{"id":"https://openalex.org/W7128700577","doi":"https://doi.org/10.1109/tdsc.2026.3664110","title":"Evaluation to Integration: Hybrid Feature Selection Framework With Ensemble Machine Learning for Intrusion Detection","display_name":"Evaluation to Integration: Hybrid Feature Selection Framework With Ensemble Machine Learning for Intrusion Detection","publication_year":2026,"publication_date":"2026-02-12","ids":{"openalex":"https://openalex.org/W7128700577","doi":"https://doi.org/10.1109/tdsc.2026.3664110"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3664110","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3664110","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125757487","display_name":"Awais Bilal","orcid":null},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Awais Bilal","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6323-6289","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5090688531","display_name":"Kashif Sharif","orcid":"https://orcid.org/0000-0001-7214-6568"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kashif Sharif","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-7214-6568","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125720698","display_name":"Liehuang Zhu","orcid":null},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Liehuang Zhu","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-3277-3887","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5125693129","display_name":"Fan Li","orcid":null},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Fan Li","raw_affiliation_strings":["School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-2348-4488","affiliations":[{"raw_affiliation_string":"School of Computer Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5088765156","display_name":"Chang Xu","orcid":"https://orcid.org/0000-0002-9726-7232"},"institutions":[{"id":"https://openalex.org/I125839683","display_name":"Beijing Institute of Technology","ror":"https://ror.org/01skt4w74","country_code":"CN","type":"education","lineage":["https://openalex.org/I125839683","https://openalex.org/I890469752"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Chang Xu","raw_affiliation_strings":["School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-9726-7232","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science and Technology, Beijing Institute of Technology, Beijing, China","institution_ids":["https://openalex.org/I125839683"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5051778431","display_name":"Md Monjurul Karim","orcid":"https://orcid.org/0000-0003-1753-065X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210145761","display_name":"Shenzhen Institutes of Advanced Technology","ror":"https://ror.org/04gh4er46","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210145761"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Md Monjurul Karim","raw_affiliation_strings":["Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0003-1753-065X","affiliations":[{"raw_affiliation_string":"Shenzhen Institute of Advanced Technology, Chinese Academy of Sciences, Shenzhen, China","institution_ids":["https://openalex.org/I4210145761","https://openalex.org/I19820366"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.16812353,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"3","first_page":"6362","last_page":"6377"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9552000164985657,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9552000164985657,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.014399999752640724,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10734","display_name":"Information and Cyber Security","score":0.006300000008195639,"subfield":{"id":"https://openalex.org/subfields/1710","display_name":"Information Systems"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6866999864578247},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6538000106811523},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.6421999931335449},{"id":"https://openalex.org/keywords/latency","display_name":"Latency (audio)","score":0.5712000131607056},{"id":"https://openalex.org/keywords/feature-extraction","display_name":"Feature extraction","score":0.5152000188827515},{"id":"https://openalex.org/keywords/false-positive-rate","display_name":"False positive rate","score":0.4864000082015991},{"id":"https://openalex.org/keywords/pattern-recognition","display_name":"Pattern recognition (psychology)","score":0.48100000619888306},{"id":"https://openalex.org/keywords/support-vector-machine","display_name":"Support vector machine","score":0.43130001425743103}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7754999995231628},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6866999864578247},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6538000106811523},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.6421999931335449},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6324999928474426},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.5712000131607056},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.5152000188827515},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5060999989509583},{"id":"https://openalex.org/C95922358","wikidata":"https://www.wikidata.org/wiki/Q5432725","display_name":"False