{"id":"https://openalex.org/W7135245916","doi":"https://doi.org/10.1142/s1469026826500069","title":"An Attention-Enhanced CNN-BiGRU Framework for Intrusion Detection","display_name":"An Attention-Enhanced CNN-BiGRU Framework for Intrusion Detection","publication_year":2026,"publication_date":"2026-03-12","ids":{"openalex":"https://openalex.org/W7135245916","doi":"https://doi.org/10.1142/s1469026826500069"},"language":"en","primary_location":{"id":"doi:10.1142/s1469026826500069","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s1469026826500069","pdf_url":null,"source":{"id":"https://openalex.org/S206936884","display_name":"International Journal of Computational Intelligence and Applications","issn_l":"1469-0268","issn":["1469-0268","1757-5885"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311754","host_organization_name":"Imperial College Press","host_organization_lineage":["https://openalex.org/P4310311754"],"host_organization_lineage_names":["Imperial College Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computational Intelligence and Applications","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5129088206","display_name":"Peng Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I80626142","display_name":"Henan Medical University","ror":"https://ror.org/038hzq450","country_code":"CN","type":"education","lineage":["https://openalex.org/I80626142"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peng Wang","raw_affiliation_strings":["Sanquan College of Xinxiang Medical University, Xinxiang, Henan 453003, P. R. China"],"raw_orcid":"https://orcid.org/0009-0004-2999-3840","affiliations":[{"raw_affiliation_string":"Sanquan College of Xinxiang Medical University, Xinxiang, Henan 453003, P. R. China","institution_ids":["https://openalex.org/I80626142"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5128925003","display_name":"Peiyan Sang","orcid":null},"institutions":[{"id":"https://openalex.org/I80626142","display_name":"Henan Medical University","ror":"https://ror.org/038hzq450","country_code":"CN","type":"education","lineage":["https://openalex.org/I80626142"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Peiyan Sang","raw_affiliation_strings":["Sanquan College of Xinxiang Medical University, Xinxiang, Henan 453003, P. R. China"],"raw_orcid":"https://orcid.org/0009-0006-7586-2045","affiliations":[{"raw_affiliation_string":"Sanquan College of Xinxiang Medical University, Xinxiang, Henan 453003, P. R. China","institution_ids":["https://openalex.org/I80626142"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5128960527","display_name":"Panpan Gao","orcid":null},"institutions":[{"id":"https://openalex.org/I80626142","display_name":"Henan Medical University","ror":"https://ror.org/038hzq450","country_code":"CN","type":"education","lineage":["https://openalex.org/I80626142"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Panpan Gao","raw_affiliation_strings":["Sanquan College of Xinxiang Medical University, Xinxiang, Henan 453003, P. R. China"],"raw_orcid":"https://orcid.org/0009-0005-7773-5368","affiliations":[{"raw_affiliation_string":"Sanquan College of Xinxiang Medical University, Xinxiang, Henan 453003, P. R. China","institution_ids":["https://openalex.org/I80626142"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I80626142"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.25976226,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"25","issue":"02","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8968999981880188,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.8968999981880188,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.01850000023841858,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.01140000019222498,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.6553000211715698},{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.6039999723434448},{"id":"https://openalex.org/keywords/convolutional-neural-network","display_name":"Convolutional neural network","score":0.5728999972343445},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5586000084877014},{"id":"https://openalex.org/keywords/focus","display_name":"Focus (optics)","score":0.5008000135421753},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.4927999973297119},{"id":"https://openalex.org/keywords/feature-learning","display_name":"Feature learning","score":0.46470001339912415},{"id":"https://openalex.org/keywords/feature","display_name":"Feature (linguistics)","score":0.4616999924182892},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.4075999855995178}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.9088000059127808},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.714900016784668},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.6553000211715698},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.6039999723434448},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5855000019073486},{"id":"https://openalex.org/C81363708","wikidata":"https://www.wikidata.org/wiki/Q17084460","display_name":"Convolutional neural network","level":2,"score":0.5728999972343445},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5586000084877014},{"id":"https://openalex.org/C192209626","wikidata":"https://www.wikidata.org/wiki/Q190909","display_name":"Focus (optics)","level":2,"score":0.5008000135421753},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.4927999973297119},{"id":"https://openalex.org/C59404180","wikidata":"https://www.wikidata.org/wiki/Q17013334","display_name":"Feature learning","level":2,"score":0.46470001339912415},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.4616999924182892},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.4075999855995178},{"id":"https://openalex.org/C2779304628","wikidata":"https://www.wikidata.org/wiki/Q3503480","display_name":"Face (sociological concept)","level":2,"score":0.38839998841285706},{"id":"https://openalex.org/C2778827112","wikidata":"https://www.wikidata.org/wiki/Q22245680","display_name":"Feature