arXiv AI

Explainability-Aware Evaluation of Transfer Learning Models for IoT DDoS Detection Under Resource Constraints

The paper evaluates seven pre‑trained CNN architectures for detecting IoT DDoS attacks under resource constraints, using the CICDDoS2019 dataset and image‑based traffic representation. It combines performance metrics, reliability statistics, latency and training cost, and interpretability methods (Grad‑CAM and SHAP) to assess each model. DenseNet169 and MobileNetV3 emerge as top performers, offering strong reliability, interpretability, and a favorable latency‑accuracy trade‑off for fog‑level deployment.

arXiv Machine Learning
Sep 17

A GAN-Based Framework for Robust DDoS Attack Detection

The paper introduces a GAN‑based framework for detecting DDoS attacks that are designed to evade traditional security systems. It combines Random Forests, Deep Neural Ensembles, and Transformer models trained on the CICDDoS2019 dataset with synthetic adversarial traffic generated by a WGAN‑GP. Experiments show that this hybrid training significantly improves detection accuracy and resilience against unseen adversarial traffic, and real‑world tests confirm its practical effectiveness.

By Makram Chehayeb, Walid Fahs, Amina Rizk, Rida Khatoun, Omran Berjawi
arXiv Machine Learning
Jun 5

An Improved CNN-LSTM Based Intrusion Detection System for IoT Networks

arXiv:2606. 05776v1 Announce Type: cross Abstract: With the rapid proliferation of IoT devices, security concerns have dramatically escalated and intrusion detection systems have become critical for protecting networked environments.

By Mohammad Tariq Ikhlas, Pohanyar Khowaja Khil, Malik Muhammad Mueed Aslam, Muhammad Khuram Shahzad
arXiv Machine Learning
Aug 19

Diff-DDoS: Realistic Cyber-Physical Attack Synthesis and Robust Detection for 5G-Enabled CPS Using Tabular Diffusion Models

Diff‑DDoS is a three‑phase framework that uses tabular diffusion models to generate realistic cyber‑physical attacks and strengthen DDoS detectors for 5G‑enabled systems. First, a CNN cell‑level detector is trained on call detail record (CDR) grids; second, a tabular denoising diffusion probabilistic model (TabDDPM) learns normal CDR aggregates to synthesize realistic attacks; third, adversarial diffusion training (ADT) iteratively produces hard, distribution‑preserving samples that harden the detector. On the Milano CDR dataset, ResNet50 with ADT achieves near‑perfect F1‑scores across multiple attack scenarios, outperforming existing synthetic‑data methods such as CTGAN.

By Bilal Hussain, Xiao Tang, Qinghe Du, Tan Li, Muhammad Azhar, Danista Khan
arXiv Machine Learning
Jun 5

Hybrid CNN-LSTM Framework for Intelligent Cyber Attack Detection and Prevention in U.S. Critical Digital Infrastructure: A Comparative Machine Learning Evaluation on CSE-CIC-IDS2018

arXiv:2606. 05714v1 Announce Type: cross Abstract: Digital infrastructure is growing at a rapid pace in the United States, and as a result, exposure to advanced cyber threats to critical sectors including healthcare, finance, transportation, energy and government systems is growing.

By Md. Iqbal Hossan, Md. Serajul Kabir Chowdhury Rubel, Md. Arifur Rahman, B. M. Taslimul Haque