Distributed Denial of Service (DDoS) Attack Detection and Prevention in Educational Internet of Things (EIoT) Using a Hybrid Convolutional Neural Network (CNN) and Artificial Intelligence (AI) Approach
Main Article Content
Abstract
The widespread adoption of electronic learning has made contemporary educational environments increasingly dependent on interconnected devices, enabling smart classrooms and remote monitoring systems. However, this technological advancement has also introduced substantial cybersecurity risks due to the vulnerabilities of unprotected, heterogeneous, and networked devices. Distributed Denial of Service (DDoS) attacks are among the most disruptive threats, as they can interrupt online classes, data access, and other educational services by flooding educational networks with illegitimate traffic. Existing signature-based DDoS detection mechanisms remain inadequate for Internet of Things (IoT) environments because of the dynamic nature of modern attacks and the resource limitations of connected devices. To address this challenge, this study proposed a hybrid deep learning model integrating Convolutional Neural Networks (CNN), Long Short-Term Memory (LSTM) units, attention mechanisms, and incremental learning to enhance DDoS detection and prevention in Educational Internet of Things (EIoT) networks. The CNN layers were used to extract spatial features from network traffic, while the LSTM units captured temporal patterns and the attention mechanisms identified relevant traffic behavior. The incremental learning component employed geometric metrics to enable the model to capture previously unknown attack patterns. Experimental evaluation using the CIC-IoT2023 and BoT-IoT datasets showed that the proposed model achieved 99% detection accuracy for both known and emerging attacks in EIoT scenarios, supported by real-time traffic filtering and Software-Defined Networking (SDN)-based mitigation as prevention strategies. The model demonstrated strong adaptability, reduced false positives, and advanced AI-hybridized capabilities for DDoS detection and prevention in EIoT environments. These findings indicate that the proposed model is effective for detecting and preventing DDoS attacks against EIoT infrastructures and contributes to the development of adaptive cybersecurity solutions for technology-enhanced educational systems.

Citation Metrics:


