{"id":"https://openalex.org/W7164574287","doi":"https://doi.org/10.48550/arxiv.2606.12611","title":"Evaluation of AutoML Frameworks for IDS under Imbalanced Data Conditions of the NSL-KDD Dataset","display_name":"Evaluation of AutoML Frameworks for IDS under Imbalanced Data Conditions of the NSL-KDD Dataset","publication_year":2026,"publication_date":"2026-06-10","ids":{"openalex":"https://openalex.org/W7164574287","doi":"https://doi.org/10.48550/arxiv.2606.12611"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2606.12611","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12611","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2606.12611","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5138530029","display_name":"Wiliane Carolina Silva","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Silva, Wiliane Carolina","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024919964","display_name":"Evandro C\u00e9sar Vilas Boas","orcid":"https://orcid.org/0000-0002-7225-7783"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Boas, Evandro C\u00e9sar Vilas","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5138502026","display_name":"Felipe A. P. de Figueiredo","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"de Figueiredo, Felipe A. P.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.4652000069618225,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.4652000069618225,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.30559998750686646,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.03400000184774399,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.6848000288009644},{"id":"https://openalex.org/keywords/hyperparameter","display_name":"Hyperparameter","score":0.6015999913215637},{"id":"https://openalex.org/keywords/ensemble-learning","display_name":"Ensemble learning","score":0.569100022315979},{"id":"https://openalex.org/keywords/generalization","display_name":"Generalization","score":0.5676000118255615},{"id":"https://openalex.org/keywords/class","display_name":"Class (philosophy)","score":0.5482000112533569},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5410000085830688},{"id":"https://openalex.org/keywords/multiclass-classification","display_name":"Multiclass classification","score":0.4117000102996826},{"id":"https://openalex.org/keywords/code","display_name":"Code (set theory)","score":0.4077000021934509}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7365000247955322},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6996999979019165},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.6848000288009644},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.6241999864578247},{"id":"https://openalex.org/C8642999","wikidata":"https://www.wikidata.org/wiki/Q4171168","display_name":"Hyperparameter","level":2,"score":0.6015999913215637},{"id":"https://openalex.org/C45942800","wikidata":"https://www.wikidata.org/wiki/Q245652","display_name":"Ensemble learning","level":2,"score":0.569100022315979},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.5676000118255615},{"id":"https://openalex.org/C2777212361","wikidata":"https://www.wikidata.org/wiki/Q5127848","display_name":"Class (philosophy)","level":2,"score":0.5482000112533569},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5410000085830688},{"id":"https://openalex.org/C123860398","wikidata":"https://www.wikidata.org/wiki/Q6934605","display_name":"Multiclass classification","level":3,"score":0.4117000102996826},{"id":"https://openalex.org/C2776760102","wikidata":"https://www.wikidata.org/wiki/Q5139990","display_name":"Code (set theory)","level":3,"score":0.4077000021934509},{"id":"https://openalex.org/C48372109","wikidata":"https://www.wikidata.org/wiki/Q3913","display_name":"Binary number","level":2,"score":0.34630000591278076},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3391000032424927},{"id":"https://openalex.org/C136389625","wikidata":"https://www.wikidata.org/wiki/Q334384","display_name":"Supervised learning","level":3,"score":0.33390000462532043},{"id":"https://openalex.org/C66905080","wikidata":"https://www.wikidata.org/wiki/Q17005494","display_name":"Binary classification","level":3,"score":0.33219999074935913},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.3163999915122986},{"id":"https://openalex.org/C43126263","wikidata":"https://www.wikidata.org/wiki/Q128751","display_name":"Source code","level":2,"score":0.28279998898506165},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.266400009393692},{"id":"https://openalex.org/C110083411","wikidata":"https://www.wikidata.org/wiki/Q1744628","display_name":"Statistical classification","level":2,"score":0.2597000002861023},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.2551000118255615}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2606.12611","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12611","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2606.12611","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2606.12611","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"This":[0],"work":[1,163],"investigates":[2],"the":[3,10,24,32,42,107,181],"impact":[4],"of":[5,12,59,186],"severe":[6,173],"class":[7],"imbalance":[8],"on":[9,155],"performance":[11],"automated":[13,195],"machine":[14],"learning":[15,61,97,196],"(AutoML)":[16],"frameworks":[17,66,94,120],"for":[18,142,168,183],"multiclass":[19,174],"network":[20],"intrusion":[21,170],"detection":[22,130,171],"using":[23],"NSL-KDD":[25],"dataset.":[26],"Unlike":[27],"previous":[28],"studies":[29],"that":[30,93,136],"simplify":[31],"problem":[33],"through":[34],"binary":[35],"classification":[36],"or":[37],"minority-class":[38,103,129],"removal,":[39],"we":[40],"preserve":[41],"original":[43],"five-class":[44],"distribution,":[45],"including":[46],"highly":[47,143],"underrepresented":[48],"attacks":[49],"such":[50],"as":[51],"R2L":[52],"and":[53,72,87,98,180,190],"U2R,":[54],"enabling":[55],"a":[56,70,160,165],"realistic":[57],"evaluation":[58,192],"imbalance-sensitive":[60],"behavior.":[62],"Nine":[63],"open-source":[64],"AutoML":[65],"were":[67],"analyzed":[68],"under":[69,172],"unified":[71],"reproducible":[73],"experimental":[74],"protocol,":[75],"considering":[76],"differences":[77],"in":[78,128],"architectural":[79,178],"design,":[80],"ensemble":[81,96],"strategies,":[82],"validation":[83],"procedures,":[84],"hyperparameter":[85],"optimization,":[86,188],"imbalance-handling":[88],"mechanisms.":[89],"The":[90,132,198],"results":[91],"demonstrate":[92],"incorporating":[95],"imbalance-aware":[99,187],"optimization":[100,138],"achieve":[101],"better":[102],"discrimination.":[104],"PyCaret":[105],"obtained":[106],"best":[108],"overall":[109],"performance,":[110],"reaching":[111],"66\\%":[112],"macro-F1,":[113],"followed":[114],"by":[115],"AutoGluon":[116],"with":[117,152],"55\\%,":[118],"whereas":[119],"lacking":[121],"native":[122,184],"balancing":[123],"support":[124],"exhibited":[125],"significant":[126],"degradation":[127],"capability.":[131],"analysis":[133],"further":[134],"shows":[135],"accuracy-oriented":[137],"alone":[139],"is":[140,201],"insufficient":[141],"imbalanced":[144],"IDS":[145],"scenarios,":[146],"since":[147],"high-weighted":[148],"metrics":[149],"may":[150],"coexist":[151],"poor":[153],"generalization":[154],"rare":[156],"attack":[157],"categories.":[158],"As":[159],"contribution,":[161],"this":[162],"establishes":[164],"standardized":[166],"benchmark":[167],"AutoML-based":[169],"imbalance,":[175],"highlighting":[176],"current":[177],"limitations":[179],"need":[182],"integration":[185],"resampling,":[189],"stratified":[191],"strategies":[193],"into":[194],"pipelines.":[197],"source":[199],"code":[200],"publicly":[202],"available.":[203]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-06-13T00:00:00"}