Classification of Abnormal Patterns in Traffic Analysis Based on a Fusion Approach

preprint OA: closed CC-BY-4.0
📄 Open PDF Full text JSON View at publisher

Abstract

Abstract Optical signal processing plays a crucial role in Intrusion Detection System (IDS) for optical networks, as optical techniques provide more bandwidth and more security for the communication channel. It involves various techniques and operations performed on the optical signals to extract relevant information and identify potential security threats or intrusions. The IDS is a very important component which detect unauthorized access to computer networks and systems. IDS analyzes network traffic and system logs to identify potential security threats and alert system administrators to take appropriate action. There are different types of IDS, including signature-based, anomaly-based, and hybrid approaches. IDS uses a variety of detection methods to identify potential security threats, including statistical analysis, machine learning, and rule-based methods. However, IDS faces several challenges, including the need to balance detection accuracy with false positives and false negatives while keeping up with the ever-changing threat landscape. There are an evaluation metrics, such as detection rate, false positive rate, and accuracy. In this paper, we use accuracy of the detection to evaluate the effectiveness of IDS. Data preprocessing and feature selection are also important to improve search capabilities in IDS. In general. Ongoing research in this area, including the use of deep learning models such as convolution neural network (CNN), long-short term memory (LSTM) and hybrid models with CIC-IDS 2018 dataset, will continue to improve IDS ability to detect and prevent security breaches. This research will enhance accuracy detection of the IDS.
Full text 12,196 characters · extracted from preprint-html · click to expand
Classification of Abnormal Patterns in Traffic Analysis Based on a Fusion Approach | Research Square window.SnipcartSettings = { analytics: { enabled: false } }; (function() { var accessVector = localStorage.getItem('access_vector') || ''; window.dataLayer = window.dataLayer || []; if (accessVector) { window.dataLayer.push({ user: { profile: { profileInfo: { snid: accessVector } } } }); } })(); (function(w,d,s,l,i){w[l]=w[l]||[];w[l].push({'gtm.start':new Date().getTime(),event:'gtm.js'});var f=d.getElementsByTagName(s)[0],j=d.createElement(s),dl=l!='dataLayer'?'&l='+l:'';j.async=true;j.src='https://www.googletagmanager.com/gtm.js?id='+i+dl;f.parentNode.insertBefore(j,f);})(window,document,'script','dataLayer','GTM-K279D39R'); Browse Preprints In Review Journals COVID-19 Preprints AJE Video Bytes Research Tools Research Promotion AJE Professional Editing AJE Rubriq About Preprint Platform In Review Editorial Policies Our Team Advisory Board Help Center Sign In Submit a Preprint Cite Share Download PDF Article Classification of Abnormal Patterns in Traffic Analysis Based on a Fusion Approach Fathi E. Abd El-Samie, Nabil A. Ismail, Adel S. El-Fishawy, Khalil F. Ramadan, and 1 more This is a preprint; it has not been peer reviewed by a journal. https://doi.org/ 10.21203/rs.3.rs-8630088/v1 This work is licensed under a CC BY 4.0 License Status: Posted Version 1 posted You are reading this latest preprint version Abstract Optical signal processing plays a crucial role in Intrusion Detection System (IDS) for optical networks, as optical techniques provide more bandwidth and more security for the communication channel. It involves various techniques and operations performed on the optical signals to extract relevant information and identify potential security threats or intrusions. The IDS is a very important component which detect unauthorized access to computer networks and systems. IDS analyzes network traffic and system logs to identify potential security threats and alert system administrators to take appropriate action. There are different types of IDS, including signature-based, anomaly-based, and hybrid approaches. IDS uses a variety of detection methods to identify potential security threats, including statistical analysis, machine learning, and rule-based methods. However, IDS faces several challenges, including the need to balance detection accuracy with false positives and false negatives while keeping up with the ever-changing threat landscape. There are an evaluation metrics, such as detection rate, false positive rate, and accuracy. In this paper, we use accuracy of the detection to evaluate the effectiveness of IDS. Data preprocessing and feature selection are also important to improve search capabilities in IDS. In general. Ongoing research in this area, including the use of deep learning models such as convolution neural network (CNN), long-short term