Submit

Login Login

Register Register

Home / Journals / CMC / Online First / doi:10.32604/cmc.2026.082264
Journal Menu
Special Issues
Table of Content

All issues

Online First

2026

2025

2024

2023

2022

2021

2020

2019

2018

2017

2016

2015

2014

2013

2012

2011

2010

2009

2008

2007

2006

2005

2004

Open Access

ARTICLE

Machine Learning-Based Network Traffic Anomaly Detection in Smart Learning Environments

Ahmad Almufarreh1, Rogaia Hassan Osman Hassan2,3, Ashfaq Ahmad4, Muhammad Arshad2,5,*, Choo Wou Onn6
1 Deanship of Human Resources and Technology, Jazan University, Jazan, Saudi Arabia
2 UNICAF, Larnaca, Cyprus
3 University of East London, London, UK
4 Faculty of Basic Sciences, Lahore Garrison University, Lahore, Pakistan
5 School of Informatics and Cybersecurity, Technological University Dublin, Dublin, Ireland
6 Faculty of Data Science and Information Technology, INTI International University, Putra Nilai, Nilai, Malaysia
* Corresponding Author: Muhammad Arshad. Email: email

Computers, Materials & Continua https://doi.org/10.32604/cmc.2026.082264

Received 12 March 2026; Accepted 22 April 2026; Published online 14 May 2026

Abstract

The explosive increase in connectivity has multiplied the volume and speed of network traffic, putting the world at greater risk from sophisticated and emerging cyber-attacks. Smart learning environments, which rely on cloud-based learning management systems, virtual classrooms, and interconnected educational devices, generate large volumes of dynamic network traffic that must be continuously monitored to protect sensitive academic data and ensure uninterrupted learning services. In this study, three supervised machine learning classifiers, namely Random Forest, Logistic Regression, and k-Nearest Neighbours (kNN), are designed and evaluated for anomaly detection using the UNSW-NB15 benchmark. Models are trained and evaluated using a comprehensive set of metrics, including accuracy, precision, recall, F1-score, ROC-AUC, and confusion matrix analysis, following rigorous preprocessing and stratified cross-validation. Consistent with observed patterns in the dataset, Random Forest achieves near-perfect detection accuracy with very low false alarm rates, kNN performs well with moderate error rates, and Logistic Regression shows comparatively lower performance. This study develops a reproducible anomaly detection pipeline and provides a comparative evaluation that highlights the conditions under which ensemble and instance-based models outperform linear approaches in high-dimensional network traffic analysis. These findings align with existing evidence highlighting the effectiveness of data-centric machine learning pipelines in improving decision-making in high-volume digital environments. In the context of smart learning environments, these models can support the development of intelligent intrusion detection systems capable of monitoring educational network infrastructures and identifying abnormal traffic patterns associated with cyber threats targeting digital learning platforms. The findings provide practical guidance for selecting machine learning models in intrusion detection systems where detection performance must be balanced with computational efficiency and deployment constraints.

Keywords

Anomaly detection; resilient infrastructure; intrusion detection; education quality; cybercrime

  • 161

    View

  • 24

    Download

  • 0

    Like

Related articles
Copyright© 2026 Tech Science Press
© 1997-2026 TSP (Henderson, USA) unless otherwise stated

Share Link