{"id":"https://openalex.org/W7204770610","doi":"https://doi.org/10.65542/djei.v2i3.87","title":"AI Transparency in Network Intrusion Detection: Utilizing Explainable Machine Learning for Identifying Security Threats","display_name":"AI Transparency in Network Intrusion Detection: Utilizing Explainable Machine Learning for Identifying Security Threats","publication_year":2026,"publication_date":"2026-08-31","ids":{"openalex":"https://openalex.org/W7204770610","doi":"https://doi.org/10.65542/djei.v2i3.87"},"language":"en","primary_location":{"id":"doi:10.65542/djei.v2i3.87","doi":"https://doi.org/10.65542/djei.v2i3.87","is_oa":true,"landing_page_url":"https://doi.org/10.65542/djei.v2i3.87","pdf_url":"https://dasinya.dpu.edu.krd/index.php/pub/article/download/87/39","source":{"id":"https://openalex.org/S5407054304","display_name":"Dasinya Journal for Engineering and Informatics","issn_l":"3106-3802","issn":["3106-3802","3106-3810"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Dasinya Journal for Engineering and Informatics","raw_type":"journal-article"},"volume":null,"type":"article","is_traditional":true,"indexed_in":["crossref"],"open_access":{"is_oa":true,"oa_status":"hybrid","oa_url":"https://dasinya.dpu.edu.krd/index.php/pub/article/download/87/39","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5050440988","display_name":"Dawlat Mustafa Sulaiman","orcid":"https://orcid.org/0009-0004-8306-5834","observed_orcids":["https://orcid.org/0009-0004-8306-5834"]},"institutions":[{"id":"https://openalex.org/I4210124331","display_name":"Duhok Polytechnic University","ror":"https://ror.org/024kjbt21","country_code":"IQ","type":"education","lineage":["https://openalex.org/I4210124331"]}],"countries":["IQ"],"is_corresponding":true,"raw_author_name":"Dawlat Mustafa Sulaiman","raw_affiliation_strings":["Department of Information Technology, Technical College of Duhok, Duhok Polytechnic University, Duhok, Kurdistan Region, Iraq"],"raw_orcid":"https://orcid.org/0009-0004-8306-5834","affiliations":[{"raw_affiliation_string":"Department of Information Technology, Technical College of Duhok, Duhok Polytechnic University, Duhok, Kurdistan Region, Iraq","institution_ids":["https://openalex.org/I4210124331"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5050440988"],"corresponding_institution_ids":["https://openalex.org/I4210124331"],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":true,"cited_by_count":0,"citation_normalized_percentile":{"value":0.0,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2","issue":"3","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9970999956130981,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.0006000000284984708,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12326","display_name":"Network Packet Processing and Optimization","score":0.0003000000142492354,"subfield":{"id":"https://openalex.org/subfields/1708","display_name":"Hardware and Architecture"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/network-intrusion-detection","display_name":"network intrusion detection","score":0.9959999918937683},{"id":"https://openalex.org/keywords/ai-transparency","display_name":"AI transparency","score":0.8040000200271606},{"id":"https://openalex.org/keywords/explainable-machine-learning","display_name":"explainable machine learning","score":0.8820000290870667},{"id":"https://openalex.org/keywords/shap","display_name":"SHAP","score":0.921999990940094},{"id":"https://openalex.org/keywords/nsl-kdd","display_name":"NSL-KDD dataset","score":0.7680000066757202},{"id":"https://openalex.org/keywords/random-forest","display_name":"random forest","score":0.7570000290870667},{"id":"https://openalex.org/keywords/classifier-comparison","display_name":"classifier comparison","score":0.777999997138977},{"id":"https://openalex.org/keywords/generalization","display_name":"generalization","score":0.640999972820282},{"id":"https://openalex.org/keywords/false-positive-results","display_name":"false