Open access

Adaptive intrusion detection system for cloud security using deep learning

Unik B. Lokhande Kavita Sonawane

Jul 2026 · Journal of Cloud Computing · Vol 15 · 0 citations · 82 references

TL;DR

The findings confirm that the proposed IDSaaS framework provides an efficient, scalable, and adaptive solution for real-time cloud intrusion detection and significantly enhances the reliability and resilience of modern cloud and industrial cybersecurity infrastructures.

Abstract

Cloud computing environments are increasingly vulnerable to sophisticated cyber threats due to the rapid growth of cloud-native infrastructures, high-volume network traffic, and evolving attack strategies such as zero-day exploits, adversarial attacks, and polymorphic malware. Traditional intrusion detection systems often struggle to maintain high detection accuracy, scalability, adversarial robustness, and real-time processing capability in dynamic cloud environments. To address these challenges, this study proposes an adaptive Intrusion Detection System-as-a-Service (IDSaaS) framework using a Modified Attention-Gate based BiLSTM-GRU architecture integrated with GAN-assisted synthetic anomaly generation. The proposed framework combines Bidirectional Long Short-Term Memory networks for temporal dependency learning, Gated Recurrent Units for computational efficiency, a custom attention mechanism for dynamic feature prioritization, a modified recurring gate structure for optimized information retention, and a Revamping Input Sequence Weighing Structure (RISWS) loss function for improved anomaly classification performance. Experiments were conducted using the CICIDS-2018, UNSW-NB15, SCAPY-based, and SCADANet datasets within an AWS cloud deployment environment. The proposed model achieved strong intrusion detection performance with 97.91% multi-class detection accuracy, 98.67% precision, 97.93% recall, and 98.18% F1-score while maintaining low inference latency and high throughput suitable for real-time deployment. Additional evaluation on the SCADANet industrial cybersecurity dataset achieved 99.69% test accuracy, further validating the adaptability of the framework across heterogeneous cloud and industrial network environments. Throughput analysis demonstrated stable processing capability of approximately 48,000 packets per second and 12,500 flows per second under high traffic conditions. The findings confirm that the proposed IDSaaS framework provides an efficient, scalable, and adaptive solution for real-time cloud intrusion detection and significantly enhances the reliability and resilience of modern cloud and industrial cybersecurity infrastructures.

DOI Semantic Scholar

Read PDF

Similar papers

Open access Aug 2026

A hybrid deep reinforcement learning framework for proactive cloud network intrusion detection using spatiotemporal feature learning

ShieldDRLNet is a hybrid deep reinforcement learning framework for proactive cloud-network intrusion detection that employs a convolutional neural network and a long short-term memory encoder to obtain a spatiotemporal traffic representation and uses a Double Deep Q-Network agent for adaptive sequential decision-making.

S. Venkatramulu, Anitha Patil, K. R. Pradeep et al. · Discover Computing · 0 citations

Conference Jul 2026

Enhancing Enterprise Cloud Security with Intelligent Intrusion Detection Systems: A Machine Learning Approach

With the widespread adoption of cloud computing, securing enterprise networks against cyber threats has become increasingly important. Cloud environments are highly dynamic and constantly changing, making them susceptible to sophisticated cyberattacks that traditional Intrusion Detection Systems (IDS) often fail to detect. This study focuses on Intelligent Intrusion Detection Systems (IIDS) and their critical role in strengthening cloud security. Unlike conventional signature-based IDS that rely on fixed attack patterns, IIDS employ advanced Machine Learning (ML) and Artificial Intelligence (AI) techniques including deep learning, decision trees, and ensemble models to identify both known and emerging threats with greater accuracy. The paper proposes an integrated framework that combines real-time anomaly detection with automated response capabilities for cloud networks. Key architectural elements of IIDS are examined, alongside major deployment challenges such as scalability, false-positive rates, and computational requirements. Additionally, practical case studies and performance evaluations illustrate how IIDS enhance threat detection by improving accuracy, adaptability, and efficiency. Finally, the paper outlines future research directions to further advance IIDS capabilities and address the evolving security needs of modern cloud infrastructures.

R. Velu · 2026 4th International Confe... · 0 citations

Conference Jul 2026

Generative Adversarial Networks for Hardening Cloud Intrusion Detection Systems

Cloud computing has emerged as an important core to the contemporary digital services, facilitating scalable, on demand provisioning of resources across a variety of application fields. Nevertheless, this multi-tenant and dynamic environment of clouds and the amplified attack surface make the detection of intrusions through reliable methods a consistent issue that cloud security systems struggle with. The proposed work is a Generative Adversarial Network (GAN)-based hardening framework of cloud intrusion detection systems, targeting better resilience to changing and low-rate cyberattacks. The methodology combines a conditional generator which is used to generate realistic cloud-specific attack traffic, a discriminator used to refine the adversarial traffic, as well as a co-trained intrusion classifier trained on both clean and synthetic data in a closed-loop way. The feature-aware regularization is introduced to maintain the statistical consistency of network traffic, and optimize the attack diversity. The proposed approach is proved to yield better results in comparison with signature-based, machine learning, deep learning, and adversarial ML-based IDS models by experimental assessment. Significant gains in the accuracy of identifying, the ability to recall, stability, and minimizing errors are also noticed with quantifiable increases observed in all evaluation measures. These findings represent the usefulness of adversarial data-driven learning to develop robust, adaptive, and future-ready cloud intrusion detection systems.

T. Divya, Sheik Saidhbi, S. Umarani et al. · 2026 International Conferenc... · 0 citations

Open access Jul 2026

From Signature to Attention: Transformer-Powered Intrusion Detection Systems for Cybersecurity

Experimental results demonstrate that the proposed model achieves high detection accuracy, strong discriminative capability, and low false alarm rates across both datasets, confirming its effectiveness and scalability for next-generation cybersecurity applications.

Arun Pandey, Ayush Kumar Agrawal, Abhinav Shukla et al. · Future Internet · 0 citations

Aug 2026

Cyber Security Intrusion Detection Based on Deep Learning

The Hybrid Autoencoder–TabTransformer framework provides an effective intrusion detection solution that demonstrates strong performance under the evaluated experimental conditions and comparative analysis with existing deep learning‐based intrusion detection approaches confirms the superior and balanced performance of the proposed method.

Rui Guo, Guangjun Wen · Transactions on Emerging Tel... · 0 citations

Open access 2026

A Multi-Layer Deep Learning Framework for Intelligent Cyber Attack Prevention

The findings demonstrate that the proposed multi-layer deep learning framework significantly improves cyberattack detection accuracy, reduces false-positive alerts, enhances real-time response capabilities, and strengthens proactive cybersecurity defense mechanisms.

Abimbola B. Owolabi · International journal of re... · 0 citations