paper-with-me

홈 › Papers

XAI-SOH-FL: Enhancing SOH-FL with Adaptive Aggregation and Explainable AI for Intrusion Detection in Heterogeneous IoT

2026-05-28 · Ambreen Aslam, Maaz Hassan, Bibi Zahra, Muhammad Khuram Shahzad arxiv

Intrusion Detection Systems (IDS) in Internet of Things (IoT) environments face significant challenges due to data heterogeneity, lack of labeled data, and limited model interpretability. Federated Learning (FL) offers a privacy-preserving solution; however, existing approaches such as SOH-FL suffer from two key limitations: reliance on a manually tuned aggregation parameter γ and lack of explainability in model predictions. In this paper, we propose XAI-SOH-FL, an enhanced framework that integrates adaptive aggregation and explainable artificial intelligence into the SOH-FL paradigm. First, we introduce a dynamic γ selection mechanism based on similarity thresholding, enabling the aggregation process to adapt to evolving data distributions. Second, Bayesian Optimization is employed to automatically determine optimal γ values, eliminating the need for manual tuning. Third, SHAP (SHapley Additive exPlanations) is incorporated to provide feature-level interpretability for intrusion detection decisions. Experimental evaluation on the CICIDS2017 dataset demonstrates that the proposed approach achieves an accuracy of 94.12% and an F1-score of 0.92, outperforming the baseline SOH-FL model while converging in fewer communication rounds. Furthermore, SHAP-based analysis reveals that flow-level features such as Flow Duration and Packet Length significantly influence model predictions. These results indicate that XAI-SOH-FL provides an effective balance between accuracy, adaptability, and interpretability in heterogeneous IoT environments.

📄 PDF Abstract BibTeX arXiv:2606.00134

Code (0)

등록된 구현이 없습니다.

Tasks

Intrusion DetectionFederated Learning

Similar Papers 제목 키워드 기반

Explaining Network Intrusion Detection System Using Explainable AI Framework

2021-03-12 · Shraddha Mane, Dattaraj Rao

Cybersecurity is a domain where the data distribution is constantly changing with attackers exploring newer patterns to attack cyber infrastructure. Intrusion detection system is one of the important layers in cyber safe…

BIG-bench Machine LearningIntrusion DetectionNetwork Intrusion Detection

A Survey for Deep Reinforcement Learning Based Network Intrusion Detection

2024-09-25 · Wanrong Yang, Alberto Acuto, Yihang Zhou, Dominik Wojtczak

Cyber-attacks are becoming increasingly sophisticated and frequent, highlighting the importance of network intrusion detection systems. This paper explores the potential and challenges of using deep reinforcement learnin…

Deep Reinforcement Learningfeature selectionIntrusion DetectionNetwork Intrusion Detection+3

Large Language Models for Network Intrusion Detection Systems: Foundations, Implementations, and Future Directions

2025-07-07 · Shuo Yang, Xinran Zheng, Xinchen Zhang, Jinfeng Xu 외 arxiv

Large Language Models (LLMs) have revolutionized various fields with their exceptional capabilities in understanding, processing, and generating human-like text. This paper investigates the potential of LLMs in advancing…

Network Intrusion Detection

A Hybrid Approach for an Interpretable and Explainable Intrusion Detection System

2021-11-19 · Tiago Dias, Nuno Oliveira, Norberto Sousa, Isabel Praça 외

Cybersecurity has been a concern for quite a while now. In the latest years, cyberattacks have been increasing in size and complexity, fueled by significant advances in technology. Nowadays, there is an unavoidable neces…

Intrusion Detection

FLARE: Feature-based Lightweight Aggregation for Robust Evaluation of IoT Intrusion Detection

2025-04-21 · Bradley Boswell, Seth Barrett, Swarnamugi Rajaganapathy, Gokila Dorai

The proliferation of Internet of Things (IoT) devices has expanded the attack surface, necessitating efficient intrusion detection systems (IDSs) for network protection. This paper presents FLARE, a feature-based lightwe…

Feature EngineeringIntrusion Detection