{"id":"https://openalex.org/W7161034103","doi":"https://doi.org/10.31449/inf.v50i12.10444","title":"Swarm-Optimized Ensemble Learning for Intrusion Detection using CICIDS2018 and UNSW-NB15","display_name":"Swarm-Optimized Ensemble Learning for Intrusion Detection using CICIDS2018 and UNSW-NB15","publication_year":2026,"publication_date":"2026-05-13","ids":{"openalex":"https://openalex.org/W7161034103","doi":"https://doi.org/10.31449/inf.v50i12.10444"},"language":null,"primary_location":{"id":"doi:10.31449/inf.v50i12.10444","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i12.10444","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/10444/6671","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"diamond","oa_url":"https://www.informatica.si/index.php/informatica/article/download/10444/6671","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5120864755","display_name":"Wafa Kareem Abdullah","orcid":null},"institutions":[{"id":"https://openalex.org/I102254642","display_name":"University of Kirkuk","ror":"https://ror.org/01pk8rb11","country_code":"IQ","type":"education","lineage":["https://openalex.org/I102254642"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Wafa Kareem Abdullah","raw_affiliation_strings":["University of Kirkuk"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Kirkuk","institution_ids":["https://openalex.org/I102254642"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5063093315","display_name":"Idress Mohammed Husien","orcid":"https://orcid.org/0000-0002-9523-8518"},"institutions":[{"id":"https://openalex.org/I102254642","display_name":"University of Kirkuk","ror":"https://ror.org/01pk8rb11","country_code":"IQ","type":"education","lineage":["https://openalex.org/I102254642"]}],"countries":["IQ"],"is_corresponding":false,"raw_author_name":"Idress Mohammed Husien","raw_affiliation_strings":["University of Kirkuk"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of Kirkuk","institution_ids":["https://openalex.org/I102254642"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I102254642"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.58223801,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"50","issue":"12","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9496999979019165,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9496999979019165,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.006599999964237213,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12391","display_name":"Artificial Immune Systems Applications","score":0.0052999998442828655,"subfield":{"id":"https://openalex.org/subfields/2204","display_name":"Biomedical Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6283000111579895},{"id":"https://openalex.org/keywords/particle-swarm-optimization","display_name":"Particle swarm optimization","score":0.6241000294685364},{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.597000002861023},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5618000030517578},{"id":"https://openalex.org/keywords/metaheuristic","display_name":"Metaheuristic","score":0.5440999865531921},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.5230000019073486},{"id":"https://openalex.org/keywords/feature-selection","display_name":"Feature selection","score":0.5151000022888184},{"id":"https://openalex.org/keywords/ant-colony-optimization-algorithms","display_name":"Ant colony optimization algorithms","score":0.4713999927043915},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.4438999891281128}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6905999779701233},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6283000111579895},{"id":"https://openalex.org/C85617194","wikidata":"https://www.wikidata.org/wiki/Q2072794","display_name":"Particle swarm optimization","level":2,"score":0.6241000294685364},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.597000002861023},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5949000120162964},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5942999720573425},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5618000030517578},{"id":"https://openalex.org/C109718341","wikidata":"https://www.wikidata.org/wiki/Q1385229","display_name":"Metaheuristic","level":2,"score":0.5440999865531921},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.5230000019073486},{"id":"https://openalex.org/C148483581","wikidata":"https://www.wikidata.org/wiki/Q446488","display_name":"Feature selection","level":2,"score":0.5151000022888184},{"id":"https://openalex.org/C40128228","wikidata":"https://www.wikidata.org/wiki/Q460851","display_name":"Ant colony optimization algorithms","level":2,"score":0.4713999927043915},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.4438999891281128},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4399000108242035},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.4162999987602234},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.40860000252723694},{"id":"https://openalex.org/C81917197","wikidata":"https://www.wikidata.org/wiki/Q628760","display_name":"Selection (genetic algorithm)","level":2,"score":0.375900000333786},{"id":"https://openalex.org/C122357587","wikidata":"https://www.wikidata.org/wiki/Q6934508","display_name":"Multi-swarm