Downloads
Article Details

Authors retain copyright and grant the journal right of first publication with the work simultaneously licensed under a Creative Commons Attribution-NonCommercial-ShareAlike 4.0 International License that allows others to share the work with an acknowledgement of the work's authorship and initial publication in this journal.
References
Ahmed Issa, A. S., & Albayrak, Z. (2023). DDoS attack intrusion detection system based on hybridization of CNN and LSTM. Acta Polytechnica Hungarica, 20(2), 105–123. https://doi.org/10.12700/APH.20.2.2023.2.6
Ain, N. U., Sardaraz, M., Tahir, M., Abo Elsoud, M. W., & Alourani, A. (2025). Securing IoT networks against DDoS attacks: A hybrid deep learning approach. Sensors, 25(5), Article 1346. https://doi.org/10.3390/s25051346
Alahmadi, A. A., Aljabri, M., Alhaidari, F., Alharthi, D. J., Rayani, G. E., Marghalani, L. A., Alotaibi, O. B., & Bajandouh, S. A. (2023). DDoS attack detection in IoT-based networks using machine learning models: A survey and research directions. Electronics, 12(14), Article 3103. https://doi.org/10.3390/electronics12143103
Al-Shurbaji, T. A., Anbar, M., Manickam, S., Hasbullah, I. H., Alfriehat, N., Alabsi, B. A., Alzighaibi, A. R., & Hashim, H. (2025). Deep learning-based intrusion detection system for detecting IoT botnet attacks: A review. IEEE Access, 13, 11792–11822. https://doi.org/10.1109/ACCESS.2025.3526711
Altunay, H. C., & Albayrak, Z. (2023). A hybrid CNN+LSTM-based intrusion detection system for industrial IoT networks. Engineering Science and Technology, an International Journal, 38, Article 101322. https://doi.org/10.1016/j.jestch.2022.101322
Elouardi, S., Motii, A., Jouhari, M., Amadou, A. N. H., & Hedabou, M. (2024). A survey on hybrid-CNN and LLMs for intrusion detection systems: Recent IoT datasets. IEEE Access, 12, 180009–180033. https://doi.org/10.1109/ACCESS.2024.3506604
Elshewey, A. M., Abbas, S., Osman, A. M., Aldakheel, E. A., & Fouad, Y. (2025). DDoS classification of network traffic in software defined networking SDN using a hybrid convolutional and gated recurrent neural network. Scientific Reports, 15, Article 29122. https://doi.org/10.1038/s41598-025-13754-1
Grok. (2026). About Grok. https://www.grok.com
Gupta, B. B., Gaurav, A., Arya, V., & Kim, P. (2023). A deep CNN-based framework for distributed denial of services (DDoS) attack detection in Internet of Things (IoT). In Proceedings of the 2023 International Conference on Research in Adaptive and Convergent Systems (pp. 1–6). Association for Computing Machinery. https://doi.org/10.1145/3599957.3606239
Khaleel, T. J., & Shiltagh, N. A. (2024). DDoS cyber-attacks detection-based hybrid CNN-LSTM. In Proceedings of Third International Conference on Computing and Communication Networks (Lecture Notes in Networks and Systems, Vol. 917, pp. 523–537). Springer. https://doi.org/10.1007/978-981-97-0892-5_41
Kumari, P., & Jain, A. K. (2023). A comprehensive study of DDoS attacks over IoT network and their countermeasures. Computers & Security, 127, Article 103096. https://doi.org/10.1016/j.cose.2023.103096
Manaa, M. E., Hussain, S. M., Alasadi, S. A., & Al-Khamees, H. A. A. (2024). DDoS attacks detection based on machine learning algorithms in IoT environments. Inteligencia Artificial, 27(74), 152–165. https://doi.org/10.4114/intartif.vol27iss74pp152-165
Mittal, M., Kumar, K., & Behal, S. (2023). Deep learning approaches for detecting DDoS attacks: A systematic review. Soft Computing, 27, 13039–13075. https://doi.org/10.1007/s00500-021-06608-1
Najar, A. A., & Naik, S. M. (2025). DDoS attack detection using CNN-BiLSTM with attention mechanism. Telematics and Informatics Reports, 18, Article 100211. https://doi.org/10.1016/j.teler.2025.100211
Nuhu, A., Mat Raffei, A. F., Ab Razak, M. F., & Ahmad, A. (2024). Distributed denial of service attack detection in IoT networks using deep learning and feature fusion: A review. Mesopotamian Journal of CyberSecurity, 4(1), 47–70. https://doi.org/10.58496/MJCS/2024/004
Phalaagae, P., Zungeru, A. M., Yahya, A., Sigweni, B., & Rajalakshmi, S. (2025). A hybrid CNN-LSTM model with attention mechanism for improved intrusion detection in wireless IoT sensor networks. IEEE Access, 13, 57322–57341. https://doi.org/10.1109/ACCESS.2025.3555861
Sathaporn, P., Krungseanmuang, W., Chaowalittawin, V., Benjangkaprasert, C., & Purahong, B. (2025). DDoS detection using a hybrid CNN–RNN model enhanced with multi-head attention for cloud infrastructure. Applied Sciences, 15(21), Article 11567. https://doi.org/10.3390/app152111567
Setitra, M. A., Fan, M., Agbley, B. L. Y., & Bensalem, Z. E. A. (2023). Optimized MLP-CNN model to enhance detecting DDoS attacks in SDN environment. Network, 3(4), 538–562. https://doi.org/10.3390/network3040024
Shaaban, A. R., Abd-Elwanis, E., & Hussein, M. (2019). DDoS attack detection and classification via convolutional neural network (CNN). In 2019 Ninth International Conference on Intelligent Computing and Information Systems (ICICIS) (pp. 233–238). IEEE. https://doi.org/10.1109/ICICIS46948.2019.9014826
Shieh, C.-S., Nguyen, T.-T., & Horng, M.-F. (2023). Detection of unknown DDoS attack using convolutional neural networks featuring geometrical metric. Mathematics, 11(9), Article 2145. https://doi.org/10.3390/math11092145
Shukla, P., Krishna, C. R., & Patil, N. V. (2024). EIoT-DDoS: Embedded classification approach for IoT traffic-based DDoS attacks. Cluster Computing, 27, 1471–1490. https://doi.org/10.1007/s10586-023-04027-5
Susilo, B., Muis, A., & Sari, R. F. (2025). Intelligent intrusion detection system against various attacks based on a hybrid deep learning algorithm. Sensors, 25(2), Article 580. https://doi.org/10.3390/s25020580