memory (LSTM) and hybrid models with CIC-IDS 2018 dataset, will continue to improve IDS ability to detect and prevent security breaches. This research will enhance accuracy detection of the IDS. Biological sciences/Computational biology and bioinformatics Physical sciences/Engineering Physical sciences/Mathematics and computing Optical signal processing Intrusion detection systems Machine learning Deep learning CNN LSTM Anomaly based detection KDD Cup 99 NSL-KDD CSE-CIC IDS 2018 Full Text Additional Declarations No competing interests reported. Cite Share Download PDF Status: Posted Version 1 posted You are reading this latest preprint version Research Square lets you share your work early, gain feedback from the community, and start making changes to your manuscript prior to peer review in a journal. As a division of Research Square Company, we’re committed to making research communication faster, fairer, and more useful. We do this by developing innovative software and high quality services for the global research community. Our growing team is made up of researchers and industry professionals working together to solve the most critical problems facing scientific publishing. Also discoverable on Platform About Our Team In Review Editorial Policies Advisory Board Help Center Resources Author Services Accessibility API Access RSS feed Manage Cookie Preferences © Research Square 2026 | ISSN 2693-5015 (online) Privacy Policy Terms of Service Do Not Sell My Personal Information {"props":{"pageProps":{"initialData":{"identity":"rs-8630088","acceptedTermsAndConditions":true,"allowDirectSubmit":true,"archivedVersions":[],"articleType":"Article","associatedPublications":[],"authors":[{"id":595325389,"identity":"21d93a50-78fb-4b4b-8b22-8c010ebaacd4","order_by":0,"name":"Fathi E. Abd El-Samie","email":"","orcid":"","institution":"Menoufia University","correspondingAuthor":false,"prefix":"","firstName":"Fathi","middleName":"E. Abd","lastName":"El-Samie","suffix":""},{"id":595325390,"identity":"ef28dae6-5a71-4953-95d5-30cb84effe30","order_by":1,"name":"Nabil A. Ismail","email":"","orcid":"","institution":"Menoufia University","correspondingAuthor":false,"prefix":"","firstName":"Nabil","middleName":"A.","lastName":"Ismail","suffix":""},{"id":595325391,"identity":"759338c4-4841-4a98-81b7-ca17fe188b9f","order_by":2,"name":"Adel S. El-Fishawy","email":"","orcid":"","institution":"Menoufia University","correspondingAuthor":false,"prefix":"","firstName":"Adel","middleName":"S.","lastName":"El-Fishawy","suffix":""},{"id":595325392,"identity":"1533acd8-1834-4592-affa-6805946b9f79","order_by":3,"name":"Khalil F. Ramadan","email":"data:image/png;base64,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","orcid":"","institution":"Menoufia University","correspondingAuthor":true,"prefix":"","firstName":"Khalil","middleName":"F.","lastName":"Ramadan","suffix":""},{"id":595325393,"identity":"f62e3977-33d1-47c1-bdec-c1fce57f177c","order_by":4,"name":"Hesham M. AbdelZaher","email":"","orcid":"","institution":"Menoufia University","correspondingAuthor":false,"prefix":"","firstName":"Hesham","middleName":"M.","lastName":"AbdelZaher","suffix":""}],"badges":[],"createdAt":"2026-01-18 08:38:18","currentVersionCode":1,"declarations":"","doi":"10.21203/rs.3.rs-8630088/v1","doiUrl":"https://doi.org/10.21203/rs.3.rs-8630088/v1","draftVersion":[],"editorialEvents":[],"editorialNote":"","failedWorkflow":false,"files":[{"id":103984849,"identity":"b5ee4c99-ecbe-48b6-ba65-5ec69176bd7b","added_by":"auto","created_at":"2026-03-05 10:12:50","extension":"pdf","order_by":1,"title":"","display":"","copyAsset":false,"role":"manuscript-pdf","size":693376,"visible":true,"origin":"","legend":"","description":"","filename":"ScientificReports.pdf","url":"https://assets-eu.researchsquare.com/files/rs-8630088/v1_covered_b7028e95-355a-49b3-b788-514306f283bb.pdf"}],"financialInterests":"No competing interests reported.","formattedTitle":"Classification of Abnormal Patterns in Traffic Analysis Based on a Fusion Approach","fulltext":[],"fulltextSource":"","fullText":"","funders":[],"hasAdminPriorityOnWorkflow":false,"hasManuscriptDocX":false,"hasOptedInToPreprint":true,"hasPassedJournalQc":"","hasAnyPriority":false,"hideJournal":true,"highlight":"","institution":"","isAcceptedByJournal":false,"isAuthorSuppliedPdf":true,"isDeskRejected":"","isHiddenFromSearch":false,"isInQc":false,"isInWorkflow":false,"isPdf":true,"isPdfUpToDate":true,"isWithdrawnOrRetracted":false,"journal":{"display":true,"email":"[email protected]","identity":"researchsquare","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":true,"externalIdentity":"","sideBox":"","snPcode":"","submissionUrl":"/submission","title":"Research Square","twitterHandle":"researchsquare","acdcEnabled":true,"dfaEnabled":false,"editorialSystem":"","reportingPortfolio":"","inReviewEnabled":false,"inReviewRevisionsEnabled":true},"keywords":"Optical