Skip to content
Open access

SCDF-CNN-BiGRU: A Spatial-Contextual Dual Feature Fusion Framework for Multi dataset Hierarchical Network Intrusion Detection

Sep 2026 · Jurnal Engineering · Vol 32, pp. 264-278 · 0 citations · 14 references

TL;DR

Findings indicate that the proposed SCDF-CNN-BiGRU framework gives robust representations and consistent performance across multiple heterogeneous datasets via unified learning and ensemble inference.

Abstract

Network Intrusion Detection Systems (NIDSs) are deployed and constitute an essential component of modern network defense against adversaries employing more and more advanced cyberattack strategies. Nevertheless, maintaining high detection accuracy in heterogeneous network environments still faces great challenges because of the diversity of traffic patterns and attack behaviors. This paper proposes a new Spatial–Contextual Dual-Feature Fusion (SCDF-CNN-BiGRU) framework in the context of hierarchical network intrusion detection employing multiple benchmark cybersecurity datasets. The proposed framework utilizes a lightweight shared convolutional neural network (CNN) feature extraction stage followed by 2 parallel and complimentary learning branches. The first branch employs Bidirectional Gated Recurrent Unit (BiGRU) to extract temporal dependencies and contextual relationships of network traffic while the second one adopts bidirectional convolutional processing to learn discriminative spatial representations. The features extracted from both branches are then fused via feature aggregation module to create an overall traffic representation. It also establishes hierarchical intrusion analysis through binary attack detection and multi-class attack categorization, along with an attack-level mapping strategy to connect different levels of attack types and the corresponding highly representative fine-grained attack descriptions. The framework was evaluated using six heterogeneous benchmark datasets, including UNSW-NB15, NSL-KDD, NF-ToN-IoT-v3, CICIOT2023, BCCC and CIC-UNSW-NB15. Experimental results showed strong detection performance with binary classification accuracies of up to 0.999 and multi-class accuracies of up to 0.988. These findings indicate that the proposed SCDF-CNN-BiGRU framework gives robust representations and consistent performance across multiple heterogeneous datasets via unified learning and ensemble inference.

Read PDF

Similar papers

Open access Sep 2026

A cross-attention CNN–LSTM fusion model for network traffic anomaly detection

Detecting cyber intrusions in modern IoT networks is challenging because of their large scale, heterogeneous device ecosystems, and high-volume traffic patterns. This paper presents a cross-attention CNN–LSTM fusion architecture that jointly learns the spatial and temporal characteristics of network traffic for bin...

Mohamed Fakri, A. Najid, Rachid Ben Said et al. · 0 citations
Open access Sep 2026

Network anomaly detection using hybrid deep learning framework

TriFusion-Net is proposed, a hybrid deep learning framework that integrates convolutional neural networks (CNN), long short-term memory (LSTM)-based recurrent neural networks (RNN), and feedforward neural networks (FNN) to improve flow-based network anomaly detection.

Razibul Islam Khan, Md. Imran Hossain, Hridoy Mohonto et al. · 0 citations
Open access Sep 2026

Parallel Local–Global Feature Extraction and Cross-Attention Gated Fusion for Network Intrusion Detection

With the rapid advancement of network technology and the Internet of Things (IoT), massive, high-dimensional traffic data pose significant challenges to Network Intrusion Detection Systems (NIDS). Existing deep learning methods face two major limitations: (1) Insufficient feature extraction: single models struggle to c...

Ting-Hui Huang, Yu Wang, Yu-Ming Qin · 0 citations
Open access 2026

HYBRIDNET-IDS: AN INNOVATIVE CNN, BILSTM, AND TRANSFORMER FRAMEWORK UTILISING ATTENTION FOR IMPROVED NETWORK INTRUSION DETECTION

The rapid spread of network-connected technologies and the growing complexity of attacks have shown that traditional signature-based intrusion detection systems are not good enough, especially when it comes to finding zero-day attacks and advanced persistent threats. This paper introduces HybridNet-IDS, an augmented de...

Subhodip Koley, Sumit Das, Debasish Saha Roy et al. · 0 citations
Open access Aug 2026

HADS-Net: A Hybrid Attention-Based Deep Security Network for Network Intrusion Detection

The principal contribution of this work is architectural and diagnostic rather than a performance improvement: it documents that combining feature-wise attention with out-of-fold stacked generalization does not, in this setting, outperform a plain multi-layer perceptron, while incurring the highest memory footprint of...

Mahima Khanna, V. Murthy, Siva Ramavarapu et al. · 0 citations
Open access Sep 2026

A Deep Hybrid Recursive Model Combining 1D-CNN and BI-LSTM for Reliable Intrusion Detection in IoT Big Data Streams

Purpose: This study proposes a novel hybrid recursive deep learning-based Intrusion Detection System (IDS) for detecting sophisticated security threats in high-velocity IoT big data streams. Design/Methodology/Approach: The proposed framework integrates one-dimensional Convolutional Neural Networks (1D-CNNs) for lightw...

J. Alkenani, M. Nickray · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.