Hybrid Anomaly Detection Using Vision Transformers and Convolutional Neural Networks

This paper proposes a hybrid anomaly detection model that integrates Vision Transformers(ViTs) and Convolutional Neural Networks(CNNs) for graph-based classification of network behaviors. ViTs capture global dependencies through self-attention, whereas CNNs extract localized patterns via convolutional kernels. By combining these complementary features, the model improves detection accuracy for tasks such as intrusion detection and phishing website identification. Evaluations on four benchmark datasets-CIC-IDS2017, Kaggle Phishing, UNSW-NB15, and CICIoT2023-yield accuracies of 99.92%, 99.91%, 100.0%, and 99.99%, respectively. Rather than relying on aggregated inputs, the proposed method leverages independent instance classification, thereby providing the flexibility required for real-time anomaly detection across diverse domains.

Authors

Institutions

Publication Details

Journal
International Journal of Software Engineering and Knowledge Engineering
Published
2026-03-13
DOI
https://doi.org/10.1142/s0218194026500233
Primary Topic
Anomaly Detection Techniques and Applications
Type
article
Field-Weighted Citation Impact
0.00
Controls
|||
ALL TIME
JAN
FEB
MAR
APR
MAY
JUN
JUL
AUG
SEP
OCT
article

Hybrid Anomaly Detection Using Vision Transformers and Convolutional Neural Networks

Peiying Yu, Yun-Rou Zhou, Yu-Wen Chou, Ming-Yang Su
International Journal of Software Engineering and Knowledge Engineering
Anomaly Detection Techniques and Applications
article

Hybrid Anomaly Detection Using Vision Transformers and Convolutional Neural Networks

Peiying Yu, Yun-Rou Zhou, Yu-Wen Chou, Ming-Yang Su
article en

Abstract

This paper proposes a hybrid anomaly detection model that integrates Vision Transformers(ViTs) and Convolutional Neural Networks(CNNs) for graph-based classification of network behaviors. ViTs capture global dependencies through self-attention, whereas CNNs extract localized patterns via convolutional kernels. By combining these complementary features, the model improves detection accuracy for tasks such as intrusion detection and phishing website identification. Evaluations on four benchmark datasets-CIC-IDS2017, Kaggle Phishing, UNSW-NB15, and CICIoT2023-yield accuracies of 99.92%, 99.91%, 100.0%, and 99.99%, respectively. Rather than relying on aggregated inputs, the proposed method leverages independent instance classification, thereby providing the flexibility required for real-time anomaly detection across diverse domains.

International Journal of Software Engineering and Knowledge Engineering
Twitter (United States) (US)
Openalex Percentile: Top 26%
Anomaly Detection Techniques and Applications
AI Navigator

Ask Laika to Summarize, Analyze, and Connect papers live on the map.

Summarize Papers & Methodologies

Extract key findings, datasets, and comparative methods across publications.

Benchmark Rankings & Visual Analytics

Rank top research institutions, authors, funders, topics, and journals by Field-Weighted Citation Impact (FWCI) and paper volume with instant charts.

Connect Distant Disciplines

Bridge topological clusters on the map to find hidden collaborative intersections.