{"id":"https://openalex.org/W4415674855","doi":"https://doi.org/10.1049/ise2/5552833","title":"An Interpretable Network Intrusion Detection Model via Decision Tree Enhanced Deep Attention Network","display_name":"An Interpretable Network Intrusion Detection Model via Decision Tree Enhanced Deep Attention Network","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415674855","doi":"https://doi.org/10.1049/ise2/5552833"},"language":"en","primary_location":{"id":"doi:10.1049/ise2/5552833","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2/5552833","pdf_url":null,"source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1049/ise2/5552833","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5068773146","display_name":"Mingqi Lv","orcid":"https://orcid.org/0000-0003-4810-7491"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Mingqi Lv","raw_affiliation_strings":["College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0003-4810-7491","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114084776","display_name":"Siyang Gan","orcid":"https://orcid.org/0000-0002-7335-5721"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shengduo Gan","raw_affiliation_strings":["College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0002-7335-5721","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100737918","display_name":"Kang Xu","orcid":"https://orcid.org/0000-0003-1001-6287"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Kang Xu","raw_affiliation_strings":["College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5056827411","display_name":"Tieming Chen","orcid":"https://orcid.org/0000-0003-4664-3311"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":true,"raw_author_name":"Tieming Chen","raw_affiliation_strings":["College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0003-4664-3311","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029428788","display_name":"Tiantian Zhu","orcid":"https://orcid.org/0000-0002-8657-662X"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Tiantian Zhu","raw_affiliation_strings":["College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0002-8657-662X","affiliations":[{"raw_affiliation_string":"College of Computer Science and Technology ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5101758654","display_name":"Jinyin Chen","orcid":"https://orcid.org/0000-0002-7153-2755"},"institutions":[{"id":"https://openalex.org/I55712492","display_name":"Zhejiang University of Technology","ror":"https://ror.org/02djqfd08","country_code":"CN","type":"education","lineage":["https://openalex.org/I55712492"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jinyin Chen","raw_affiliation_strings":["College of Information Engineering ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn"],"raw_orcid":"https://orcid.org/0000-0002-7153-2755","affiliations":[{"raw_affiliation_string":"College of Information Engineering ,  Zhejiang University of Technology ,  Hangzhou ,  310023 ,  China , zjut.edu.cn","institution_ids":["https://openalex.org/I55712492"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5056827411"],"corresponding_institution_ids":["https://openalex.org/I55712492"],"apc_list":{"value":2200,"currency":"USD","value_usd":2200},"apc_paid":{"value":2200,"currency":"USD","value_usd":2200},"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.29054809,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"2025","issue":"1","first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7817999720573425,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.7817999720573425,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.03620000183582306,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11652","display_name":"Imbalanced Data Classification Techniques","score":0.02160000056028366,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/deep-learning","display_name":"Deep learning","score":0.828499972820282},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.6430000066757202},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6190000176429749},{"id":"https://openalex.org/keywords/tree","display_name":"Tree (set theory)","score":0.4519999921321869},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.34769999980926514},{"id":"https://openalex.org/keywords/deep-belief-network","display_name":"Deep belief network","score":0.3294999897480011}],"concepts":[{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.828499972820282},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7839999794960022},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.777999997138977},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.6525999903678894},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.6430000066757202},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6190000176429749},{"id":"https://openalex.org/C113174947","wikidata":"https://www.wikidata.org/wiki/Q2859736","display_name":"Tree (set theory)","level":2,"score":0.4519999921321869},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.37720000743865967},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.34769999980926514},{"id":"https://openalex.org/C97385483","wikidata":"https://www.wikidata.org/wiki/Q16954980","display_name":"Deep belief network","level":3,"score":0.3294999897480011},{"id":"https://openalex.org/C2984842247","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep neural networks","level":3,"score":0.3287999927997589},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.2705000042915344},{"id":"https://openalex.org/C2987015589","wikidata":"https://www.wikidata.org/wiki/Q1040098","display_name":"Learning network","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C5481197","wikidata":"https://www.wikidata.org/wiki/Q16766476","display_name":"Decision tree learning","level":3,"score":0.266400009393692},{"id":"https://openalex.org/C150899416","wikidata":"https://www.wikidata.org/wiki/Q1820378","display_name":"Transfer of