SmartVille: A Framework for Realistic Deep Learning-Based Online Network Intrusion Detection
TL;DR
SmartVille is introduced, a framework for formulating and studying deep learning-based NID under online, open-world, and multi-modal assumptions, and providing a principled way to design, train, and benchmark adaptive NID models under realistic assumptions while separating the theoretical contribution from its open-source implementation.
Abstract
Deep learning has generated strong results for network intrusion detection, but much of the literature still treats the problem as static offline classification, leaving unclear how such models should be conceived for deployment. In practice, intrusion detection must learn from traffic streams, cope with previously unseen attacks, and exploit heterogeneous evidence sources without relying on bulky preprocessing or heavyweight models. This paper addresses that conceptual gap by introducing SmartVille, a framework for formulating and studying deep learning-based NID under online, open-world, and multi-modal assumptions. The main contribution is therefore not a new stand-alone detection algorithm, but a coherent research blueprint that integrates existing learning principles into a single technical vision. In particular, SmartVille advocates an end-to-end differentiable encode–process–decode organisation, in which neural encoders replace bulk feature engineering, online learning replaces static train-once evaluation, and collective anomaly detection is studied alongside supervised classification within the same framework. This perspective clarifies what SmartVille specifically solves: it provides a principled way to design, train, and benchmark adaptive NID models under realistic assumptions, while separating the theoretical contribution from its open-source implementation. Representative use cases show how the framework can be used to analyse curriculum design, input-modality composition, and architectural choices for adaptive intrusion detection research.