{"id":"https://openalex.org/W4367309662","doi":"https://doi.org/10.1016/j.ins.2023.119000","title":"An explainable deep learning-enabled intrusion detection framework in IoT networks","display_name":"An explainable deep learning-enabled intrusion detection framework in IoT networks","publication_year":2023,"publication_date":"2023-04-28","ids":{"openalex":"https://openalex.org/W4367309662","doi":"https://doi.org/10.1016/j.ins.2023.119000"},"language":"en","primary_location":{"id":"doi:10.1016/j.ins.2023.119000","doi":"https://doi.org/10.1016/j.ins.2023.119000","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.ins.2023.119000","pdf_url":null,"source":{"id":"https://openalex.org/S192650101","display_name":"Information Sciences","issn_l":"0020-0255","issn":["0020-0255","1872-6291"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-b","cwts-core","dongbi-b","fnege-4","jufo-3","ki-jl-1","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Sciences","raw_type":"journal-article"},"volume":null,"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://doi.org/10.1016/j.ins.2023.119000","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5056050345","display_name":"Marwa Keshk","orcid":"https://orcid.org/0000-0001-5749-0408","observed_orcids":["https://orcid.org/0000-0001-5749-0408"]},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I4394709116","display_name":"UNSW Canberra","ror":"https://ror.org/0125wpx05","country_code":null,"type":"education","lineage":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Marwa Keshk","raw_affiliation_strings":["University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia","institution_ids":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5063382171","display_name":"Nickolaos Koroniotis","orcid":"https://orcid.org/0000-0002-8831-632X","observed_orcids":["https://orcid.org/0000-0002-8831-632X"]},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I4394709116","display_name":"UNSW Canberra","ror":"https://ror.org/0125wpx05","country_code":null,"type":"education","lineage":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Nickolaos Koroniotis","raw_affiliation_strings":["University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia","institution_ids":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5075314147","display_name":"Nam Pham","orcid":"https://orcid.org/0000-0001-7804-1644","observed_orcids":["https://orcid.org/0000-0001-7804-1644"]},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I4394709116","display_name":"UNSW Canberra","ror":"https://ror.org/0125wpx05","country_code":null,"type":"education","lineage":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Nam Pham","raw_affiliation_strings":["University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia"],"raw_orcid":"https://orcid.org/0000-0001-7804-1644","affiliations":[{"raw_affiliation_string":"University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia","institution_ids":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089327837","display_name":"Nour Moustafa","orcid":"https://orcid.org/0000-0001-6127-9349","observed_orcids":["https://orcid.org/0000-0001-6127-9349","https://orcid.org/0000-0001-8258-9020"]},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I4394709116","display_name":"UNSW Canberra","ror":"https://ror.org/0125wpx05","country_code":null,"type":"education","lineage":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}],"countries":["AU"],"is_corresponding":true,"raw_author_name":"Nour Moustafa","raw_affiliation_strings":["University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia"],"raw_orcid":"https://orcid.org/0000-0001-6127-9349","affiliations":[{"raw_affiliation_string":"University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia","institution_ids":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022626159","display_name":"Benjamin Turnbull","orcid":"https://orcid.org/0000-0003-0440-5032","observed_orcids":["https://orcid.org/0000-0003-0440-5032"]},"institutions":[{"id":"https://openalex.org/I31746571","display_name":"UNSW Sydney","ror":"https://ror.org/03r8z3t63","country_code":"AU","type":"education","lineage":["https://openalex.org/I31746571"]},{"id":"https://openalex.org/I4394709116","display_name":"UNSW Canberra","ror":"https://ror.org/0125wpx05","country_code":null,"type":"education","lineage":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Benjamin Turnbull","raw_affiliation_strings":["University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia"],"raw_orcid":"https://orcid.org/0000-0003-0440-5032","affiliations":[{"raw_affiliation_string":"University of New South Wales (UNSW Canberra) Canberra, 2612, ACT, Australia","institution_ids":["https://openalex.org/I31746571","https://openalex.org/I4394709116"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5015993565","display_name":"Albert Y. Zomaya","orcid":"https://orcid.org/0000-0002-3090-1059","observed_orcids":["https://orcid.org/0000-0002-3090-1059"]},"institutions":[{"id":"https://openalex.org/I129604602","display_name":"The University of Sydney","ror":"https://ror.org/0384j8v12","country_code":"AU","type":"education","lineage":["https://openalex.org/I129604602"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Albert Y. Zomaya","raw_affiliation_strings":["School of Information