{"id":"https://openalex.org/W7160768959","doi":"https://doi.org/10.1007/s44163-026-01317-w","title":"An explainable and latency-aware unified framework for hybrid graph cyberattack detection","display_name":"An explainable and latency-aware unified framework for hybrid graph cyberattack detection","publication_year":2026,"publication_date":"2026-05-10","ids":{"openalex":"https://openalex.org/W7160768959","doi":"https://doi.org/10.1007/s44163-026-01317-w"},"language":"en","primary_location":{"id":"doi:10.1007/s44163-026-01317-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44163-026-01317-w","pdf_url":null,"source":{"id":"https://openalex.org/S4210220416","display_name":"Discover Artificial Intelligence","issn_l":"2731-0809","issn":["2731-0809"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1007/s44163-026-01317-w","any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5125118718","display_name":"Aniruddha Prabhu B.P.","orcid":null},"institutions":[{"id":"https://openalex.org/I65674248","display_name":"Visvesvaraya Technological University","ror":"https://ror.org/00ha14p11","country_code":"IN","type":"education","lineage":["https://openalex.org/I65674248"]}],"countries":["IN"],"is_corresponding":true,"raw_author_name":"Aniruddha Prabhu B.P.","raw_affiliation_strings":["Department of Computer Science and Engineering, Siddaganga Institute of Technology,Tumkur, Visvesvaraya Technological University, Belagavi,Karnataka,, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Siddaganga Institute of Technology,Tumkur, Visvesvaraya Technological University, Belagavi,Karnataka,, India","institution_ids":["https://openalex.org/I65674248"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5125132018","display_name":"N. R. Sunitha","orcid":null},"institutions":[{"id":"https://openalex.org/I65674248","display_name":"Visvesvaraya Technological University","ror":"https://ror.org/00ha14p11","country_code":"IN","type":"education","lineage":["https://openalex.org/I65674248"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"N. R. Sunitha","raw_affiliation_strings":["Department of Computer Science and Engineering, Siddaganga Institute of Technology,Tumkur, Visvesvaraya Technological University, Belagavi,Karnataka,, India"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Siddaganga Institute of Technology,Tumkur, Visvesvaraya Technological University, Belagavi,Karnataka,, India","institution_ids":["https://openalex.org/I65674248"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5125118718"],"corresponding_institution_ids":["https://openalex.org/I65674248"],"apc_list":{"value":1340,"currency":"USD","value_usd":1340},"apc_paid":{"value":1340,"currency":"USD","value_usd":1340},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.54875348,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"6","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.12330000102519989,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.12330000102519989,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.11829999834299088,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11273","display_name":"Advanced Graph Neural Networks","score":0.11339999735355377,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6255000233650208},{"id":"https://openalex.org/keywords/key","display_name":"Key (lock)","score":0.46399998664855957},{"id":"https://openalex.org/keywords/triage","display_name":"Triage","score":0.45980000495910645},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.41290000081062317},{"id":"https://openalex.org/keywords/fidelity","display_name":"Fidelity","score":0.3467000126838684},{"id":"https://openalex.org/keywords/graph","display_name":"Graph","score":0.3418999910354614},{"id":"https://openalex.org/keywords/false-alarm","display_name":"False alarm","score":0.3407000005245209},{"id":"https://openalex.org/keywords/pipeline","display_name":"Pipeline (software)","score":0.3181999921798706}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8075000047683716},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6255000233650208},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.46399998664855957},{"id":"https://openalex.org/C2777120189","wikidata":"https://www.wikidata.org/wiki/Q780067","display_name":"Triage","level":2,"score":0.45980000495910645},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4327999949455261},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.41290000081062317},{"id":"https://openalex.org/C2776459999","wikidata":"https://www.wikidata.org/wiki/Q2119376","display_name":"Fidelity","level":2,"score":0.3467000126838684},{"id":"https://openalex.org/C132525143","wikidata":"https://www.wikidata.org/wiki/Q141488","display_name":"Graph","level":2,"score":0.3418999910354614},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.34119999408721924},{"id":"https://openalex.org/C2776836416","wikidata":"https://www.wikidata.org/wiki/Q1364844","display_name":"False alarm","level":2,"score":0.3407000005245209},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.33489999175071716},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3181999921798706},{"id":"https://openalex.org/C101738243","wikidata":"https://www.wikidata.org/wiki/Q786435","display_name":"Autoencoder","level":3,"score":0.3089999854564667},{"id":"https://openalex.org/C152745839","wikidata":"https://www.wikidata.org/wiki/Q5438153","display_name":"Fault detection and isolation","level":3,"score":0.30790001153945923},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30559998750686646},{"id":"https://openalex.org/C2776973144","wikidata":"https://www.wikidata.org/wiki/Q6880649","display_name":"Misuse detection","level":4,"score":0.29679998755455017},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2962999939918518},{"id":"https://openalex.org/C2780615140","wikidata":"https://www.wikidata.org/wiki/Q920419","display_name":"Upgrade","level":2,"score":0.29159998893737793},{"id":"https://openalex.org/C49937458","wikidata":"https://www.wikidata.org/wiki/Q2599292","display_name":"Probabilistic logic","level":2,"score":0.289000004529953},{"id":"https://openalex.org/C2779960059","wikidata":"https://www.wikidata.org/wiki/Q7113681","display_name":"Overhead (engineering)","level":2,"score":0.2694000005722046},{"id":"https://openalex.org/C167063184","wikidata":"https://www.wikidata.org/wiki/Q1400839","display_name":"Vulnerability assessment","level":3,"score":0.26570001244544983},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.2635999917984009},{"id":"https://openalex.org/C82876162","wikidata":"https://www.wikidata.org/wiki/Q17096504","display_name":"Latency (audio)","level":2,"score":0.25690001249313354},{"id":"https://openalex.org/C81877898","wikidata":"https://www.wikidata.org/wiki/Q1965787","display_name":"Network monitoring","level":2,"score":0.25220000743865967}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1007/s44163-026-01317-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44163-026-01317-w","pdf_url":null,"source":{"id":"https://openalex.org/S4210220416","display_name":"Discover Artificial Intelligence","issn_l":"2731-0809","issn":["2731-0809"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Artificial Intelligence","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:5c4f84049a9140418e68012ac6ff747f","is_oa":false,"landing_page_url":"https://doaj.org/article/5c4f84049a9140418e68012ac6ff747f","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Discover Artificial Intelligence, Vol 6, Iss 1 (2026)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1007/s44163-026-01317-w","is_oa":true,"landing_page_url":"https://doi.org/10.1007/s44163-026-01317-w","pdf_url":null,"source":{"id":"https://openalex.org/S4210220416","display_name":"Discover Artificial Intelligence","issn_l":"2731-0809","issn":["2731-0809"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319965","host_organization_name":"Springer Nature","host_organization_lineage":["https://openalex.org/P4310319965"],"host_organization_lineage_names":["Springer Nature"],"type":"journal"},"license":"cc-by-nc-nd","license_id":"https://openalex.org/licenses/cc-by-nc-nd","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Discover Artificial Intelligence","raw_type":"journal-article"},"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.5837666988372803,"display_name":"Peace, Justice and strong