Ahmed Usama, Nazir Mohammad, Sarwar Amna, Ali Tariq, Aggoune El-Hadi M, Shahzad Tariq, Khan Muhammad Adnan
Department of Artificial Intelligence, School of Systems and Technology, University of Management and Technology, Lahore, 54700, Pakistan.
Department of Computer Science and Information Technology, The Islamia University of Bahawalpur, Bahawalpur, Pakistan.
Sci Rep. 2025 Jan 11;15(1):1726. doi: 10.1038/s41598-025-85866-7.
Network security is crucial in today's digital world, since there are multiple ongoing threats to sensitive data and vital infrastructure. The aim of this study to improve network security by combining methods for instruction detection from machine learning (ML) and deep learning (DL). Attackers have tried to breach security systems by accessing networks and obtaining sensitive information.Intrusion detection systems (IDSs) are one of the significant aspect of cybersecurity that involve the monitoring and analysis, with the intention of identifying and reporting of dangerous activities that would help to prevent the attack.Support Vector Machine (SVM), K-Nearest Neighbors (KNN), Random Forest (RF), Decision Tree (DT), Long Short-Term Memory (LSTM), and Artificial Neural Network (ANN) are the vector figures incorporated into the study through the results. These models are subjected to various test to established the best results on the identification and prevention of network violation. Based on the obtained results, it can be stated that all the tested models are capable of organizing data originating from network traffic. thus, recognizing the difference between normal and intrusive behaviors, models such as SVM, KNN, RF, and DT showed effective results. Deep learning models LSTM and ANN rapidly find long-term and complex pattern in network data. It is extremely effective when dealing with complex intrusions since it is characterised by high precision, accuracy and recall.Based on our study, SVM and Random Forest are considered promising solutions for real-world IDS applications because of their versatility and explainability. For the companies seeking IDS solutions which are reliable and at the same time more interpretable, these models can be promising. Additionally, LSTM and ANN, with their ability to catch successive conditions, are suitable for situations involving nuanced, advancing dangers.
在当今数字世界中,网络安全至关重要,因为敏感数据和关键基础设施面临着多种持续威胁。本研究的目的是通过结合机器学习(ML)和深度学习(DL)中的指令检测方法来提高网络安全。攻击者试图通过访问网络和获取敏感信息来突破安全系统。入侵检测系统(IDS)是网络安全的一个重要方面,它涉及监控和分析,旨在识别和报告有助于防止攻击的危险活动。支持向量机(SVM)、K近邻(KNN)、随机森林(RF)、决策树(DT)、长短期记忆(LSTM)和人工神经网络(ANN)是通过结果纳入该研究的向量模型。这些模型经过各种测试,以在识别和预防网络违规方面取得最佳结果。根据获得的结果,可以说所有测试模型都能够整理源自网络流量的数据。因此,识别正常行为和入侵行为之间的差异,SVM、KNN、RF和DT等模型显示出了有效的结果。深度学习模型LSTM和ANN能够快速在网络数据中找到长期和复杂的模式。在处理复杂入侵时,它非常有效,因为它具有高精度、准确性和召回率的特点。基于我们的研究,SVM和随机森林因其通用性和可解释性而被认为是现实世界中IDS应用的有前途的解决方案。对于寻求可靠且同时更具可解释性的IDS解决方案的公司来说,这些模型可能很有前景。此外,LSTM和ANN具有捕捉连续条件的能力,适用于涉及细微、不断发展的危险的情况。