positive rate","level":2,"score":0.4864000082015991},{"id":"https://openalex.org/C153180895","wikidata":"https://www.wikidata.org/wiki/Q7148389","display_name":"Pattern recognition (psychology)","level":2,"score":0.48100000619888306},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.43130001425743103},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.38420000672340393},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.38179999589920044},{"id":"https://openalex.org/C62438384","wikidata":"https://www.wikidata.org/wiki/Q331350","display_name":"Simplex","level":2,"score":0.373199999332428},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.37310001254081726},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.3668999969959259},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.34209999442100525},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.32170000672340393},{"id":"https://openalex.org/C146849305","wikidata":"https://www.wikidata.org/wiki/Q370766","display_name":"Ground truth","level":2,"score":0.30320000648498535},{"id":"https://openalex.org/C119898033","wikidata":"https://www.wikidata.org/wiki/Q3433888","display_name":"Ensemble forecasting","level":2,"score":0.2935999929904938},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.27379998564720154},{"id":"https://openalex.org/C153668964","wikidata":"https://www.wikidata.org/wiki/Q27636","display_name":"Majority rule","level":2,"score":0.2727999985218048},{"id":"https://openalex.org/C198082294","wikidata":"https://www.wikidata.org/wiki/Q3399648","display_name":"Position (finance)","level":2,"score":0.2538999915122986}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3664110","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3664110","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Life in Land","id":"https://metadata.un.org/sdg/15","score":0.5690253376960754}],"awards":[{"id":"https://openalex.org/G922434764","display_name":null,"funder_award_id":"62232002","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"We":[0,150],"study":[1],"feature":[2,60],"selection":[3],"(FS)":[4],"for":[5,199],"flow-based":[6],"intrusion":[7],"detection":[8],"and":[9,19,33,69,79,92,109,143,161,164,205],"propose":[10],"a":[11,23,27,45,196],"deterministic":[12],"hybrid-FS":[13,49],"that":[14],"fuses":[15],"Mutual":[16],"Information,":[17],"Random-Forest,":[18],"XGBoost":[20],"importances":[21],"under":[22,44],"simplex":[24],"search":[25],"with":[26,41,101,154,169],"single":[28,56],"threshold.":[29],"Using":[30],"CIC-IDS-2017,":[31],"CSE-CIC-IDS2018,":[32],"NF-UNSW-NB15,":[34],"we":[35,165],"evaluate":[36],"ten":[37],"FS":[38,194],"techniques":[39],"paired":[40,110],"six":[42],"ensembles":[43],"leakage-safe":[46],"protocol.":[47],"The":[48,189],"consistently":[50],"matches":[51],"or":[52,187],"exceeds":[53],"the":[54],"best":[55],"selectors":[57],"while":[58],"reducing":[59],"count":[61],"(e.g.,":[62],"<inline-formula":[63,75,84,93,103],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[64,76,85,94,104,119],"xmlns:xlink=\"http://www.w3.org/1999/xlink\"><tex-math":[65,77,86,95,105,120],"notation=\"LaTeX\">$78":[66],"\\rightarrow":[67,88,97],"31$</tex-math></inline-formula>)":[68],"improving":[70],"runtime.":[71],"Throughput":[72],"rises":[73],"by":[74,116],"notation=\"LaTeX\">$\\sim$</tex-math></inline-formula>9\u201310%":[78],"per-flow":[80],"latency":[81,204],"drops":[82],"from":[83],"notation=\"LaTeX\">$0.44":[87],"0.40$</tex-math></inline-formula>":[89],"ms":[90,99],"(p50)":[91],"notation=\"LaTeX\">$1.40":[96],"1.20$</tex-math></inline-formula>":[98],"(p99),":[100],"mean":[102],"notation=\"LaTeX\">$\\pm$</tex-math></inline-formula>":[106],"95%":[107],"CIs":[108],"tests.":[111],"False-positive":[112],"rate":[113],"(FPR)":[114],"decreases":[115],"15\u201319%":[117],"(<inline-formula":[118],"notation=\"LaTeX\">$\\approx$</tex-math></inline-formula>":[121],"22":[122],"fewer":[123],"false":[124],"alarms":[125],"per":[126],"hour":[127],"at":[128,147],"100k":[129],"flows/h).":[130],"Against":[131],"representative":[132],"PSO/GA":[133],"hybrids,":[134],"our":[135],"fusion":[136],"attains":[137],"small":[138],"but":[139],"consistent":[140],"macro-F1":[141,186],"gains":[142],"15\u201325%":[144],"FPR":[145,177],"reductions":[146],"comparable":[148],"latency.":[149],"clarify":[151],"adversarial":[152],"robustness":[153],"an":[155],"explicit":[156],"FGSM":[157],"feature-space":[158],"threat":[159],"model":[160],"DeepPackGen":[162],"configuration,":[163],"diagnose":[166],"cross-dataset":[167],"shift":[168],"lightweight":[170],"mitigations.":[171],"A":[172],"24-hour":[173],"SOC":[174],"replay":[175],"links":[176],"to":[178],"analyst":[179],"time":[180],"savings":[181],"(2.5\u20133.7":[182],"hours/day)":[183],"without":[184],"sacrificing":[185],"AUROC.":[188],"results":[190],"position":[191],"deterministic,":[192],"compact":[193],"as":[195],"practical":[197],"choice":[198],"inline":[200],"IDS":[201],"where":[202],"tail":[203],"alert":[206],"volume":[207],"matter.":[208]},"counts_by_year":[],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2026-02-13T00:00:00"}