engineering","level":3,"score":0.3637999892234802},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3513000011444092},{"id":"https://openalex.org/C147168706","wikidata":"https://www.wikidata.org/wiki/Q1457734","display_name":"Recurrent neural network","level":3,"score":0.33889999985694885},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33739998936653137},{"id":"https://openalex.org/C132964779","wikidata":"https://www.wikidata.org/wiki/Q2110223","display_name":"Raw data","level":2,"score":0.3212999999523163},{"id":"https://openalex.org/C104122410","wikidata":"https://www.wikidata.org/wiki/Q1416406","display_name":"Network model","level":2,"score":0.3043999969959259},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.29510000348091125},{"id":"https://openalex.org/C67186912","wikidata":"https://www.wikidata.org/wiki/Q367664","display_name":"Data modeling","level":2,"score":0.28610000014305115},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.267300009727478},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.2590999901294708},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.25110000371932983},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.2508000135421753}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1142/s1469026826500069","is_oa":false,"landing_page_url":"https://doi.org/10.1142/s1469026826500069","pdf_url":null,"source":{"id":"https://openalex.org/S206936884","display_name":"International Journal of Computational Intelligence and Applications","issn_l":"1469-0268","issn":["1469-0268","1757-5885"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310311754","host_organization_name":"Imperial College Press","host_organization_lineage":["https://openalex.org/P4310311754"],"host_organization_lineage_names":["Imperial College Press"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"International Journal of Computational Intelligence and Applications","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Peace, Justice and strong institutions","score":0.6761927604675293,"id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":24,"referenced_works":["https://openalex.org/W2110531057","https://openalex.org/W2296509296","https://openalex.org/W2512144135","https://openalex.org/W2540557283","https://openalex.org/W2808779485","https://openalex.org/W2897600072","https://openalex.org/W2926701059","https://openalex.org/W2958285686","https://openalex.org/W2980576170","https://openalex.org/W3000367805","https://openalex.org/W3042855339","https://openalex.org/W3043844898","https://openalex.org/W3086638135","https://openalex.org/W3142044733","https://openalex.org/W3217392568","https://openalex.org/W4206518223","https://openalex.org/W4285308793","https://openalex.org/W4312204616","https://openalex.org/W4367333154","https://openalex.org/W4386601358","https://openalex.org/W4389496441","https://openalex.org/W4402170787","https://openalex.org/W4403910249","https://openalex.org/W4409560620"],"related_works":[],"abstract_inverted_index":{"Intrusion":[0],"detection":[1],"systems":[2],"(IDS)":[3],"are":[4],"essential":[5],"for":[6,113,123,131,139,219],"network":[7,19,66,161],"security,":[8],"as":[9,25],"they":[10,88],"help":[11],"identify":[12],"malicious":[13],"activities":[14],"and":[15,33,47,83,87,135,156,176,191,201,210],"potential":[16],"threats":[17],"in":[18,30,56,78,160,196],"traffic.":[20,162],"Traditional":[21],"IDS":[22,73],"methods,":[23],"such":[24],"signature-based":[26],"approaches,":[27],"face":[28,76],"limitations":[29],"detecting":[31],"novel":[32,109],"evolving":[34],"attacks.":[35],"In":[36,103],"recent":[37],"years,":[38],"deep":[39,71,193],"learning":[40,61,189,194],"techniques,":[41],"particularly":[42],"Convolutional":[43],"Neural":[44,49],"Networks":[45,50],"(CNNs)":[46],"Recurrent":[48,128],"(RNNs),":[51],"have":[52],"shown":[53],"significant":[54],"promise":[55],"overcoming":[57],"these":[58],"challenges":[59],"by":[60],"complex":[62],"representations":[63],"from":[64],"raw":[65],"traffic":[67],"data.":[68,102],"However,":[69],"existing":[70],"learning-based":[72],"models":[74,195],"often":[75],"difficulties":[77],"capturing":[79],"both":[80,154],"local":[81,124],"features":[82],"temporal":[84,133,213],"dependencies":[85],"simultaneously,":[86],"may":[89],"lack":[90],"the":[91,96,101,119,147,150,165,183,204],"ability":[92,148],"to":[93,152,212],"focus":[94],"on":[95,168],"most":[97],"informative":[98],"parts":[99],"of":[100,121,149,198],"this":[104],"paper,":[105],"we":[106],"propose":[107],"a":[108],"Attention-Enhanced":[110],"CNN-BiGRU":[111],"framework":[112],"intrusion":[114],"detection.":[115],"The":[116],"model":[117,151,167,185,205],"combines":[118],"strengths":[120],"CNN":[122],"feature":[125,141],"extraction,":[126],"Bidirectional-Gated":[127],"Units":[129],"(BiGRUs)":[130],"modeling":[132],"dependencies,":[134],"an":[136],"attention":[137],"mechanism":[138],"adaptive":[140],"aggregation.":[142],"This":[143],"unified":[144],"approach":[145],"enhances":[146],"detect":[153],"short-term":[155],"long-term":[157],"attack":[158],"patterns":[159],"We":[163],"evaluate":[164],"proposed":[166,184],"four":[169],"publicly":[170],"available":[171],"datasets:":[172],"KDD99,":[173],"CIC-IDS2017,":[174],"UNSW-NB15,":[175],"UGR\u201916.":[177],"Our":[178],"experimental":[179],"results":[180],"show":[181],"that":[182],"outperforms":[186],"traditional":[187],"machine":[188],"baselines":[190],"state-of-the-art":[192],"terms":[197],"Macro-F1,":[199],"Weighted-F1,":[200],"AUC.":[202],"Additionally,":[203],"demonstrates":[206],"strong":[207],"cross-dataset":[208],"generalization":[209],"robustness":[211],"concept":[214],"drift,":[215],"making":[216],"it":[217],"suitable":[218],"real-world":[220],"applications.":[221]},"counts_by_year":[],"updated_date":"2026-05-21T06:26:12.895304","created_date":"2026-03-14T00:00:00"}