Hybrid AI Model Catches Zero-Day DDoS Attacks in Smart Hospitals Without Exposing Patient Data

Smart hospitals are becoming some of the most connected places on Earth. Wearable ECG sensors, smartwatches, and bedside monitors stream heart rates, blood pressure readings, and sleep patterns to clinicians in real time, all orchestrated by software-defined networks and next-generation 6G links. But the same connectivity that lets a physician spot a cardiac emergency from across a city also gives attackers a vast new attack surface. A study published in Cluster Computing by Asad Ali, Muhammad Fahad Khan, Nazia Azim, and Farhan Aadil now describes a hybrid deep learning system designed to catch one of the most dangerous threats in this landscape: zero-day distributed denial-of-service (DDoS) attacks that no existing signature has ever seen, while keeping patient data private and explaining its own decisions to the security analysts who must act on them.

The threat model the researchers target is specific and technically subtle. In a software-defined network (SDN), a central controller manages traffic using the OpenFlow protocol, deciding how packets flow between IoT devices and hospital servers. A zero-day DDoS attack exploits undisclosed vulnerabilities in this arrangement: compromised medical IoT devices flood the controller with oversized Packet-in messages, often disguised as urgent traffic, until its CPU and memory are exhausted and legitimate users are locked out. Because these attacks are novel by definition, conventional signature-based detection systems simply have nothing in their databases to match against. Hospitals, the authors note, often lack the cyber threat intelligence capacity to identify such new attack patterns at all, making the problem acute in healthcare settings where downtime can cost lives.

The core of the new framework is a tightly coupled combination of two deep learning architectures with complementary strengths. The first is a variational autoencoder (VAE), an unsupervised generative model that learns a probabilistic representation of normal network traffic. Unlike a traditional autoencoder, which compresses each input into a single point in a latent space, a VAE maps inputs to a distribution characterized by mean and variance, using a KL-divergence regularization term to keep that latent space smooth and continuous. During detection, the model encodes incoming traffic, samples latent vectors via the reparameterization trick, and attempts to reconstruct the original input. If the reconstruction error is high, or the latent representation strays far from the learned distribution of benign traffic, the input is flagged as anomalous. This generative approach is precisely what makes zero-day detection possible: the model does not need to have seen an attack before, only to recognize that the traffic deviates statistically from normal behavior.

On its own, however, a VAE has a blind spot. DDoS attacks evolve over time, shifting intensity and behavior across minutes and hours, and a purely reconstruction-based model can miss these temporal dynamics. The researchers therefore feed sequences of latent vectors, built over a sliding time window, into a long short-term memory (LSTM) network. The LSTM’s gated memory cells, governed by input, forget, and output gates, learn long-range temporal dependencies in traffic patterns and can spot irregularities that unfold across sequences rather than within single snapshots. When the two models disagree, for instance when the VAE flags traffic as malicious but the LSTM scores it as normal, the framework normalizes both losses and combines them into a single hybrid anomaly score weighted by a tunable parameter, balancing unsupervised anomaly detection against supervised classification of known attacks.

Training such a model normally requires pooling enormous volumes of traffic data, and in a hospital that data is laced with sensitive medical information. The team’s answer is federated learning: each medical IoT device trains the hybrid VAE-LSTM model locally on its own data, and only the resulting model parameters, never the raw records, are sent to a central aggregator. Crucially, the authors chose the FedProx aggregation method over the standard Federated Averaging (FedAvg). Medical networks are notoriously heterogeneous, with non-independent and identically distributed (non-IID) data, since a patient’s heartbeat fluctuates with activity and stress, and devices vary widely in computing power. FedProx adds a proximal term to the local loss function that penalizes large deviations from the global model and allows slower devices, or stragglers, to contribute partial work without stalling aggregation, stabilizing convergence across this messy, real-world landscape.

