Deep Learning-Based Intrusion Detection: A CNN-LSTM-Transformer Approach for Enhanced Network Security

作者：Dongmei Liu, Xiaoyun Zheng, Pengfei Wang, Jin Chuan, Yanan Lv, Bingxu Zhou, Xin Zan, Weiyong Jiao · 年份：2025 · DOI：10.1145/3759179.3760451 · 被引用次数：6 · 研究领域：Network Security and Intrusion Detection、Internet Traffic Analysis and Secure E-voting、Anomaly Detection Techniques and Applications

This research proposes a hybrid deep learning model for network intrusion detection, combining Convolutional Neural Networks (CNNs), Long Short-Term Memory (LSTM) networks, and Transformers to address the limitations of single-model architecture in capturing the multi-dimensional characteristics of network traffic. The CNN module extracts spatial features by identifying local patterns in traffic feature matrices, such as correlations between protocol types, port numbers, and packet lengths; the LSTM network leverages its gating mechanism to capture short-term temporal dependencies, effectively recognizing time-series patterns in sequential traffic data like the periodicity of DDoS attack flows; the Transformer, through its multi-head self-attention mechanism, models long-range sequence dependencies, enabling the detection of complex attack patterns with scattered or delayed behavioral clues across extended time windows. The model is trained and evaluated using the CICIDS2017 dataset, which includes diverse attack types (e.g., DoS, DDoS, web attacks, botnet activities) and normal traffic, ensuring comprehensive validation. Experimental results show that the proposed model outperforms traditional machine learning models (e.g., SVM, Random Forest) and single deep learning models (e.g., standalone CNN or LSTM) in key metrics such as accuracy, precision, and recall, with particularly strong performance in detecting sophisticated attacks like zero-day threats and multi-stage intrus...