A Predictive Neural Network Architecture for Early Detection of Low-Rate Cyberattacks

Computer Science > Cryptography and Security [Submitted on 17 Jun 2026] A Predictive Neural Network Architecture for Early Detection of Low-Rate Cyberattacks Mert Nakıp Low-Rate Denial of Service (LDoS) attacks pose a significant challenge to IoT networks due to their subtle and prolonged nature, often evading traditional intrusion detection systems. This paper presents IDQS (Intrusion Detection via QoS Prediction), a lightweight and proactive framework for early LDoS attack detection. IDQS integrates two new key components: (i) RTP-QoS, a Recurrent Trend Predictive Neural Network that learns and forecasts future Quality of Service (QoS) based on historical traffic patterns, and (ii) PDM, a Pairwise Decision Model that evaluates discrepancies between predicted and actual QoS to identify potential attacks. Evaluated on the public SDN-SlowRate-DDoS and CIC-IDS2017 datasets, IDQS respectively achieves over 79% and 91% detection accuracy across most attack scenarios with high recall and low false negatives, while maintaining an end-to-end inference time of just 0.28 seconds. The results demonstrate the effectiveness and efficiency of IDQS for real-time deployment in resource-constrained IoT environments. Subjects: Cryptography and Security (cs.CR) Cite as: arXiv:2606.18771 [cs.CR]   (or arXiv:2606.18771v1 [cs.CR] for this version)   https://doi.org/10.48550/arXiv.2606.18771 Focus to learn more Journal reference: Nakıp, M. (2026). A predictive neural network architecture for early detection of low-rate cyberattacks. Knowledge-Based Systems, 343, 115995 Related DOI: https://doi.org/10.1016/j.knosys.2026.115995 Focus to learn more Submission history From: Mert Nakıp Dr. [view email] [v1] Wed, 17 Jun 2026 07:30:53 UTC (2,156 KB) Access Paper: HTML (experimental) view license Current browse context: cs.CR < prev   |   next > new | recent | 2026-06 Change to browse by: cs References & Citations NASA ADS Google Scholar Semantic Scholar Export BibTeX Citation Bookmark Bibliographic Tools Bibliographic and Citation Tools Bibliographic Explorer Toggle Bibliographic Explorer (What is the Explorer?) Connected Papers Toggle Connected Papers (What is Connected Papers?) Litmaps Toggle Litmaps (What is Litmaps?) scite.ai Toggle scite Smart Citations (What are Smart Citations?) Code, Data, Media Demos Related Papers About arXivLabs Which authors of this paper are endorsers? | Disable MathJax (What is MathJax?)