Creating an Explainable Intrusion Detection System Using Self Organizing Maps
Modern Artificial Intelligence (AI) enabled Intrusion Detection Systems (IDS) are complex black boxes. This means that a security analyst will have little to no explanation or clarification on why an IDS model made a particular prediction. A potential solution to this problem is to research and develop Explainable Intrusion Detection Systems (X-IDS) based on current capabilities in Explainable Artificial Intelligence (XAI). In this paper, we create a Self Organizing Maps (SOMs) based X-IDS system that is capable of producing explanatory visualizations. We leverage SOM's explainability to create both global and local explanations. An analyst can use global explanations to get a general idea of how a particular IDS model computes predictions. Local explanations are generated for individual datapoints to explain why a certain prediction value was computed. Furthermore, our SOM based X-IDS was evaluated on both explanation generation and traditional accuracy tests using the NSL-KDD and the CIC-IDS-2017 datasets.
Code (0)
등록된 구현이 없습니다.
Tasks
Explainable artificial intelligenceExplainable Artificial Intelligence (XAI)Explanation GenerationIntrusion DetectionMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Explainable Intrusion Detection Systems Using Competitive Learning Techniques
The current state of the art systems in Artificial Intelligence (AI) enabled intrusion detection use a variety of black box methods. These black box methods are generally trained using Error Based Learning (EBL) techniqu…
Intrusion DetectionNavigateA Comparative Analysis of DNN-based White-Box Explainable AI Methods in Network Security
New research focuses on creating artificial intelligence (AI) solutions for network intrusion detection systems (NIDS), drawing its inspiration from the ever-growing number of intrusions on networked systems, increasing …
DescriptiveIntrusion DetectionNetwork Intrusion DetectionExplaining Network Intrusion Detection System Using Explainable AI Framework
Cybersecurity is a domain where the data distribution is constantly changing with attackers exploring newer patterns to attack cyber infrastructure. Intrusion detection system is one of the important layers in cyber safe…
BIG-bench Machine LearningIntrusion DetectionNetwork Intrusion DetectionSAFE: Self-Supervised Anomaly Detection Framework for Intrusion Detection
The proliferation of IoT devices has significantly increased network vulnerabilities, creating an urgent need for effective Intrusion Detection Systems (IDS). Machine Learning-based IDS (ML-IDS) offer advanced detection …
Anomaly DetectionIntrusion DetectionNetwork Intrusion DetectionSelf-Supervised Anomaly Detection+2A Hybrid Approach for an Interpretable and Explainable Intrusion Detection System
Cybersecurity has been a concern for quite a while now. In the latest years, cyberattacks have been increasing in size and complexity, fueled by significant advances in technology. Nowadays, there is an unavoidable neces…
Intrusion Detection