Protocol-Aware Traffic Representation with Conditional Diffusion Transformer for Imbalanced Network Intrusion Detection
Network intrusion detection systems face severe class imbalance in real-world traffic, where rare attack types such as Shellcode, Worms, and Infiltration are vastly outnumbered by benign flows, causing deep learning models to perform poorly on minority classes. Existing data augmentation methods including SMOTE, VAE, a...