A Multi-Strategy Adaptive Hybrid PSO–HHO–DE Framework with Dynamic Threshold Learning for Cross-Dataset Intrusion Detection

Machine-learning-based intrusion detection systems can be affected by redundant and irrelevant network traffic features, which increase the dimensionality of the input space and can affect detection performance and computational efficiency. Feature selection therefore plays an important role in identifying compact and informative feature subsets for intrusion detection. In this study, Particle Swarm Optimization (PSO), Harris Hawks Optimization (HHO), and Differential Evolution (DE) are integrated into a Multi-Strategy Adaptive Hybrid PSO–HHO–DE framework to combine their complementary search behaviors. The proposed framework uses population diversity and fitness stagnation to adaptively select the optimization strategy during the search process, while Dynamic Threshold Learning (DTL) is incorporated to adapt the classification decision threshold and reduce false alarm rates. The framework is evaluated using NSL-KDD, UNSW-NB15, and CICIDS2017 datasets with XGBoost and Random Forest classifiers. The reported experimental results show that the proposed framework achieves accuracies of 98.12%, 92.67%, and 99.03% on NSL-KDD, UNSW-NB15, and CICIDS2017, respectively, with corresponding false alarm rates of 2.11%, 4.83%, and 1.54%. The selected feature subsets reduce the original feature dimensions by 56.1%, 53.0%, and 61.5% for the three datasets, respectively. Statistical comparison using the Wilcoxon signed-rank test over repeated runs indicates significant performance differences between the proposed framework and the individual PSO, HHO, and DE baselines at the 0.05 significance level. The results indicate that adaptive integration of the three optimization strategies can improve detection performance while reducing the dimensionality of the feature space.

Intrusion Detection System, Adaptive Hybrid Optimization, Particle Swarm Optimization, Harris Hawks Optimization

1. K. Kendall, “A Database of Computer Attacks for the Evaluation of Intrusion Detection Systems,” Proc. DARPA Info Survivability Conf., 1999. [Google Scholar] [Crossref]

2. M. Tavallaee et al., “A Detailed Analysis of the KDD CUP 99 Dataset,” IEEE CISDA, 2009. [Google Scholar] [Crossref]

3. N. Moustafa and J. Slay, “UNSW-NB15: A Comprehensive Data Set for Network Intrusion Detection Systems,” IEEE MilCIS, 2015. [Google Scholar] [Crossref]

4. Sharafaldin et al., “Toward Generating a New Intrusion Detection Dataset and Intrusion Traffic Characterization,” IEEE ICISSP, 2018. [Google Scholar] [Crossref]

5. Patcha and J. M. Park, “An Overview of Anomaly Detection Techniques,” IEEE Communications Surveys & Tutorials, 2007. [Google Scholar] [Crossref]

6. S. Mukkamala et al., “Intrusion Detection Using Neural Networks and Support Vector Machines,” IEEE IJCNN, 2002. [Google Scholar] [Crossref]

7. W. Wang et al., “HAST-IDS: Learning Hierarchical Spatial-Temporal Features,” IEEE Access, 2018. [Google Scholar] [Crossref]

8. C. Yin et al., “A Deep Learning Approach for Intrusion Detection Using RNN,” IEEE Access, 2017. [Google Scholar] [Crossref]

9. M. Hodo et al., “Threat Analysis of IoT Networks Using Artificial Neural Network,” IEEE ICISC, 2016. [Google Scholar] [Crossref]

10. R. Sommer and V. Paxson, “Outside the Closed World: On Using Machine Learning for Network Intrusion Detection,” IEEE S&P, 2010. [Google Scholar] [Crossref]

11. J. Kennedy and R. Eberhart, “Particle Swarm Optimization,” IEEE ICNN, 1995. [Google Scholar] [Crossref]

12. Y. Shi and R. Eberhart, “A Modified Particle Swarm Optimizer,” IEEE ICEC, 1998. [Google Scholar] [Crossref]

13. X. Li et al., “Network Intrusion Detection Based on PSO-SVM,” IEEE ICNC, 2012. [Google Scholar] [Crossref]

14. H. Wang et al., “Feature Selection Using PSO for IDS,” IEEE ICC, 2014. [Google Scholar] [Crossref]

15. Choudhary and V. K. Shukla, “Feature Selection for IDS Using PSO,” IEEE ICACCI, 2016. [Google Scholar] [Crossref]

16. M. Abedin et al., “PSO-Based Intrusion Detection System,” IEEE Access, 2019. [Google Scholar] [Crossref]

17. A. Heidari et al., “Harris Hawks Optimization: Algorithm and Applications,” Future Generation Computer Systems, 2019. [Google Scholar] [Crossref]

18. M. Mafarja et al., “Binary HHO for Feature Selection,” IEEE Access, 2019. [Google Scholar] [Crossref]

19. S. Mirjalili et al., “HHO Applications in Engineering Optimization,” IEEE Access, 2020. [Google Scholar] [Crossref]

20. M. Abd Elaziz et al., “Improved HHO for Feature Selection,” IEEE Access, 2020. [Google Scholar] [Crossref]

21. R. Storn and K. Price, “Differential Evolution – A Simple and Efficient Heuristic,” Journal of Global Optimization, 1997. [Google Scholar] [Crossref]

22. J. Zhang and A. Sanderson, “JADE: Adaptive Differential Evolution,” IEEE TEC, 2009. [Google Scholar] [Crossref]

23. S. Das and P. Suganthan, “Differential Evolution: A Survey,” IEEE TEC, 2011. [Google Scholar] [Crossref]

24. Y. Tanabe and A. Fukunaga, “Success-History Based Parameter Adaptation for DE,” IEEE CEC, 2013. [Google Scholar] [Crossref]