positives","score":0.6439999938011169},{"id":"https://openalex.org/keywords/false-negative-results","display_name":"false-negative results","score":0.8529999852180481},{"id":"https://openalex.org/keywords/deployment-readiness","display_name":"deployment readiness","score":0.46000000834465027},{"id":"https://openalex.org/keywords/network-security","display_name":"network security","score":0.30300000309944153}],"concepts":[{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.6599000096321106},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6488000154495239},{"id":"https://openalex.org/C169258074","wikidata":"https://www.wikidata.org/wiki/Q245748","display_name":"Random forest","level":2,"score":0.6244000196456909},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6072999835014343},{"id":"https://openalex.org/C2780385302","wikidata":"https://www.wikidata.org/wiki/Q367158","display_name":"Protocol (science)","level":3,"score":0.5432999730110168},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5159000158309937},{"id":"https://openalex.org/C2780233690","wikidata":"https://www.wikidata.org/wiki/Q535347","display_name":"Transparency (behavior)","level":2,"score":0.4512999951839447},{"id":"https://openalex.org/C22679943","wikidata":"https://www.wikidata.org/wiki/Q159375","display_name":"Standard deviation","level":2,"score":0.38609999418258667},{"id":"https://openalex.org/C177148314","wikidata":"https://www.wikidata.org/wiki/Q170084","display_name":"Generalization","level":2,"score":0.35519999265670776},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.35109999775886536},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3463999927043915},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.34470000863075256},{"id":"https://openalex.org/C177212765","wikidata":"https://www.wikidata.org/wiki/Q627335","display_name":"Workflow","level":2,"score":0.32679998874664307},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.30959999561309814},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.3093999922275543},{"id":"https://openalex.org/C158379750","wikidata":"https://www.wikidata.org/wiki/Q214111","display_name":"Network packet","level":2,"score":0.30570000410079956},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.2971000075340271},{"id":"https://openalex.org/C141291300","wikidata":"https://www.wikidata.org/wiki/Q5249244","display_name":"Decision stump","level":5,"score":0.27239999175071716},{"id":"https://openalex.org/C105339364","wikidata":"https://www.wikidata.org/wiki/Q2297740","display_name":"Software deployment","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.65542/djei.v2i3.87","doi":"https://doi.org/10.65542/djei.v2i3.87","is_oa":true,"landing_page_url":"https://doi.org/10.65542/djei.v2i3.87","pdf_url":"https://dasinya.dpu.edu.krd/index.php/pub/article/download/87/39","source":{"id":"https://openalex.org/S5407054304","display_name":"Dasinya Journal for Engineering and Informatics","issn_l":"3106-3802","issn":["3106-3802","3106-3810"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Dasinya Journal for Engineering and Informatics","raw_type":"journal-article"}],"best_oa_location":{"id":"doi:10.65542/djei.v2i3.87","doi":"https://doi.org/10.65542/djei.v2i3.87","is_oa":true,"landing_page_url":"https://doi.org/10.65542/djei.v2i3.87","pdf_url":"https://dasinya.dpu.edu.krd/index.php/pub/article/download/87/39","source":{"id":"https://openalex.org/S5407054304","display_name":"Dasinya Journal for Engineering and Informatics","issn_l":"3106-3802","issn":["3106-3802","3106-3810"],"is_oa":false,"is_in_doaj":false,"is_core":false,"listed_in":[],"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Dasinya Journal for Engineering and