Large-Scale Binary Network Intrusion Classification Using a 1D Convolutional Neural Network on CSE-CIC-IDS2018: Performance Evaluation and Methodological Audit

Deep learning is increasingly applied to network intrusion detection because it can learn discriminative representations from high-dimensional flow records. This study evaluates a one-dimensional convolutional neural network (1D-CNN) for binary classification of benign and malicious traffic using CSE-CIC-IDS2018 and simultaneously audits the experimental pipeline for threats to independent generalization. The evaluated workflow processed the dataset in chunks, selected traffic features using mutual information, engineered packet-rate and flag-ratio variables, reduced the representation to 20 predictors, balanced the training subset using SMOTE, and trained a regularized Conv1D model with batch normalization, max pooling, dropout, AdamW optimization, and early stopping. The classifier used three convolutional stages with 32, 64, and 128 filters, followed by a regularized 128-unit dense layer and sigmoid output. This architecture was retained consistently throughout the reported benchmark experiment. For the selected 80:20 experiment, the reported confusion matrix contains 1,223,435 true negatives, 45,415 false positives, 29,948 false negatives, and 273,224 true positives. Recalculation gives 95.206% accuracy, 96.421% specificity, 85.747% precision, 90.122% recall, and an F1-score of 87.880%, while the reported ROC-AUC is 97.47%. The methodological audit identifies feature selection and scaling before data partitioning, use of the nominal test partition for validation-based model selection, chunk-wise categorical label coding, and inconsistent post-processing sample counts as important threats to confirmatory interpretation. The findings provide useful benchmark evidence but do not establish leakage-controlled generalization. A stronger replication should split observations before learned preprocessing, map labels deterministically, isolate validation from a locked test set, repeat training across multiple random seeds, and add chronological or cross-dataset evaluation when deployment-level claims are intended.

network intrusion detection, 1D-CNN, CSE-CIC-IDS2018, data leakage, binary classification

1. Ahmad, Z., Khan, A. S., Shiang, C. W., Abdullah, J., & Ahmad, F. (2021). Network intrusion detection system: A systematic study of machine learning and deep learning approaches. Transactions on Emerging Telecommunications Technologies, 32(1), e4150. https://doi.org/10.1002/ett.4150 [Google Scholar] [Crossref]

2. Chou, D., & Jiang, M. (2021). A survey on data-driven network intrusion detection. ACM Computing Surveys, 54(9), Article 182. https://doi.org/10.1145/3472753 [Google Scholar] [Crossref]

3. Magan-Carrion, R., Urda, D., Diaz-Cano, I., & Dorronsoro, B. (2020). Towards a reliable comparison and evaluation of network intrusion detection systems based on machine learning approaches. Applied Sciences, 10(5), 1775. https://doi.org/10.3390/app10051775 [Google Scholar] [Crossref]

4. Mohammadpour, L., Ling, T. C., Liew, C. S., & Aryanfar, A. (2022). A survey of CNN-based network intrusion detection. Applied Sciences, 12(16), 8162. https://doi.org/10.3390/app12168162 [Google Scholar] [Crossref]

5. Qazi, E. H., Almorjan, A., & Zia, T. A. (2022). A one-dimensional convolutional neural network (1D-CNN) based deep learning system for network intrusion detection. Applied Sciences, 12, 7986. [Google Scholar] [Crossref]

6. https://doi.org/10.3390/app12167986 [Google Scholar] [Crossref]

7. Wang, Y. C., Houng, Y. C., Chen, H. X., & Tseng, S. (2023). Network anomaly intrusion detection based on deep learning approach. Sensors, 23, 2171. https://doi.org/10.3390/s23042171 [Google Scholar] [Crossref]

8. Wang, Z., & Ghaleb, F. A. (2023). An attention-based convolutional neural network for intrusion detection model. IEEE Access, 11, 43116-43127. https://doi.org/10.1109/ACCESS.2023.3271408 [Google Scholar] [Crossref]

9. Anwar, R. W., Abrar, M., Salam, A., & Ullah, F. (2026). A lightweight 1D convolutional neural network for malicious network traffic detection on heterogeneous benchmark datasets. Array, 30, 100925. https://doi.org/10.1016/j.array.2026.100925 [Google Scholar] [Crossref]

10. Mallampati, S. B., & Hari, S. (2024). A comparative study on the impacts of data leakage during feature selection using the CIC-IoT 2023 intrusion detection dataset. 2024 10th International Conference on Electrical Energy Systems, 1-6. https://doi.org/10.1109/ICEES61253.2024.10776873 [Google Scholar] [Crossref]

11. Apruzzese, G., Pajola, L., & Conti, M. (2022). The cross-evaluation of machine learning-based network intrusion detection systems. IEEE Transactions on Network and Service Management, 19, 5152-5169. https://doi.org/10.1109/TNSM.2022.3157344 [Google Scholar] [Crossref]

12. Aburomman, A., Alakhras, M., & Reaz, M. (2026). Leakage-safe IoT intrusion detection with White Shark Optimizer-based feature selection. Array, 30, 100903. https://doi.org/10.1016/j.array.2026.100903 [Google Scholar] [Crossref]

13. Kim, A., Park, M., & Lee, D. H. (2020). AI-IDS: Application of deep learning to real-time web intrusion detection. IEEE Access, 8, 70245-70261. https://doi.org/10.1109/ACCESS.2020.2986882 [Google Scholar] [Crossref]

14. Mo, Y., Li, H., Wang, D., & Liu, G. (2024). An intrusion detection system based on convolution neural network. PeerJ Computer Science, 10, e2152. https://doi.org/10.7717/peerj-cs.2152 [Google Scholar] [Crossref]

15. Hidayat, I., Ali, M. Z., & Arshad, A. (2022). Machine learning-based intrusion detection system: An experimental comparison. Journal of Computational and Cognitive Engineering, 2(2), 88-97. https://doi.org/10.47852/bonviewJCCE2202270 [Google Scholar] [Crossref]

16. Hu, Z., Wang, L., Qi, L., Li, Y., & Yang, W. (2020). A novel wireless network intrusion detection method based on adaptive synthetic sampling and an improved convolutional neural network. IEEE Access, 8, 195741-195751. https://doi.org/10.1109/ACCESS.2020.3034015 [Google Scholar] [Crossref]

17. Vanin, P., Newe, T., Dhirani, L. L., O'Connell, E., O'Shea, D., Lee, B., & Rao, M. (2022). A study of network intrusion detection systems using artificial intelligence/machine learning. Applied Sciences, 12(22), 11752. https://doi.org/10.3390/app122211752 [Google Scholar] [Crossref]

18. Keserwani, P. K., Govil, M. C., & Pilli, E. S. (2023). An effective NIDS framework based on a comprehensive survey of feature optimization and classification techniques. Neural Computing and Applications, 35(7), 4993-5013. [Google Scholar] [Crossref]

19. Yang, Z., Liu, Z., Zong, X., & Wang, G. (2022). An optimized adaptive ensemble model with feature selection for network intrusion detection. Concurrency and Computation: Practice and Experience, 35(4), e7529. [Google Scholar] [Crossref]

• What the Desert Fathers Teach Data Scientists: Ancient Ascetic Principles for Ethical Machine-Learning Practice
• Comparative Analysis of Some Machine Learning Algorithms for the Classification of Ransomware
• Comparative Performance Analysis of Some Priority Queue Variants in Dijkstra’s Algorithm
• Transfer Learning in Detecting E-Assessment Malpractice from a Proctored Video Recordings.
• Dual-Modal Detection of Parkinson’s Disease: A Clinical Framework and Deep Learning Approach Using NeuroParkNet