25. M. Zaman et al., “Hybrid IDS Using PSO and Neural Network,” IEEE ICCIT, 2015. [Google Scholar] [Crossref]

26. S. Ashoor and S. Gore, “Importance of Feature Selection in IDS,” IEEE ICCSP, 2011. [Google Scholar] [Crossref]

27. R. K. Shyam et al., “Hybrid Meta-Heuristic Optimization for IDS,” IEEE Access, 2021. [Google Scholar] [Crossref]

28. M. Alauthman et al., “Hybrid IDS Using Meta-Heuristic Optimization,” IEEE Access, 2020. [Google Scholar] [Crossref]

29. M. M. Hassan et al., “A Hybrid Optimization-Based IDS,” IEEE Access, 2022. [Google Scholar] [Crossref]

30. W. Wang et al., “Deep Learning for Network Intrusion Detection,” IEEE CNS, 2017. [Google Scholar] [Crossref]

31. Y. LeCun et al., “Deep Learning,” IEEE Signal Processing Magazine, 2015. [Google Scholar] [Crossref]

32. H. Kim et al., “LSTM-Based Intrusion Detection,” IEEE Access, 2016. [Google Scholar] [Crossref]

33. Y. Li et al., “Deep Belief Network for IDS,” IEEE Access, 2019. [Google Scholar] [Crossref]

34. G. Aceto et al., “Mobile Encrypted Traffic Classification,” IEEE Network, 2019. [Google Scholar] [Crossref]

35. Guyon and A. Elisseeff, “An Introduction to Variable and Feature Selection,” JMLR, 2003. [Google Scholar] [Crossref]

36. M. Dash and H. Liu, “Feature Selection for Classification,” IEEE Intelligent Systems, 1997. [Google Scholar] [Crossref]

37. H. Liu and H. Motoda, “Feature Selection for Knowledge Discovery,” IEEE Press, 1998. [Google Scholar] [Crossref]

38. J. Xue et al., “A Survey on Feature Selection Using Meta-Heuristics,” IEEE Access, 2016. [Google Scholar] [Crossref]

39. M. Mafarja and S. Mirjalili, “Whale Optimization for Feature Selection,” IEEE Access, 2018. [Google Scholar] [Crossref]

40. T. Chen and C. Guestrin, “XGBoost: A Scalable Tree Boosting System,” IEEE KDD, 2016. [Google Scholar] [Crossref]

41. L. Breiman, “Random Forests,” Machine Learning, 2001. [Google Scholar] [Crossref]

42. Alazab et al., “Machine Learning Based IDS,” IEEE Access, 2020. [Google Scholar] [Crossref]

43. R. Vinayakumar et al., “Deep Learning for Cybersecurity,” IEEE Security & Privacy, 2019. [Google Scholar] [Crossref]

44. F. Wilcoxon, “Individual Comparisons by Ranking Methods,” Biometrics Bulletin, 1945. [Google Scholar] [Crossref]

45. J. Demšar, “Statistical Comparisons of Classifiers,” JMLR, 2006. [Google Scholar] [Crossref]

46. S. García et al., “Advanced Statistical Tests for Machine Learning,” IEEE Access, 2010. [Google Scholar] [Crossref]

47. S. Mirjalili, “Evolutionary Algorithms and Swarm Intelligence,” IEEE Press, 2019. [Google Scholar] [Crossref]

48. K. Deb, “Multi-Objective Optimization Using Evolutionary Algorithms,” Wiley-IEEE Press, 2001. [Google Scholar] [Crossref]

49. Y. Shi, “Convergence Analysis of PSO,” IEEE TEC, 2001. [Google Scholar] [Crossref]

50. M. Clerc and J. Kennedy, “The Particle Swarm Explosion,” IEEE TEC, 2002. [Google Scholar] [Crossref]

51. M. Alazab et al., “Deep Learning Applications for Cyber Security,” IEEE Access, 2021. [Google Scholar] [Crossref]

52. Y. Meidan et al., “IoT IDS Using Machine Learning,” IEEE Access, 2020. [Google Scholar] [Crossref]

53. M. Al-Qatf et al., “Hybrid Feature Selection for IDS,” IEEE Access, 2021. [Google Scholar] [Crossref]

54. S. Shone et al., “Deep Learning Approach for IDS,” IEEE Access, 2018. [Google Scholar] [Crossref]

55. Javaid et al., “Deep Learning for Network Intrusion Detection,” IEEE Access, 2016. [Google Scholar] [Crossref]

56. N. Moustafa, “Network Anomaly Detection Using ML,” IEEE Access, 2021. [Google Scholar] [Crossref]

57. M. Mafarja et al., “Meta-Heuristic Feature Selection Survey,” IEEE Access, 2020. [Google Scholar] [Crossref]

58. [58] H. Alkahtani et al., “Hybrid Swarm Intelligence for IDS,” IEEE Access, 2022. [Google Scholar] [Crossref]

59. S. Mirjalili et al., “Recent Advances in Swarm Intelligence,” IEEE Access, 2020. [Google Scholar] [Crossref]

60. R. Polikar, “Ensemble Learning,” IEEE Circuits and Systems Magazine, 2006. [Google Scholar] [Crossref]

• The Impact of Ownership Structure on Dividend Payout Policy of Listed Plantation Companies in Sri Lanka
• Urban Sustainability in North-East India: A Study through the lens of NER-SDG index
• Performance Assessment of Predictive Forecasting Techniques for Enhancing Hospital Supply Chain Efficiency in Healthcare Logistics
• The Fractured Self in Julian Barnes' Postmodern Fiction: Identity Crisis and Deflation in Metroland and the Sense of an Ending
• Impact of Flood on the Employment, Labour Productivity and Migration of Agricultural Labour in North Bihar