Informatics","raw_type":"journal-article"},"sustainable_development_goals":[],"study_designs":[],"awards":[],"funders":[],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W7204770610.pdf","grobid_xml":"https://content.openalex.org/works/W7204770610.grobid-xml"},"referenced_works_count":29,"referenced_works":["https://openalex.org/W1924689489","https://openalex.org/W2099940443","https://openalex.org/W2122111042","https://openalex.org/W2161807639","https://openalex.org/W2282821441","https://openalex.org/W2498119267","https://openalex.org/W2902900716","https://openalex.org/W2911964244","https://openalex.org/W2912934387","https://openalex.org/W2929803724","https://openalex.org/W2998233014","https://openalex.org/W3001275383","https://openalex.org/W3017093935","https://openalex.org/W3139317474","https://openalex.org/W4210915475","https://openalex.org/W4213102919","https://openalex.org/W4220957574","https://openalex.org/W4239510810","https://openalex.org/W4281903041","https://openalex.org/W4285184946","https://openalex.org/W4322773728","https://openalex.org/W4361292119","https://openalex.org/W4391986380","https://openalex.org/W4400418483","https://openalex.org/W4404890600","https://openalex.org/W4410560290","https://openalex.org/W4411160947","https://openalex.org/W4414124450","https://openalex.org/W7160331673"],"related_works":["https://openalex.org/W7172033115","https://openalex.org/W7169719606","https://openalex.org/W7155010617","https://openalex.org/W7133130723","https://openalex.org/W7216067965","https://openalex.org/W7165651564","https://openalex.org/W4417509321","https://openalex.org/W3153493188","https://openalex.org/W7169830650","https://openalex.org/W3196585642"],"abstract_inverted_index":{"Machine-learning":[0],"intrusion":[1],"detectors":[2],"often":[3],"report":[4],"near-perfect":[5,149],"performance":[6,152],"on":[7,80],"familiar":[8],"benchmarks,":[9],"yet":[10],"their":[11],"generalization":[12],"and":[13,23,35,56,77,96,130,138,142,161],"decision":[14],"transparency":[15],"remain":[16],"uncertain.":[17],"This":[18],"study":[19],"evaluates":[20],"a":[21,63,73,97,108],"reproducible":[22],"explainable":[24],"binary":[25],"network-intrusion-detection":[26],"workflow":[27],"using":[28],"the":[29,83,123],"NSL-KDD":[30,151],"KDDTrain+_20Percent":[31],"file":[32],"(25,192":[33],"records":[34],"41":[36],"input":[37],"features).":[38],"Six":[39],"classifiers":[40],"were":[41],"compared:":[42],"Random":[43],"Forest":[44],"(RF),":[45],"Logistic":[46],"Regression,":[47],"Decision":[48],"Tree":[49],"(DT),":[50],"Support":[51],"Vector":[52],"Machine,":[53],"k-Nearest":[54],"Neighbors,":[55],"Gaussian":[57],"Naive":[58],"Bayes.":[59],"The":[60],"protocol":[61],"used":[62],"stratified":[64,69],"70:30":[65],"hold-out":[66,85],"split,":[67],"five-fold":[68,102],"cross-validation,":[70],"training-only":[71],"preprocessing,":[72],"fixed":[74],"random":[75],"seed,":[76],"independent":[78,125,159],"evaluation":[79],"KDDTest+.":[81],"On":[82,113],"internal":[84,150],"set,":[86],"RF":[87,115],"achieved":[88,122],"99.64%":[89],"accuracy,":[90],"99.40%":[91],"attack":[92],"recall,":[93],"99.85%":[94],"specificity,":[95],"ROC-AUC":[98],"of":[99,111,127],"0.99994;":[100],"its":[101],"mean":[103],"accuracy":[104,116,126],"was":[105],"99.74%":[106],"with":[107],"standard":[109],"deviation":[110],"0.16%.":[112],"KDDTest+,":[114],"decreased":[117],"to":[118],"77.82%,":[119],"whereas":[120],"DT":[121],"highest":[124],"81.53%.":[128],"Global":[129],"case-based":[131],"SHAP":[132],"analyses":[133],"identified":[134],"influential":[135],"network":[136],"features":[137],"explained":[139],"correct,":[140],"false-positive,":[141],"false-negative":[143],"predictions.":[144],"These":[145],"findings":[146],"show":[147],"that":[148],"does":[153],"not":[154],"establish":[155],"deployment":[156],"readiness":[157],"without":[158],"testing":[160],"transparent":[162],"error":[163],"analysis.":[164]},"counts_by_year":[],"updated_date":"2026-11-12T12:28:57.059296","created_date":"2026-09-01T00:00:00"}