With the explosive growth of the Internet of Things (IoT) and cloud-computing traffic, Intrusion Detection Systems (IDSs) have become a cornerstone of network security. However, modern traffic data often exhibits extreme class imbalance and long-tailed distributions, leading to persistently high miss rates for minority attack categories in Machine Learning (ML)-based IDSs. Conventional oversampling may introduce decision noise, whereas standard Generative Adversarial Networks (GANs) can suffer from training instability and mode collapse when modeling high-dimensional tabular traffic features. To address these challenges, we propose a high-fidelity traffic augmentation framework based on an Adaptive Hybrid-loss Conditional GAN (AH-CGAN). Specifically, AH-CGAN introduces an iteration-dependent adaptive gradient penalty (AGP) schedule to enforce the Lipschitz continuity constraint more effectively during training and incorporates a feature-matching objective to align intermediate critic representations between real and synthetic traffic. Experiments on the CIC-IDS2017 benchmark show that AH-CGAN generates distribution-consistent synthetic samples and that augmentation improves downstream detection across multiple classifiers. In particular, the weighted F1-score of Logistic Regression increases from 0.8237 to 0.8697 (Δ = +0.0460, i.e., +4.6%). Overall, the proposed approach enhances minority coverage in the feature space and can improve class separability, providing a practical solution for long-tailed IDS.
Zhang et al. (Fri,) studied this question.