institutions"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":23,"referenced_works":["https://openalex.org/W2296509296","https://openalex.org/W2334853001","https://openalex.org/W2625602624","https://openalex.org/W2740755977","https://openalex.org/W3017093935","https://openalex.org/W3102359135","https://openalex.org/W3191161603","https://openalex.org/W4298394114","https://openalex.org/W4307373104","https://openalex.org/W4313118983","https://openalex.org/W4383375804","https://openalex.org/W4391515290","https://openalex.org/W4401359544","https://openalex.org/W4403605016","https://openalex.org/W4404419221","https://openalex.org/W4405362194","https://openalex.org/W4406097815","https://openalex.org/W4406529390","https://openalex.org/W4407466527","https://openalex.org/W4408150660","https://openalex.org/W4408325477","https://openalex.org/W4409262319","https://openalex.org/W4412042267"],"related_works":[],"abstract_inverted_index":{"Explainable":[0],"artificial":[1],"intelligence":[2],"(XAI)":[3],"has":[4],"emerged":[5],"as":[6],"a":[7,85,110,130,145,198,258],"vital":[8],"necessity":[9],"to":[10,28,244],"deploy":[11],"Artificial":[12],"Intelligence":[13],"based":[14,90,220],"cyberattack":[15,74,247],"detection":[16,43,75,88,147,248],"systems":[17,44],"in":[18,59,230],"operational":[19,254],"Security":[20],"Operations":[21],"Centers":[22],"(SOCs)":[23],"when":[24],"an":[25,72],"analyst":[26,65,210,219],"needs":[27],"quickly":[29],"triage":[30,211],"large":[31],"volumes":[32],"of":[33,48,63,79,138,143,159,164,174,182,202,252],"alerts":[34],"with":[35,249],"strict":[36],"time":[37],"limitations.":[38],"Although":[39],"the":[40,54,61,64,121,136,153,162,172,177,187,193,242,250,253],"new":[41,146],"intrusion":[42],"have":[45],"high":[46],"levels":[47],"detection,":[49],"they":[50],"do":[51],"not":[52],"provide":[53],"actionable":[55],"explanations,":[56],"which":[57,77,128,256],"help":[58],"building":[60],"trust":[62],"and":[66,101,120,132,156,186,233,263],"making":[67],"decisions.":[68],"The":[69,106,167,190],"paper":[70,150],"introduces":[71],"explainability-oriented":[73],"model,":[76],"consists":[78],"various":[80],"alternative":[81],"explanation":[82,226],"models":[83],"over":[84],"fixed":[86],"hybrid":[87],"backbone":[89],"on":[91,135,152,171],"heterogeneous":[92],"graph":[93],"transformers":[94],"(HGT),":[95],"temporal":[96],"sequence":[97],"modeling":[98],"by":[99,104,213],"LSTM,":[100],"ensemble":[102],"classification":[103],"XGBoost.":[105],"proposed":[107,194],"system":[108],"integrates":[109],"feature-level":[111],"attribution":[112],"through":[113,116,124],"SHAP,":[114],"anomaly-level":[115],"autoencoder":[117],"reconstruction":[118],"errors":[119],"relational":[122],"background":[123],"graph-based":[125],"attention":[126],"analysis,":[127],"builds":[129],"single":[131],"analyst-friendly":[133],"report":[134],"explanations":[137],"each":[139],"network":[140],"flow.":[141],"Instead":[142],"introducing":[144],"algorithm,":[148],"this":[149,239],"concentrates":[151],"systematic":[154],"introduction":[155],"performance":[157],"analysis":[158],"explainability":[160,195],"within":[161],"context":[163],"real-time":[165],"SOC.":[166],"framework":[168],"is":[169,227,257],"tested":[170],"dataset":[173],"UNSW-NB15":[175],"where":[176],"key":[178],"aspects":[179],"are":[180],"fidelity":[181],"explainability,":[183],"computational":[184],"cost,":[185],"practical":[188],"usability.":[189],"outcome":[191],"indicates":[192],"pipeline":[196],"carries":[197],"low":[199],"latency":[200],"overhead":[201],"about":[203],"25":[204],"ms":[205],"per":[206],"flow":[207],"while":[208],"improving":[209],"accuracy":[212],"14%in":[214],"controlled":[215],"evaluation":[216],"settings.":[217],"An":[218],"test":[221],"also":[222],"illustrates":[223],"how":[224],"multi-modal":[225],"especially":[228],"useful":[229],"promoting":[231],"quicker":[232],"more":[234],"confident":[235],"alert":[236],"triage.":[237],"Overall,":[238],"article":[240],"demonstrates":[241],"need":[243],"reconcile":[245],"explainable":[246],"constraints":[251],"world,":[255],"plausible":[259],"step":[260],"towards":[261],"trustworthy":[262],"deployable":[264],"AI-based":[265],"security":[266],"systems.":[267]},"counts_by_year":[],"updated_date":"2026-07-29T09:40:50.615796","created_date":"2026-05-11T00:00:00"}