learning","level":2,"score":0.25690001249313354}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1049/ise2/5552833","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2/5552833","pdf_url":null,"source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:b0a44db3aa6047f0be0c313392fc8f53","is_oa":true,"landing_page_url":"https://doaj.org/article/b0a44db3aa6047f0be0c313392fc8f53","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IET Information Security, Vol 2025 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1049/ise2/5552833","is_oa":true,"landing_page_url":"https://doi.org/10.1049/ise2/5552833","pdf_url":null,"source":{"id":"https://openalex.org/S58852226","display_name":"IET Information Security","issn_l":"1751-8709","issn":["1751-8709","1751-8717"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310311714","host_organization_name":"Institution of Engineering and Technology","host_organization_lineage":["https://openalex.org/P4310311714"],"host_organization_lineage_names":["Institution of Engineering and Technology"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IET Information Security","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G1083766541","display_name":null,"funder_award_id":"62372410","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G6401997768","display_name":"\u6570\u636e\u4e0e\u77e5\u8bc6\u6df7\u5408\u9a71\u52a8\u7684\u590d\u6742\u7f51\u7edc\u653b\u51fb\u68c0\u6d4b\u65b9\u6cd5\u7814\u7a76","funder_award_id":"LZ23F020011","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"},{"id":"https://openalex.org/G8212482623","display_name":"\u9762\u5411\u878d\u5408\u5e94\u7528\u7684\u533a\u5757\u94fe\u5b89\u5168\u8de8\u94fe\u4e0e\u76d1\u7ba1\u539f\u578b\u7cfb\u7edf\u7814\u7a76","funder_award_id":"LD22F020002","funder_id":"https://openalex.org/F4320338464","funder_display_name":"Natural Science Foundation of Zhejiang Province"},{"id":"https://openalex.org/G8825203574","display_name":null,"funder_award_id":"U22B2028","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320338464","display_name":"Natural Science Foundation of Zhejiang Province","ror":"https://ror.org/01h0zpd94"}],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":47,"referenced_works":["https://openalex.org/W1678356000","https://openalex.org/W1787224781","https://openalex.org/W2076618162","https://openalex.org/W2122672392","https://openalex.org/W2150755264","https://openalex.org/W2160841769","https://openalex.org/W2163922914","https://openalex.org/W2282821441","https://openalex.org/W2295739661","https://openalex.org/W2517540742","https://openalex.org/W2604662567","https://openalex.org/W2751399725","https://openalex.org/W2783741806","https://openalex.org/W2796096336","https://openalex.org/W2803414046","https://openalex.org/W2870670057","https://openalex.org/W2885565273","https://openalex.org/W2890991187","https://openalex.org/W2908818413","https://openalex.org/W2921453769","https://openalex.org/W2970940543","https://openalex.org/W2986334213","https://openalex.org/W2996900869","https://openalex.org/W3017093935","https://openalex.org/W3020912042","https://openalex.org/W3094828954","https://openalex.org/W3138819813","https://openalex.org/W3164321464","https://openalex.org/W3191161603","https://openalex.org/W3195999948","https://openalex.org/W3203436613","https://openalex.org/W3205483739","https://openalex.org/W3205985117","https://openalex.org/W4206210655","https://openalex.org/W4210422587","https://openalex.org/W4224883718","https://openalex.org/W4225726009","https://openalex.org/W4249837478","https://openalex.org/W4285058242","https://openalex.org/W4285154911","https://openalex.org/W4367309662","https://openalex.org/W4378365142","https://openalex.org/W4385412351","https://openalex.org/W4387007843","https://openalex.org/W4387859458","https://openalex.org/W4390238465","https://openalex.org/W4404740432"],"related_works":[],"abstract_inverted_index":{"Network":[0,101],"intrusion":[1],"detection":[2,178],"(NID)":[3],"plays":[4],"a":[5,26,33,95,116,121,127,136,188],"crucial":[6],"role":[7],"in":[8],"cybersecurity":[9],"by":[10,114],"identifying":[11],"network":[12,15,56,140],"attacks":[13],"from":[14],"traffic.":[16],"In":[17],"recent":[18],"years,":[19],"the":[20,29,40,54,59,62,71,80,84,111,143,148],"deep":[21,37,65,99,105,122,137,183],"learning":[22,38,66,106,184],"technique":[23],"has":[24],"become":[25],"tendency":[27],"for":[28,110],"NID":[30,45,72,112],"problem.":[31],"However,":[32],"major":[34],"drawback":[35],"of":[36,42,86,155],"is":[39],"lack":[41],"interpretability,":[43],"making":[44],"systems":[46],"(NIDSs)":[47],"difficult":[48],"to":[49,53,70,75,129,141,181],"diagnose":[50],"and":[51,83,133,146,157,169],"response":[52],"detected":[55],"attacks.":[57],"At":[58],"same":[60],"time,":[61],"existing":[63,182],"interpretable":[64,104],"techniques":[67],"cannot":[68],"adapt":[69],"problem":[73,113],"due":[74],"its":[76],"specific":[77],"challenges,":[78],"including":[79,165],"cross\u2010feature":[81,144],"effect":[82,145],"absence":[85],"self\u2010interpretable":[87,131,151],"features.":[88,152],"To":[89],"this":[90,92],"end,":[91],"article":[93],"proposes":[94],"decision":[96,117],"Tree":[97],"enhanced":[98],"Attention":[100],"(TAN),":[102],"an":[103],"model":[107],"specifically":[108],"designed":[109],"integrating":[115],"tree":[118],"(DT)":[119],"into":[120],"attention":[123,139],"network.":[124],"TAN":[125,175],"utilizes":[126],"DT":[128],"extract":[130],"features":[132],"then":[134],"uses":[135],"hierarchical":[138],"capture":[142],"pinpoint":[147],"most":[149],"important":[150],"A":[153],"series":[154],"experiments":[156],"case":[158],"studies":[159],"were":[160],"performed":[161],"on":[162],"public":[163],"datasets,":[164],"KDD99,":[166],"NSL\u2010KDD,":[167],"UNSW\u2010NB15,":[168],"CICIDS2017.":[170],"The":[171],"results":[172],"indicate":[173],"that":[174],"achieves":[176],"competitive":[177],"performance":[179],"compared":[180],"models,":[185],"while":[186],"offering":[187],"more":[189],"intuitive":[190],"interpretation.":[191]},"counts_by_year":[],"updated_date":"2026-07-23T08:03:31.855105","created_date":"2025-10-29T00:00:00"}