EFFICIENT STATIC DISTRIBUTION AWARE TWO CLUSTER INTRUSION DETECTION SYSTEM FOR BINARY CLASSIFICATION USING DBF CLUSTERING AND PSO FEATURE SELECTION WITH MACHINE LEARNING MODELS

Authors:

Hasan Abdulrazzaq Jawad,Shurooq M Abdulkhudhur,Rand A. Atta,Zahraa Ibrahim Abed,

DOI NO:

https://doi.org/10.26782/jmcms.2026.04.00006

Keywords:

Network Security Intrusion Detection System,Particle Swarm Optimization,Distributional Boosting Forest,Machine Learning,Cyberattack Detection,Real-Time Threat Monitoring,

Abstract

Network protection relies on machine learning-based systems that detect intrusions. The detection systems lose their effectiveness because they use multiple duplicate features, and their performance depends on the specific network traffic patterns and system operational requirements, which prevent real-time functioning. The research presents a PSO-DBF intrusion detection framework, which begins with Distributional Boosting Forest (DBF) as its first step to create two groups (C1 and C2) that display similar probabilistic characteristics through network traffic clustering. The research team uses Particle Swarm Optimization (PSO) to process each cluster when they complete their clustering process because the method helps them find the most valuable network attributes, which decrease feature duplication while enhancing the ability to distinguish different features. K-Nearest Neighbors (KNN) provides the best performance when conventional machine learning classifiers use optimized feature subsets for intrusion detection. The proposed framework demonstrated its efficiency through experiments that utilized recognized IDS datasets. PSO removed almost 50% of the initial features while keeping 18 features from NSL-KDD and 21 features from UNSW-NB15, achieving reduction rates of approximately 56 percent and 57 percent. The proposed PSO–DBF with KNN framework achieved 99.36% accuracy on NSL-KDD and 99.89% accuracy on UNSW-NB15, exceeding the performance of Support Vector Machine (SVM), Naive Bayes (NB), Quadratic Discriminant Analysis (QDA), deep neural models, and recent hybrid metaheuristic-based IDS frameworks. The main improvement of the proposed method comes from its ability to reduce detection times, which drop from 0.44 milliseconds to 0.29 milliseconds. The DBF-PSO framework achieves its optimal performance for intrusion detection in enterprise cloud and edge-network security environments because of its detection accuracy and energy efficiency.

Refference:

I. Al-Alyawy, M., Hinckley, S., Mezher, M. H., Husain, S. O., & Al-Fatlawi, A. H. (2024, November). Thermodynamics-based passive house. In AIP Conference Proceedings (Vol. 3229, No. 1, p. 070003). AIP Publishing LLC.
II. Albu-Salih, A. T., Jumaah, M. Y., Al-Fatlawi, A. H., & Najm, H. (2025). Efficient Hybrid Feature Engineering and Supervised Learning Approach for Network Traffic Classification in Intrusion Detection Systems. International Journal of Intelligent Engineering & Systems, 18(6).
III. Aighuraibawi, A. H. B., Manickam, S., Alyasseri, Z. A. A., Abdullah, R., Khallel, A., Al Ogaili, R. R. N., … & Yahya, A. E. (2024). Hybridizing flower pollination algorithm with particle swarm optimization for enhancing the performance of IPv6 intrusion detection system. Alexandria Engineering Journal, 104, 504-514.
IV. Alzamili, S. L., Baawi, S. S., Kadhim, M. N., Al-Shammary, D., & Ibaida, A. (2025). Efficient feature selection based on Ruzicka similarity for EEG diagnosis. International Journal of Information Technology, 1-15.
V. Abdulkhudhur, S. M., Abboud, S. M., Najim, A. H., Kadhim, M. N., & Ahmed, A. A. (2025). A Hybrid Deep Belief Cascade-Neuro Fuzzy Approach for Real-Time Health Anomaly Detection in 5G-Enabled IoT Medical Networks. International Journal of Intelligent Engineering & Systems, 18(5).
VI. Alrammahi, A. A. H., Sari, F. A. O., Muhammad, Z. A., Kadhim, M. N., Al-Shammary, D., & Ibaida, A. (2025). Enhancing spam detection with advanced feature extraction and unsupervised clustering. International Journal of Information Technology, 1-11.
VII. Alzamili, S. L., Baawi, S. S., Kadhim, M. N., Al-Shammary, D., Ibaida, A., & Ahmed, K. (2026). Ruzicka Similarity-based Brain EEG Clustering for Improved Intelligent Epilepsy Diagnosis. Computer Methods and Programs in Biomedicine Update, 100229.
VIII. Bosso, L., Smeraldo, S., Rapuzzi, P., Sama, G., Garonna, A. P., & Russo, D. (2018). Nature protection areas of Europe are insufficient to preserve the threatened beetle Rosalia alpina (Coleoptera: Cerambycidae): evidence from species distribution models and conservation gap analysis. Ecological Entomology, 43(2), 192-203.
IX. Baawi, S. S., Kadhim, M. N., & Al-Shammary, D. (2025). Efficient clustering approach based on Gower distance for high-dimensional medical datasets. Cluster Computing, 28(12), 756.
X. Baawi, S. S., Kadhim, M. N., & Al-Shammary, D. (2025). Efficient feature selection based on Gower distance for breast cancer diagnosis. Journal of Electronic Science and Technology, 23(2), 100315.
XI. Dash, N., Chakravarty, S., Rath, A. K., Giri, N. C., AboRas, K. M., & Gowtham, N. (2025). An optimized LSTM-based deep learning model for anomaly network intrusion detection. Scientific Reports, 15(1), 1554.
XII. Emirmahmuto?lu, E., & Atay, Y. (2025). A feature selection-driven machine learning framework for anomaly-based intrusion detection systems. Peer-to-Peer Networking and Applications, 18(3), 1-28.
XIII. Hammood, D. A., Alzayadi, L. H. M., Mahmoud, M. S., & Abd Zaid, M. M. (2025). Efficient Hybrid Intrusion Detection Approach based on BPR-GWO for Network Traffic Classification and Improved Network Security. International Journal of Intelligent Engineering & Systems, 18(8).
XIV. Hammood, D. A. (2024, October). A hybrid system based on machine learning and PSO for network intrusion detection. In AIP Conference Proceedings (Vol. 3232, No. 1, p. 020041). AIP Publishing LLC.
XV. Hamad, A. R., Baraa Alsabti, S. M., Najim, A. H., & Kadhim, M. N. (2025). A Hybrid Feature Selection and Machine Learning Approach for Parkinson's Disease Detection from Voice Signals in IoT-Enabled 6G Networks. International Journal of Intelligent Engineering & Systems, 18(5).
XVI. Hashim Albohayah, Z. H., Abed, S. B., Mahdi, A. J., Kadhim, M. N., & Najim, A. H. (2025). Ch-PSO: A Novel Embedded Method based on PSO and Chebyshev Distance for Enhanced Epileptic Seizure Classification Using EEG Brain Signals. International Journal of Intelligent Engineering & Systems, 18(5).
XVII. Jabier, E., Marhoon, A. F., Aldair, A. A., Kadhim, M. N., Al-Shammary, D., & Ibaida, A. (2025). Efficient Kulczynski EEG feature selection for autism spectrum disorder diagnosis over fog and cloud computing. International Journal of Information Technology, 1-17.
XVIII. Kurdi, W. H. M., Rassool, H. A., & Al-fatlawi, A. H. (2021). Evaluation patterns and algorithm for cancer identifications using dynamic clustering. Periodicals of Engineering and Natural Sciences (PEN), 9(2), 462-470.
XIX. Kadhim, M. N., Mutlag, A. H., Hammood, D. A., & Ismail, N. B. H. (2025). Identification of Vehicle Logos in Deep Learning: A Comprehensive Survey. Journal of Techniques, 7(1), 37-47.
XX. Latif, S., Boulila, W., Koubaa, A., Zou, Z., & Ahmad, J. (2024). Dtl-ids: An optimized intrusion detection framework using deep transfer learning and genetic algorithm. Journal of Network and Computer Applications, 221, 103784.
XXI. Malik, R. Q., Alsharfa, R. M., Mohammed, B. K., Al-Fatlawi, A. H., Abd Al-Ameer, M. S., & Najm, H. (2025). A Novel Taneja Distance-based Classifier with PSO-Optimized Feature Selection for Efficient 5G Network Slicing. International Journal of Intelligent Engineering & Systems, 18(6).
XXII. M. Tavallaee, E. Bagheri, W. Lu, and A. A. Ghorbani, "A detailed analysis of the KDD CUP 99 data set", presented at the 2009 IEEE symposium on computational intelligence for security and defense applications, Ieee, pp. 1–6, 2009.
XXIII. Mohammed, M. H., Kadhim, M. N., Al-Shammary, D., & Ibaida, A. (2025). Novel Voice Signal Segmentation Based on Clark Distance to Improve Intelligent Parkinson Disease Detection. Journal of Voice.
XXIV. Mohammed, M. H., Kadhim, M. N., Al-Shammary, D., & Ibaida, A. (2025). EEG-Based Emotion Detection Using Roberts Similarity and PSO Feature Selection. IEEE Access.
XXV. N. Moustafa and J. Slay, "UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set) ", presented at the 2015 military communications and information systems conference (MilCIS), IEEE, pp. 1–6, 2015.
XXVI. Rfys, R. R., Al-Shammary, D., Kadhim, M. N., & Ibaida, A. (2026). Novel ECG Signal Classification based on Minkowski Distance to Enhance Intelligent Arrhythmia Detection Systems. Smart Health, 100645.
XXVII. Raghunath, M. P., Deshmukh, S., Chaudhari, P., Bangare, S. L., Kasat, K., Awasthy, M., … & Waghulde, R. R. (2025). PCA and PSO based optimized support vector machine for efficient intrusion detection in internet of things. Measurement: Sensors, 37, 101806.
XXVIII. Umar, M. A., Chen, Z., Shuaib, K., & Liu, Y. (2025). Effects of feature selection and normalization on network intrusion detection. Data Science and Management, 8(1), 23-39.
XXIX. W. H. Madhloom Kurdi, I. A. Alzuabidi, A. H. Najim, M. N. Kadhim, and A. A. Ahmed, "Efficient Two-Stage Intrusion Detection System Based on Hybrid Feature Selection Techniques and Machine Learning Classifiers", International Journal of Intelligent Engineering & Systems, Vol. 18, No. 3, 2025.
XXX. Xia, Z., He, S., Liu, C., Liu, Y., Yang, X., & Bu, H. (2024). PSO-GA Hyperparameter Optimized ResNet-BiGRU Based Intrusion Detection Method. IEEE Access.
XXXI. Y?lmaz, A. A. (2025). A novel deep learning-based framework with particle swarm optimisation for intrusion detection in computer networks. PloS one, 20(2), e0316253.
XXXII. Y. S. Mezaal, “New compact microstrip patch antennas: Design and simulation results,” Indian J. Sci. Technol., vol. 9, no. 12, 2016. 10.17485/ijst/2016/v9i12/85950

View Download