Explainable AI for Comparative Analysis of Intrusion Detection Models
Explainable Artificial Intelligence (XAI) has become a widely discussed topic, the related technologies facilitate better understanding of conventional black-box models like Random Forest, Neural Networks and etc. However, domain-specific applications of XAI are still insufficient. To fill this gap, this research analyzes various machine learning models to the tasks of binary and multi-class classification for intrusion detection from network traffic on the same dataset using occlusion sensitivity. The models evaluated include Linear Regression, Logistic Regression, Linear Support Vector Machine (SVM), K-Nearest Neighbors (KNN), Random Forest, Decision Trees, and Multi-Layer Perceptrons (MLP). We trained all models to the accuracy of 90\% on the UNSW-NB15 Dataset. We found that most classifiers leverage only less than three critical features to achieve such accuracies, indicating that effective feature engineering could actually be far more important for intrusion detection than applying complicated models. We also discover that Random Forest provides the best performance in terms of accuracy, time efficiency and robustness. Data and code available at https://github.com/pcwhy/XML-IntrusionDetection.git
Code (1)
Tasks
Explainable artificial intelligenceExplainable Artificial Intelligence (XAI)Feature EngineeringIntrusion DetectionMulti-class ClassificationregressionMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Integration of AI in Cybersecurity: Current Trends with a Focused Look at Intrusion Detection Applications
Artificial Intelligence (AI) is widely adopted today for its ability to detect patterns, automate tasks, and reduce time and cost across various applications. Its integration into Cybersecurity has garnered significant a…
Intrusion DetectionFederated LearningSpam detectionA Comparative Analysis of Ensemble-Based Machine Learning Approaches with Explainable AI for Multi-Class Intrusion Detection in Drone Networks
The growing integration of drones into civilian, commercial, and defense sectors introduces significant cybersecurity concerns, particularly with the increased risk of network-based intrusions targeting drone communicati…
Multi-class ClassificationIntrusion DetectionFeature ImportanceA Comparative Analysis of DNN-based White-Box Explainable AI Methods in Network Security
New research focuses on creating artificial intelligence (AI) solutions for network intrusion detection systems (NIDS), drawing its inspiration from the ever-growing number of intrusions on networked systems, increasing …
DescriptiveIntrusion DetectionNetwork Intrusion DetectionTabular Diffusion based Actionable Counterfactual Explanations for Network Intrusion Detection
Modern network intrusion detection systems (NIDS) frequently utilize the predictive power of complex deep learning models. However, the "black-box" nature of such deep learning methods adds a layer of opaqueness that hin…
Network Intrusion DetectionAttribution-Driven Explainable Intrusion Detection with Encoder-Based Large Language Models
Software-Defined Networking (SDN) improves network flexibility but also increases the need for reliable and interpretable intrusion detection. Large Language Models (LLMs) have recently been explored for cybersecurity ta…
Network Intrusion DetectionRepresentation Learning