Even a highly accurate detector is useless if clinicians and security analysts cannot trust it, and deep learning models are notorious black boxes. To address this, the framework incorporates the SHapley Additive exPlanations (SHAP) algorithm, which quantifies how much each input feature contributes to a given prediction. The resulting visualizations, including decision plots, waterfall plots, and summary plots, reveal which traffic characteristics push a prediction toward an attack alert. On the IoT healthcare dataset, features such as MQTT header flags, TCP push flags, and packet rate drove predictions toward the attack zone, while flow duration and HTTP request rate pushed toward benign classifications. On the CICDDoS2019 dataset, flow bytes per second, packet size consistency, and inter-arrival jitter emerged as the dominant indicators, exactly the volumetric and temporal signatures expected of DDoS behavior. This feature-level transparency lets analysts attribute attacks to specific protocols rather than generic anomalies, supporting auditing, debugging, and regulatory compliance.

The experimental evaluation was conducted in a simulated SDN-enabled IoT healthcare environment built with Mininet 2.3 and an ONOS controller, with the detection models implemented in TensorFlow 2.12. The team trained and validated the framework on two datasets: CICDDoS2019, which includes eight known DDoS attack classes and six zero-day attacks withheld from training and introduced only during testing, and an IoT healthcare security dataset. Data was split 60-30-10 for training, testing, and validation, with ten-fold cross-validation and careful preprocessing to prevent data leakage. Against baseline methods including standard autoencoders, standalone LSTMs, CNNs, and MLPs, the hybrid model achieved 99.75 percent accuracy and 99.63 percent precision on known attacks, and, more impressively, 98.61 percent accuracy and 98.90 percent precision on the zero-day attacks it had never encountered. On the healthcare dataset, it reached 99.21 percent accuracy on known attacks and 98.1 percent accuracy on zero-day variants.

The statistical rigor of the evaluation strengthens these claims. Paired t-tests across the cross-validation folds showed that the hybrid model’s superiority over every baseline was significant at p < 0.0001, with exact p-values ranging from 1.77 × 10⁻¹¹ to 7.86 × 10⁻⁷ and Cohen’s d effect sizes exceeding 4.0 in all comparisons, indicating substantial practical significance. Against the BFLIDS baseline, the accuracy advantage was 7.33 percent and the precision advantage 8 percent, with 95 percent confidence intervals confirming the gains. The authors translate these numbers into clinical terms: the accuracy improvement corresponds to correctly identifying roughly 160 additional attacks per 1,000 attempts, potentially protecting ventilators and electronic health records from compromise, while the precision gains reduce false alarms and the alert fatigue that plagues hospital security teams.

Scalability results add a practical dimension that many federated learning studies omit. Simulated deployments of 250 and 500 medical IoT devices, with a realistic 30 percent participation rate per round, showed that FedProx-based aggregation cut communication costs by about 17 percent compared with baseline aggregation methods, reaching 106.7 gigabytes, while converging in 118 rounds and consuming roughly 40 percent less energy per round and 20 percent less aggregation time than alternatives. The method earned the highest feasibility score of 0.89 in a weighted composite metric, and performance degraded only moderately as device counts grew, suggesting robustness to the heterogeneity of real hospital networks. The authors caution that the work remains simulation-based and outline future directions: validation on larger multi-institution datasets such as TON_IoT and Edge-IIoT, deployment on real edge hardware to measure CPU load, memory footprint, and latency, and extension of the framework to other threats including spoofing and man-in-the-middle attacks. For now, the study offers a template for how generative anomaly detection, privacy-preserving federated training, and explainable AI can be combined into a single defensive stack, one that may prove essential as healthcare’s Industry 5.0 ambitions collide with an increasingly hostile internet.

Subject of Research: A privacy-preserving, explainable hybrid deep learning framework for detecting zero-day DDoS attacks in SDN-enabled IoT healthcare networks

Article Title: A privacy preserving and trustworthy hybrid deep learning model for zero-day DDoS detection in healthcare industry 5.0

Article References: Ali, A., Khan, M. F., Azim, N., & Aadil, F. (2026). A privacy preserving and trustworthy hybrid deep learning model for zero-day DDoS detection in healthcare industry 5.0. Cluster Computing, 29(13), Article 750. https://doi.org/10.1007/s10586-026-06463-5

Image Credits: AI Generated

DOI: 10.1007/s10586-026-06463-5

Keywords: zero-day DDoS, federated learning, variational autoencoder, LSTM, explainable AI, SHAP, software-defined networking, healthcare IoT, Industry 5.0, intrusion detection, FedProx, privacy preservation