signal processing, Intrusion detection systems, Machine learning, Deep learning, CNN, LSTM, Anomaly based detection, KDD Cup 99, NSL-KDD, CSE-CIC IDS 2018","lastPublishedDoi":"10.21203/rs.3.rs-8630088/v1","lastPublishedDoiUrl":"https://doi.org/10.21203/rs.3.rs-8630088/v1","license":{"name":"CC BY 4.0","url":"https://creativecommons.org/licenses/by/4.0/"},"manuscriptAbstract":"\u003cp\u003eOptical signal processing plays a crucial role in Intrusion Detection System (IDS) for optical networks, as optical techniques provide more bandwidth and more security for the communication channel. It involves various techniques and operations performed on the optical signals to extract relevant information and identify potential security threats or intrusions. The IDS is a very important component which detect unauthorized access to computer networks and systems. IDS analyzes network traffic and system logs to identify potential security threats and alert system administrators to take appropriate action. There are different types of IDS, including signature-based, anomaly-based, and hybrid approaches. IDS uses a variety of detection methods to identify potential security threats, including statistical analysis, machine learning, and rule-based methods. However, IDS faces several challenges, including the need to balance detection accuracy with false positives and false negatives while keeping up with the ever-changing threat landscape. There are an evaluation metrics, such as detection rate, false positive rate, and accuracy. In this paper, we use accuracy of the detection to evaluate the effectiveness of IDS. Data preprocessing and feature selection are also important to improve search capabilities in IDS. In general. Ongoing research in this area, including the use of deep learning models such as convolution neural network (CNN), long-short term memory (LSTM) and hybrid models with CIC-IDS 2018 dataset, will continue to improve IDS ability to detect and prevent security breaches. This research will enhance accuracy detection of the IDS.\u003c/p\u003e","manuscriptTitle":"Classification of Abnormal Patterns in Traffic Analysis Based on a Fusion Approach","msid":"","msnumber":"","nonDraftVersions":[{"code":1,"date":"2026-02-24 07:52:32","doi":"10.21203/rs.3.rs-8630088/v1","editorialEvents":[{"type":"communityComments","content":0}],"status":"published","journal":{"display":true,"email":"[email protected]","identity":"researchsquare","isNatureJournal":false,"hasQc":true,"allowDirectSubmit":true,"externalIdentity":"","sideBox":"","snPcode":"","submissionUrl":"/submission","title":"Research Square","twitterHandle":"researchsquare","acdcEnabled":true,"dfaEnabled":false,"editorialSystem":"","reportingPortfolio":"","inReviewEnabled":false,"inReviewRevisionsEnabled":true}}],"origin":"","ownerIdentity":"7a870e82-c22c-462c-a342-f7a4a3a53ad7","owner":[],"postedDate":"February 24th, 2026","published":true,"recentEditorialEvents":[],"rejectedJournal":[],"revision":"","amendment":"","status":"posted","subjectAreas":[{"id":63345195,"name":"Biological sciences/Computational biology and bioinformatics"},{"id":63345196,"name":"Physical sciences/Engineering"},{"id":63345197,"name":"Physical sciences/Mathematics and computing"}],"tags":[],"updatedAt":"2026-03-05T10:12:30+00:00","versionOfRecord":[],"versionCreatedAt":"2026-02-24 07:52:32","video":"","vorDoi":"","vorDoiUrl":"","workflowStages":[]},"version":"v1","identity":"rs-8630088","journalConfig":"researchsquare"},"__N_SSP":true},"page":"/article/[identity]/[[...version]]","query":{"redirect":"/article/rs-8630088","identity":"rs-8630088","version":["v1"]},"buildId":"XKTyCvWXoU3ODBz1xrDgd","isFallback":false,"isExperimentalCompile":false,"dynamicIds":[84888],"gssp":true,"scriptLoader":[]}

Text is read by the "Ask this paper" AI Q&A widget below. Extraction quality varies by source — PMC NXML preserves structure cleanly, OA-HTML may include some navigation residue, and OA-PDF can have broken hyphenation. The publisher copy (via DOI) is the canonical version.

My notes (saved in your browser only)

Ask this paper AI returns verbatim quotes from the full text · source: preprint-html

Answers must be backed by verbatim quotes from this paper's full text. Hallucinated quotes are dropped automatically; if no verbatim passage answers the question, we say so. How this works

Citation neighborhood (no data yet)

We don't have any in-corpus citations linked to this paper yet. This is a recent paper (2026) — citers typically take a year or two to land, and the OpenAlex reference graph may still be filling in.

Source provenance

europepmc
last seen: 2026-05-20T01:45:00.602351+00:00
unpaywall
last seen: 2026-05-20T11:00:21.680559+00:00
License: CC-BY-4.0