An Intelligent CNN–LSTM Hybrid Deep Learning-Based Intrusion Detection Framework for Zero-Day Attack Detection in Network Traffic

Authors

  • Lubna Gul Department of Computer Software Engineering, University of Engineering and Technology, Mardan, Pakistan. Author
  • Ibraheem Salim Department of Cyber Security, NASTP Institute of Information Technology, Lahore, Pakistan Author
  • Muhammad Imran Master’s Program in Cybersecurity, NSA CAE-Cyber Defense Designated Program, Tandon School of Engineering, New York University, Brooklyn, New York, USA. Author
  • Muhammad Kashif Majeed Faculty of Engineering Science and Technology, Iqra University, Karachi, Pakistan Author
  • Ashraf Zia  Department of Computer Science, Abdul Wali Khan University Mardan, Mardan, KP, Pakistan. Author

DOI:

https://doi.org/10.66021/

Keywords:

Deep Learning, Intrusion Detection System, CNN–LSTM Hybrid Architecture, Zero-Day Attack Detection, Cybersecurity, Network Traffic Analysis, Anomaly Detection, Artificial Intelligence-Based Security Systems

Abstract

The rapid growth of digital communication technologies and internet-based services has significantly increased the vulnerability of modern network infrastructures to sophisticated cyber threats and zero-day attacks. Traditional Intrusion Detection Systems often struggle to accurately identify unknown and evolving attack patterns due to their dependency on predefined signatures and handcrafted features. To address these limitations, this study presents a novel Deep Learning-based Intrusion Detection System utilizing a hybrid CNN–LSTM architecture for efficient zero-day attack identification in network traffic environments. The proposed framework integrates the powerful spatial feature extraction capability of Convolutional Neural Networks with the sequential learning and temporal dependency analysis strengths of Long Short-Term Memory networks. The system is designed to automatically learn complex traffic patterns, detect anomalous behaviors, and classify malicious activities with high precision and minimal false alarm rates. Extensive preprocessing techniques, including feature normalization, noise reduction, and traffic balancing, are applied to improve data quality and model performance. The proposed hybrid architecture is evaluated using benchmark cybersecurity datasets to analyze detection efficiency, classification accuracy, precision, recall, F1-score, and computational performance. Experimental findings demonstrate that the CNN–LSTM hybrid model significantly outperforms traditional machine learning approaches and standalone deep learning models in identifying unknown and zero-day cyber threats. The results indicate that the proposed framework achieves enhanced detection accuracy, faster response capability, improved generalization, and better adaptability to dynamic network conditions. Furthermore, the model provides effective real-time intrusion monitoring and strengthens proactive cyber defense mechanisms for modern intelligent networks. This research contributes to the advancement of AI-driven cybersecurity solutions by offering a scalable, robust, and efficient deep learning framework capable of improving network security resilience against emerging cyber attacks and sophisticated intrusion attempts in next-generation communication systems.

Downloads

Download data is not yet available.

Author Biographies

  • Ibraheem Salim, Department of Cyber Security, NASTP Institute of Information Technology, Lahore, Pakistan

     

     

     

  • Muhammad Imran, Master’s Program in Cybersecurity, NSA CAE-Cyber Defense Designated Program, Tandon School of Engineering, New York University, Brooklyn, New York, USA.

     

     

  • Muhammad Kashif Majeed, Faculty of Engineering Science and Technology, Iqra University, Karachi, Pakistan

     

     

Downloads

Published

2026-05-25

How to Cite

An Intelligent CNN–LSTM Hybrid Deep Learning-Based Intrusion Detection Framework for Zero-Day Attack Detection in Network Traffic. (2026). Annual Methodological Archive Research Review, 4(5), 116-137. https://doi.org/10.66021/

Similar Articles

1-10 of 1767

You may also start an advanced similarity search for this article.

Most read articles by the same author(s)

1 2 3 > >>