Technologies, University of Sydney, NSW, 2006, Sydney, Australia"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"School of Information Technologies, University of Sydney, NSW, 2006, Sydney, Australia","institution_ids":["https://openalex.org/I129604602"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":["https://openalex.org/A5089327837"],"corresponding_institution_ids":["https://openalex.org/I31746571","https://openalex.org/I4394709116"],"apc_list":{"value":3330,"currency":"USD","value_usd":3330},"apc_paid":{"value":3330,"currency":"USD","value_usd":3330},"fwci":29.384,"has_fulltext":false,"cited_by_count":262,"citation_normalized_percentile":{"value":0.99932317,"is_in_top_1_percent":true,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":99,"max":100},"biblio":{"volume":"639","issue":null,"first_page":"119000","last_page":"119000"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9878000020980835,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.006099999882280827,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.000699999975040555,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/explainable-ai","display_name":"explainable AI","score":0.8809999823570251},{"id":"https://openalex.org/keywords/intrusion-detection","display_name":"intrusion detection","score":0.8759999871253967},{"id":"https://openalex.org/keywords/iot-security","display_name":"Internet of Things security","score":0.9480000138282776},{"id":"https://openalex.org/keywords/anomaly-based-intrusion-detection","display_name":"anomaly-based intrusion detection","score":0.871999979019165},{"id":"https://openalex.org/keywords/lstm","display_name":"LSTM","score":0.8360000252723694},{"id":"https://openalex.org/keywords/shap","display_name":"SHAP","score":0.7889999747276306},{"id":"https://openalex.org/keywords/permutation-feature-importance","display_name":"permutation importance","score":0.9739999771118164},{"id":"https://openalex.org/keywords/individual-conditional-expectation","display_name":"individual conditional expectation","score":0.9900000095367432},{"id":"https://openalex.org/keywords/partial-dependence-plots","display_name":"partial dependence plots","score":0.8349999785423279},{"id":"https://openalex.org/keywords/model-interpretability","display_name":"model interpretability","score":0.7910000085830688},{"id":"https://openalex.org/keywords/cyberattack-detection","display_name":"cyberattack detection","score":0.8610000014305115}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8505222201347351},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.8328535556793213},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6759047508239746},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5781525373458862},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.5237348079681396},{"id":"https://openalex.org/C2776401178","wikidata":"https://www.wikidata.org/wiki/Q12050496","display_name":"Feature (linguistics)","level":2,"score":0.5045429468154907},{"id":"https://openalex.org/C9652623","wikidata":"https://www.wikidata.org/wiki/Q190109","display_name":"Field (mathematics)","level":2,"score":0.4563077986240387},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.4331865608692169},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3858814835548401},{"id":"https://openalex.org/C202444582","wikidata":"https://www.wikidata.org/wiki/Q837863","display_name":"Pure mathematics","level":1,"score":0.0},{"id":"https://openalex.org/C199360897","wikidata":"https://www.wikidata.org/wiki/Q9143","display_name":"Programming language","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.0},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1016/j.ins.2023.119000","doi":"https://doi.org/10.1016/j.ins.2023.119000","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.ins.2023.119000","pdf_url":null,"source":{"id":"https://openalex.org/S192650101","display_name":"Information Sciences","issn_l":"0020-0255","issn":["0020-0255","1872-6291"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-b","cwts-core","dongbi-b","fnege-4","jufo-3","ki-jl-1","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Sciences","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.1016/j.ins.2023.119000","doi":"https://doi.org/10.1016/j.ins.2023.119000","is_oa":true,"landing_page_url":"https://doi.org/10.1016/j.ins.2023.119000","pdf_url":null,"source":{"id":"https://openalex.org/S192650101","display_name":"Information Sciences","issn_l":"0020-0255","issn":["0020-0255","1872-6291"],"is_oa":false,"is_in_doaj":false,"is_core":true,"listed_in":["anvur-class-a","anvur-scientific","ccf-b","cwts-core","dongbi-b","fnege-4","jufo-3","ki-jl-1","norway-2","poland-200","russia-white-list-1","vabb-shw"],"host_organization":"https://openalex.org/P4310320990","host_organization_name":"Elsevier BV","host_organization_lineage":["https://openalex.org/P4310320990"],"host_organization_lineage_names":["Elsevier BV"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Information Sciences","raw_type":"journal-article"},"sustainable_development_goals":[],"sustainable_development_goals_aurora":[{"id":"https://metadata.un.org/sdg/16","display_name":"Peace, justice, and strong institutions","score":0.75}],"study_designs":[],"awards":[{"id":"https://openalex.org/G1054798174","display_name":"Vulnerability