~ similar to 2603.28654v1· 20 results
This paper proposes an explainable threat attribution system for IoT networks that uses SHAP and flow behavior modeling to accurately classify and explain over 30 distinct attack variants into 8 meani…
This paper develops and analyzes various ensemble models, culminating in an XGBoost-based system, to reliably detect UAV intrusions using XAI and advanced statistical methods to pinpoint the root caus…
The paper proposes SDNGuardStack, an explainable ensemble learning framework that achieves high-accuracy intrusion detection (99.98%) in Software-Defined Networks using the InSDN dataset.
UNAD+ is an enhanced, explainable hybrid framework that effectively detects unknown zero-day network attacks by combining unsupervised ensemble methods with supervised refinement and post hoc explaina…
The paper evaluates AI's effectiveness in detecting network intrusions and cryptographic side-channel leakage, finding high accuracy in stable environments but performance degradation with novel traff…
The paper proposes ExAI5G, a logic-based explainable AI framework that integrates a Transformer-based IDS with XAI techniques to provide highly accurate and transparent intrusion detection for 5G netw…
The paper proposes XAI-SOH-FL, an enhanced Federated Learning framework that improves IoT intrusion detection by integrating adaptive aggregation and explainable AI, achieving high accuracy and interp…
The paper proposes XAI-SOH-FL, an enhanced Federated Learning framework that improves IoT intrusion detection by integrating adaptive aggregation and explainable AI, achieving high accuracy and interp…
The paper proposes XAI FL-IDS, a novel framework that combines Federated Learning and SHAP-based explainability to build a privacy-preserving and highly accurate distributed Intrusion Detection System…
The paper introduces an end-to-end framework that not only detects network intrusions using deep learning but also generates actionable, citation-grounded mitigation reports using a Retrieval-Augmente…
The paper proposes a Cognitive Threat Intelligence and Explainable Federated Security Analytics framework to enable privacy-preserving and scalable cyber threat detection across distributed infrastruc…
This paper enhances anomaly-based Intrusion Detection Systems by integrating process mining to provide detailed, process-based explanations and severity ratings for detected network anomalies.
The paper proposes a novel Meta-Quantum Ensemble (MQE) framework, which fuses outputs from Quantum Support Vector Machines (QSVMs) and Quantum Neural Networks (QNNs) using a Random Forest meta-learner…
This paper introduces an attribution-driven analysis of encoder-based Large Language Models (LLMs) for network intrusion detection, demonstrating that the models make decisions based on meaningful tra…
Fortunatus Aabangbio Wulnye, Justice Owusu Agyemang, Kwame Opuni-Boachie Obour Agyekum, Kwame Agyeman-Prempeh Agyekum +2 more
This paper analyzes how vulnerable various machine learning models are to data poisoning attacks in IoT intrusion detection, finding that ensemble methods are more robust than Logistic Regression and…
This paper develops an explainable and deployable machine learning system for highly accurate phishing detection across diverse, heterogeneous datasets, achieving up to 99.78% accuracy using transform…
The study assesses the generalization capability of supervised machine learning models for intrusion detection using UNSW-NB15 and TON_IoT, finding a significant performance drop when models are teste…
MA-IDS proposes a Multi-Agent RAG framework that uses LLMs and a self-building Experience Library to achieve explainable and self-improving intrusion detection for resource-constrained IoT networks.
This paper proposes a comprehensive framework for network intrusion detection using unified multi-modal datasets and evaluates advanced adversarial learning methods for generating high-fidelity synthe…
Xinglin Lian, Chengtai Cao, Ting Zhong, Yong Wang +2 more
The paper proposes FreeUp, a frequency-decoupled framework that improves encrypted network anomaly detection by separately modeling and fusing low- and high-frequency components of traffic data.