optimization","level":3,"score":0.36489999294281006},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.36480000615119934},{"id":"https://openalex.org/C10485038","wikidata":"https://www.wikidata.org/wiki/Q48996162","display_name":"Hyperparameter optimization","level":3,"score":0.33959999680519104},{"id":"https://openalex.org/C93959086","wikidata":"https://www.wikidata.org/wiki/Q6888345","display_name":"Model selection","level":2,"score":0.3336000144481659},{"id":"https://openalex.org/C12725497","wikidata":"https://www.wikidata.org/wiki/Q810247","display_name":"Baseline (sea)","level":2,"score":0.32499998807907104},{"id":"https://openalex.org/C137836250","wikidata":"https://www.wikidata.org/wiki/Q984063","display_name":"Optimization problem","level":2,"score":0.3147999942302704},{"id":"https://openalex.org/C2987595161","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Optimization algorithm","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.2937999963760376},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.2897999882698059},{"id":"https://openalex.org/C193254401","wikidata":"https://www.wikidata.org/wiki/Q2160088","display_name":"Robust optimization","level":2,"score":0.28290000557899475},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.27459999918937683},{"id":"https://openalex.org/C2781002164","wikidata":"https://www.wikidata.org/wiki/Q6822311","display_name":"Meta learning (computer science)","level":3,"score":0.2637999951839447}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.31449/inf.v50i12.10444","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i12.10444","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/10444/6671","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.31449/inf.v50i12.10444","is_oa":true,"landing_page_url":"https://doi.org/10.31449/inf.v50i12.10444","pdf_url":"https://www.informatica.si/index.php/informatica/article/download/10444/6671","source":{"id":"https://openalex.org/S4210173311","display_name":"Informatica","issn_l":"0350-5596","issn":["0350-5596","1854-3871"],"is_oa":true,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310314525","host_organization_name":"Slovenian Society Informatika","host_organization_lineage":["https://openalex.org/P4310314525"],"host_organization_lineage_names":["Slovenian Society Informatika"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Informatica","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/15","score":0.4469168484210968,"display_name":"Life in Land"}],"awards":[],"funders":[],"has_content":{"pdf":true,"grobid_xml":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7161034103.pdf","grobid_xml":"https://content.openalex.org/works/W7161034103.grobid-xml"},"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"paper":[1],"presents":[2],"a":[3,142],"comprehensive":[4],"framework":[5],"for":[6,40,85,124,133],"enhancing":[7],"the":[8,42,45,61,95,125,134,138,145,158,165,170,193,199],"accuracy":[9,114,121,191],"of":[10,44,113,122,148,160,195],"intrusion":[11],"detection":[12,62],"systems":[13],"(IDS)":[14],"by":[15,205],"combining":[16],"multiple":[17],"machine":[18],"learning":[19],"classifiers":[20],"with":[21],"swarm-based":[22,200],"optimization":[23,69,139,162,201],"algorithms.":[24],"We":[25],"use":[26],"different":[27],"classification":[28],"models":[29],"(Logistic":[30],"Regression,":[31],"Decision":[32],"Tree,":[33],"Extra":[34],"Trees,":[35],"Random":[36],"Forest,":[37],"and":[38,54,64,80,88,106,131,187,216],"XGBoost)":[39],"evaluating":[41],"impact":[43],"proposed":[46,96,175],"approach":[47],"on":[48,129],"two":[49],"benchmark":[50],"cybersecurity":[51],"datasets":[52],"CICIDS2018":[53],"UNSW-NB15.":[55],"To":[56],"address":[57],"shortcomings":[58],"pertaining":[59],"to":[60,163],"precision":[63],"model":[65,127,176,217],"stability,":[66],"three":[67],"metaheuristic":[68],"algorithms":[70],"i.e.,":[71],"Particle":[72],"Swarm":[73],"Optimization":[74,78],"(PSO),":[75],"Ant":[76],"Colony":[77],"(ACO)":[79],"Bat":[81],"Algorithm":[82],"are":[83],"employed":[84],"feature":[86],"selection":[87],"hyperparameter":[89],"optimization.":[90],"Empirical":[91],"results":[92],"indicate":[93],"that":[94],"CRF-CAPS":[97],"obtains":[98],"significant":[99,211],"performance":[100,166,180],"improvements":[101],"in":[102,141,144,169,192,213],"all":[103],"evaluation":[104],"criteria":[105],"can":[107],"achieve":[108],"as":[109,111],"large":[110],"7.5%":[112],"improvement":[115,212],"over":[116],"baseline":[117],"models.":[118],"The":[119,174],"best":[120],"97.6%":[123],"improved":[126],"based":[128],"UNSW-NB15":[130],"90.9%":[132],"CICIDS2018.":[135],"In":[136,197],"addition,":[137,198],"resulted":[140],"decrease":[143],"inference":[146,214],"time":[147],"many":[149],"models,":[150],"which":[151,189,208],"enables":[152],"real-time":[153],"operation.":[154],"These":[155],"findings":[156],"demonstrate":[157],"efficacy":[159],"hybrid":[161],"narrow":[164],"gaps":[167],"observed":[168],"recent":[171,182],"IDSII":[172],"literature.":[173],"achieves":[177],"higher":[178],"overall":[179],"than":[181],"IDS":[183],"studies":[184],"between":[185],"2020":[186],"2025,":[188],"showed":[190],"range":[194],"84\u201391%.":[196],"could":[202],"reduce":[203],"features":[204],"around":[206],"30%,":[207],"translated":[209],"into":[210],"speed":[215],"efficiency.":[218]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-05-14T00:00:00"}