Defence: From Interpretable to Trustworthy Threat Assessment","funder_award_id":"DE230100116","funder_id":"https://openalex.org/F4320334704","funder_display_name":"Australian Research Council"}],"funders":[{"id":"https://openalex.org/F4320334704","display_name":"Australian Research Council","ror":"https://ror.org/05mmh0f86"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":56,"referenced_works":["https://openalex.org/W143275180","https://openalex.org/W1678356000","https://openalex.org/W1998496248","https://openalex.org/W2017380649","https://openalex.org/W2064675550","https://openalex.org/W2107878631","https://openalex.org/W2150355110","https://openalex.org/W2150847526","https://openalex.org/W2625602624","https://openalex.org/W2896632748","https://openalex.org/W2898726669","https://openalex.org/W2902529532","https://openalex.org/W2904539465","https://openalex.org/W2911964244","https://openalex.org/W2914874661","https://openalex.org/W2946210441","https://openalex.org/W2948056727","https://openalex.org/W2969476445","https://openalex.org/W2977489474","https://openalex.org/W2986055611","https://openalex.org/W2990268365","https://openalex.org/W2995150486","https://openalex.org/W3025093231","https://openalex.org/W3033403042","https://openalex.org/W3043799819","https://openalex.org/W3085955590","https://openalex.org/W3092771185","https://openalex.org/W3121453273","https://openalex.org/W3149084432","https://openalex.org/W3151784567","https://openalex.org/W3161599138","https://openalex.org/W3162956350","https://openalex.org/W4239963787","https://openalex.org/W4240075522","https://openalex.org/W4240157325","https://openalex.org/W4250247825","https://openalex.org/W4286803096","https://openalex.org/W4300874179","https://openalex.org/W6637404493","https://openalex.org/W6650024622","https://openalex.org/W6674887505","https://openalex.org/W6697252871","https://openalex.org/W6722226382","https://openalex.org/W6726258750","https://openalex.org/W6748971887","https://openalex.org/W6755450735","https://openalex.org/W6756621107","https://openalex.org/W6757156183","https://openalex.org/W6766846328","https://openalex.org/W6769035812","https://openalex.org/W6773439703","https://openalex.org/W6785641421","https://openalex.org/W6788774675","https://openalex.org/W6794195961","https://openalex.org/W6794591613","https://openalex.org/W6799953650"],"related_works":["https://openalex.org/W2905433371","https://openalex.org/W4390569940","https://openalex.org/W1986582023","https://openalex.org/W2883749686","https://openalex.org/W2966829450","https://openalex.org/W4315864862","https://openalex.org/W2364419519","https://openalex.org/W2017948608","https://openalex.org/W2360767377","https://openalex.org/W2360951146"],"abstract_inverted_index":{"Although":[0],"the":[1,43,51,54,58,79,102,139,147,180],"field":[2],"of":[3,46,53,60,81,110,165],"eXplainable":[4],"Artificial":[5],"Intelligence":[6],"(XAI)":[7],"has":[8,179],"a":[9,72,91,107,115],"significant":[10],"interest":[11],"these":[12],"days,":[13],"its":[14,26],"implementation":[15],"within":[16],"cyber":[17,35],"security":[18],"applications":[19,45],"still":[20],"needs":[21],"further":[22],"investigation":[23],"to":[24,63,97,135,182],"understand":[25],"effectiveness":[27],"in":[28,78,187],"discovering":[29],"attack":[30,190],"surfaces":[31],"and":[32,57,100,137,150,162,168,185],"vectors.":[33],"In":[34],"defence,":[36],"especially":[37],"anomaly-based":[38],"Intrusion":[39],"Detection":[40],"Systems":[41],"(IDS),":[42],"emerging":[44],"machine/deep":[47],"learning":[48],"models":[49],"require":[50],"interpretation":[52],"models'":[55,61],"architecture":[56],"explanation":[59],"prediction":[62],"examine":[64],"how":[65],"cyberattacks":[66,99],"would":[67],"occur.":[68],"This":[69,105],"paper":[70],"proposes":[71],"novel":[73,108,116],"explainable":[74],"intrusion":[75],"detection":[76,158],"framework":[77,134,143,155,178],"Internet":[80],"Things":[82],"(IoT)":[83],"networks.":[84],"We":[85],"have":[86],"developed":[87],"an":[88],"IDS":[89],"using":[90,146],"Short-Term":[92],"Long":[93],"Memory":[94],"(LSTM)":[95],"model":[96,169],"identify":[98],"explain":[101],"model's":[103],"decisions.":[104],"uses":[106],"set":[109],"input":[111],"features":[112,167],"extracted":[113],"by":[114],"SPIP":[117,154],"(S:":[118],"Shapley":[119],"Additive":[120],"exPlanations,":[121],"P:":[122,130],"Permutation":[123],"Feature":[124],"Importance,":[125],"I:":[126],"Individual":[127],"Conditional":[128],"Expectation,":[129],"Partial":[131],"Dependence":[132],"Plot)":[133],"train":[136],"evaluate":[138],"LSTM":[140],"model.":[141],"The":[142,153,176],"was":[144],"validated":[145],"NSL-KDD,":[148],"UNSW-NB15":[149],"TON_IoT":[151],"datasets.":[152],"achieved":[156],"high":[157,163],"accuracy,":[159],"processing":[160],"time,":[161],"interpretability":[164],"data":[166],"outputs":[170],"compared":[171],"with":[172],"other":[173],"peer":[174],"techniques.":[175],"proposed":[177],"potential":[181],"assist":[183],"administrators":[184],"decision-makers":[186],"understanding":[188],"complex":[189],"behaviour.":[191]},"counts_by_year":[{"year":2026,"cited_by_count":93},{"year":2025,"cited_by_count":89},{"year":2024,"cited_by_count":67},{"year":2023,"cited_by_count":13}],"updated_date":"2026-10-15T10:00:46.086208","created_date":"2025-10-10T00:00:00"}