Home / Current Issue / Paper 1714847
AI Enhanced Intrusion Detection and Prevention Systems (IDS/IPS)
Subject area: Science,Engineering and Technology · Area of research: Computer Science
DOI: https://doi.org/10.64388/IREV9I9-1714847
Abstract
The increasing sophistication of cyber threats necessitates a move beyond traditional signature-based intrusion detection systems (IDS) toward more dynamic, data-driven approaches. This paper provides a comprehensive review of machine learning (ML) techniques for real-time network anomaly detection, a critical capability for responding to fast-moving attacks. We analyzed key ML paradigms, including supervised, unsupervised and semi-supervised learning, highlighting their trade-offs, such as the need for labeled data versus the ability to detect zero-day threats. A comparative analysis of traditional ML models (e.g., Random Forest, SVM) and deep learning (DL) architectures (e.g., CNN, LSTM, Autoencoder) reveals that DL models consistently offer superior performance in handling the high-dimensional, complex nature of modern network traffic, albeit with greater computational demands. Finally, we discuss advanced architectures and future research directions, including federated learning for its privacy-preserving and scalable nature and Explainable AI (XAI) for fostering trust and providing actionable insights to human security analysts. The paper concludes that the future of network security lies in the development of hybrid, continuously adaptive systems that balance performance, privacy and interpretability to effectively counter evolving cyber threats.
Keywords
computer network, Anomaly Detection, Computer Networks Security, Networking
How to cite this paper
@article{1714847,
author = {Dr. Kismat Chhillar, Dr. Deepak Tomar, Prof. Saurabh Shrivastava},
title = {AI Enhanced Intrusion Detection and Prevention Systems (IDS/IPS)},
journal = {Iconic Research And Engineering Journals},
year = {2026},
volume = {9},
number = {9},
pages = {175-183},
issn = {2456-8880},
url = {https://www.irejournals.com/formatedpaper/1714847.pdf},
abstract = {The increasing sophistication of cyber threats necessitates a move beyond traditional signature-based intrusion detection systems (IDS) toward more dynamic, data-driven approaches. This paper provides a comprehensive review of machine learning (ML) techniques for real-time network anomaly detection, a critical capability for responding to fast-moving attacks. We analyzed key ML paradigms, including supervised, unsupervised and semi-supervised learning, highlighting their trade-offs, such as the need for labeled data versus the ability to detect zero-day threats. A comparative analysis of traditional ML models (e.g., Random Forest, SVM) and deep learning (DL) architectures (e.g., CNN, LSTM, Autoencoder) reveals that DL models consistently offer superior performance in handling the high-dimensional, complex nature of modern network traffic, albeit with greater computational demands. Finally, we discuss advanced architectures and future research directions, including federated learning for its privacy-preserving and scalable nature and Explainable AI (XAI) for fostering trust and providing actionable insights to human security analysts. The paper concludes that the future of network security lies in the development of hybrid, continuously adaptive systems that balance performance, privacy and interpretability to effectively counter evolving cyber threats.},
keywords = {computer network, Anomaly Detection, Computer Networks Security, Networking},
month = {March},
doi = {https://doi.org/10.64388/IREV9I9-1714847}
}