Work place: Network Engineering and Security Dept., Jordan University of Science and Technology, Irbid, Jordan
E-mail: alshurman@just.edu.jo
Website: https://orcid.org/0000-0001-8764-7947
Research Interests: Network Security, Computer Networking, Cybersecurity
Biography
Mohammad M. Al-Shurman received the B.Sc. degree in electrical engineering from the Jordan University of Science and Technology, Irbid, Jordan, in 2000, and the M.Sc. and Ph.D. degrees in computer engineering from the University of Alabama in Huntsville, Huntsville, AL, USA, in 2003 and 2006, respectively. He is currently a Faculty Member with the Department of Network Engineering and Security at the Jordan University of Science and Technology, Irbid, Jordan. His research interests include computer networks, wireless and mobile ad hoc networks, network security, and cybersecurity. He has authored and co-authored numerous peer-reviewed publications in these areas.
By Faruq A. Al-Omari Alaa Y. Mhesin Mohammad M. Al-Shurman
DOI: https://doi.org/10.5815/ijwmt.2026.04.07, Pub. Date: 8 Aug. 2026
Intrusion Detection Systems (IDS) are essential for protecting modern networks against unauthorized access and evolving cyber threats. A persistent challenge in IDS design is the high dimensionality of network traffic data, which complicates the identification of the most relevant features for effective detection. This study introduces a modified multi-stage ensemble feature selection (MMSE-FS) framework that incorporates algorithmic adaptations of Random Forest (RF), Principal Component Analysis (PCA), and KBest methods. These enhanced variants are integrated through an intelligent ensemble voting mechanism, followed by a refinement stage that further strengthens feature relevance and discriminative capability.
To validate the proposed framework, experiments were conducted on the UNSW-NB15 benchmark dataset, reducing 49 initial features to 18 critical ones. The dataset was partitioned into 70% training and 30% testing subsets, and classification performance was evaluated using five machine learning classifiers (DT, RF, GB, KNN, and LR). Key hyperparameters of the proposed MMSE-FS framework (α = 0.75, λ = 1.0, and B = 50 bootstrap repetitions) were determined through 5-fold cross-validation on the training partition and subsequently fixed for all experiments. The proposed framework achieved detection accuracies ranging from 99.03% to 99.83% for binary classification and from 94.20% to 96.60% for multi-class classification.
Compared with conventional feature selection methods, the proposed MMSE-FS framework substantially reduced the feature space while maintaining high detection performance across both binary and multi-class intrusion detection tasks. The reported results were obtained using the UNSW-NB15 dataset following the adopted preprocessing strategy, which excluded extremely underrepresented attack classes.
Subscribe to receive issue release notifications and newsletters from MECS Press journals