":[46],"is":[47],"particularly":[48],"important":[49],"because":[50],"analyzes":[52],"traffic":[54,89],"at":[55],"the":[56,92,223],"packet":[57],"or":[58,144,150],"flow":[59],"level,":[60],"enabling":[61],"protection":[62],"across":[63],"wide":[65],"range":[66],"infrastructure.":[68],"Deep":[69],"Learning":[70],"(DL)":[71],"has":[72],"recently":[73],"emerged":[74],"as":[75],"transformative":[77],"approach":[78],"for":[79,94,109,130,139,204,216],"NIDS":[80,110],"by":[81],"learning":[82],"complex":[83],"representations":[84],"normal":[86],"patterns":[90],"without":[91],"need":[93],"extensive":[95],"manual":[96],"feature":[97,168],"engineering.":[98],"This":[99,155,207],"survey":[100,156],"provides":[101],"review":[103],"recent":[105],"progress":[106],"DL":[108],"introduces":[112],"taxonomy":[114],"with":[115],"four":[116],"categories.":[117],"These":[118],"include":[119],"reconstruction":[120],"generative":[122],"models":[123,129],"that":[124,147],"detect":[125],"anomalies,":[126],"Transformer-based":[127],"sequence":[128],"capturing":[131],"temporal":[132],"dependencies,":[133],"convolutional":[134],"deep":[136],"neural":[137],"networks":[138],"supervised":[140],"classification,":[141],"hybrid":[143],"deployment-oriented":[145],"approaches":[146],"combine":[148],"techniques":[149],"support":[151],"real-world":[152],"deployment":[153],"needs.":[154],"reviews":[157],"31":[158],"studies":[159],"published":[160],"between":[161],"2020":[162],"2025,":[164],"covering":[165],"their":[166],"datasets,":[167],"sets,":[169],"model":[170],"architectures,":[171],"reported":[173],"performance.":[174],"A":[175],"comparative":[176],"analysis":[177],"highlights":[178],"common":[179],"practices":[180],"emerging":[182],"trends.":[183],"Finally,":[184],"we":[185,200],"open":[187],"challenges":[188],"related":[189],"data":[191],"quality,":[192],"scalability,":[193],"adversarial":[194],"robustness,":[195],"privacy,":[196],"interpretability,":[198],"outline":[201],"promising":[202],"directions":[203],"future":[205],"research.":[206],"work":[208],"contributes":[209],"an":[210],"updated":[211],"review,":[212],"structured":[214],"framework":[215],"comparison,":[217],"practical":[219],"insights":[220],"guide":[222],"development":[224],"more":[226],"secure":[227],"effective":[229],"NIDS.":[230]},"counts_by_year":[{"year":2026,"cited_by_count":3}],"updated_date":"2026-06-17T08:01:34.144755","created_date":"2025-10-23T00:00:00"}