MULTI-LF: A Continuous Learning Framework for Real-Time Malicious Traffic Detection in Multi-Environment Networks

arXiv — cs.LGWednesday, November 12, 2025 at 5:00:00 AM
The introduction of the Multi-LF framework marks a pivotal advancement in the detection of malicious traffic across multi-environment networks, which integrate various sources such as IoT devices and traditional computing systems. Traditional machine learning methods often falter in these heterogeneous environments, failing to generalize effectively. In response, Multi-LF utilizes a Docker-NS3-based testbed to create the M-En Dataset, which combines live traffic flows with curated public PCAP traces, ensuring comprehensive coverage of both benign and malicious behaviors. This innovative framework employs a dual-model approach, featuring a lightweight model for rapid detection and a deeper model for high-confidence refinement, achieving an accuracy of 0.999 and requiring human intervention only 0.0026 percent of the time. This efficiency and accuracy position Multi-LF as a crucial tool in the ongoing battle against cyber threats, particularly as the complexity of network environments co…
— via World Pulse Now AI Editorial System

Was this article worth reading? Share it

Recommended Readings
Adaptive Intrusion Detection for Evolving RPL IoT Attacks Using Incremental Learning
PositiveArtificial Intelligence
The paper discusses the vulnerabilities of the Routing Protocol for Low-Power and Lossy Networks (RPL), which is widely used in resource-constrained IoT systems. It highlights various routing-layer attacks, including hello flood, decreased rank, and version number manipulation. Traditional countermeasures struggle against new or zero-day attacks without complete retraining. The authors propose incremental learning as an adaptive strategy for intrusion detection in RPL networks, evaluating five model families to enhance detection performance against evolving threats.