@article{Al-Khatib2025, 
author = {Ra'ed M. Al-Khatib and Laila Heilat and Wala Qudah and Salem Alhatamleh and Asef Al-Khateeb},
title = {A novel improved deep learning model based on Bi-LSTM algorithm for intrusion detection in WSN},
year = {2025},
journal = {Networks and Heterogeneous Media},
volume = {20},
number = {2},
pages = {532-565},
keywords = {artificial intelligence, deep learning, wireless sensor network (WSN), intrusion detection, recurrent neural network (RNN), bidirectional long-short-term memory (Bi-LSTM)},
url = {https://www.sciopen.com/article/10.3934/nhm.2025024},
doi = {10.3934/nhm.2025024},
abstract = {The widespread range of wireless sensor networks (WSNs) has recently increased the possibility of attacks. In the cyber-physical system, WSN is considered a significant component, consisting of several hops that self-organize from moving or stationary sensors. Attackers perform abusive operations to enter, seize, and control the WSN network. In order to stop such attacks on sensor networks in the future, the network traffic data was evaluated, dangerous traffic activity was monitored, and nodes were investigated. In this study, we proposed a new improved bidirectional long-short-term memory (Bi-LSTM) algorithm, which is an enhancement of the LSTM model, to address the issue of intrusion detection in WSN systems, which has four steps. In a preprocessing step, the initial raw data collected from the network can be used to train learning models. Then, the analyzed data was classified according to the types of network traffic, and the attacks were detected in the second step. In the next step, our proposed improved learning models showed results with higher accuracy than traditional detection methods. This study assessed the performance of deep learning algorithms on two different datasets, primarily the 'WSN-DS' and 'KDDCup99' datasets, which were chosen to identify and classify different DoS attacks. The primary common WSN attacks were flooding, scheduling, blackhole, and grayhole, which were included in the data set 'WSN-DS', and (denial-of-service (DoS), user-2-root (U2R), root-2-local (R2L), and Probe) were in the 'KDDCup99' dataset. Our newly improved proposed model based on Bi-LSTM achieved an accuracy of 100% on the 'WSN-DS' dataset and 99.9% on the 'KDDCup99' dataset.}
}