{"id":"https://openalex.org/W4400447378","doi":"https://doi.org/10.1109/access.2024.3425472","title":"SXAD: Shapely eXplainable AI-Based Anomaly Detection Using Log Data","display_name":"SXAD: Shapely eXplainable AI-Based Anomaly Detection Using Log Data","publication_year":2024,"publication_date":"2024-01-01","ids":{"openalex":"https://openalex.org/W4400447378","doi":"https://doi.org/10.1109/access.2024.3425472"},"language":"en","primary_location":{"id":"doi:10.1109/access.2024.3425472","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3425472","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2024.3425472","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5109000185","display_name":"Kashif Alam","orcid":"https://orcid.org/0009-0004-5877-2852"},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Kashif Alam","raw_affiliation_strings":["Department of Computer Science, Faculty of Computing and AI, Air University, Islamabad, Pakistan"],"raw_orcid":"https://orcid.org/0009-0004-5877-2852","affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Computing and AI, Air University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5106182605","display_name":"Kashif Kifayat","orcid":"https://orcid.org/0000-0001-5088-0825"},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Kashif Kifayat","raw_affiliation_strings":["Department of Cyber Security, Faculty of Computing and AI, Air University, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Cyber Security, Faculty of Computing and AI, Air University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5022474498","display_name":"Gabriel Avelino Sampedro","orcid":"https://orcid.org/0000-0003-2354-4409"},"institutions":[{"id":"https://openalex.org/I4242118","display_name":"De La Salle-College of Saint Benilde","ror":"https://ror.org/00wpfwd87","country_code":"PH","type":"education","lineage":["https://openalex.org/I4242118"]}],"countries":["PH"],"is_corresponding":false,"raw_author_name":"Gabriel Avelino Sampedro","raw_affiliation_strings":["School of Management and Information Technology, De La Salle-College of Saint Benilde, Manila, Philippines"],"raw_orcid":"https://orcid.org/0000-0003-2354-4409","affiliations":[{"raw_affiliation_string":"School of Management and Information Technology, De La Salle-College of Saint Benilde, Manila, Philippines","institution_ids":["https://openalex.org/I4242118"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5036283308","display_name":"Vincent Karovi\u010d","orcid":"https://orcid.org/0000-0001-9946-7329"},"institutions":[{"id":"https://openalex.org/I74788687","display_name":"Comenius University Bratislava","ror":"https://ror.org/0587ef340","country_code":"SK","type":"education","lineage":["https://openalex.org/I74788687"]}],"countries":["SK"],"is_corresponding":false,"raw_author_name":"Vincent Karovi\u010d","raw_affiliation_strings":["Department of Information Management and Business Systems, Faculty of Management, Comenius University Bratislava, Bratislava, Slovakia"],"raw_orcid":"https://orcid.org/0000-0001-9946-7329","affiliations":[{"raw_affiliation_string":"Department of Information Management and Business Systems, Faculty of Management, Comenius University Bratislava, Bratislava, Slovakia","institution_ids":["https://openalex.org/I74788687"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5017327917","display_name":"Tariq Naeem","orcid":"https://orcid.org/0000-0003-4924-1852"},"institutions":[{"id":"https://openalex.org/I899713450","display_name":"Air University","ror":"https://ror.org/03yfe9v83","country_code":"PK","type":"education","lineage":["https://openalex.org/I899713450"]}],"countries":["PK"],"is_corresponding":false,"raw_author_name":"Tariq Naeem","raw_affiliation_strings":["Department of Computer Science, Faculty of Computing and AI, Air University, Islamabad, Pakistan"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Department of Computer Science, Faculty of Computing and AI, Air University, Islamabad, Pakistan","institution_ids":["https://openalex.org/I899713450"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":5,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":1850,"currency":"USD","value_usd":1850},"apc_paid":{"value":1850,"currency":"USD","value_usd":1850},"fwci":7.493,"has_fulltext":false,"cited_by_count":24,"citation_normalized_percentile":{"value":0.97644316,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":90,"max":100},"biblio":{"volume":"12","issue":null,"first_page":"95659","last_page":"95672"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12127","display_name":"Software System Performance and Reliability","score":0.9998999834060669,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9947999715805054,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9761000275611877,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.81639564037323},{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7852051854133606},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.7499065399169922},{"id":"https://openalex.org/keywords/black-box","display_name":"Black box","score":0.6177486777305603},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.5300768613815308},{"id":"https://openalex.org/keywords/anomaly","display_name":"Anomaly (physics)","score":0.5020949840545654},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.47670337557792664},{"id":"https://openalex.org/keywords/trustworthiness","display_name":"Trustworthiness","score":0.4707990884780884},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.4613189399242401},{"id":"https://openalex.org/keywords/white-box","display_name":"White box","score":0.43129879236221313},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.40226462483406067}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.81639564037323},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7852051854133606},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.7499065399169922},{"id":"https://openalex.org/C94966114","wikidata":"https://www.wikidata.org/wiki/Q29256","display_name":"Black box","level":2,"score":0.6177486777305603},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.5300768613815308},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.5020949840545654},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.47670337557792664},{"id":"https://openalex.org/C153701036","wikidata":"https://www.wikidata.org/wiki/Q659974","display_name":"Trustworthiness","level":2,"score":0.4707990884780884},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.4613189399242401},{"id":"https://openalex.org/C180932941","wikidata":"https://www.wikidata.org/wiki/Q997233","display_name":"White box","level":2,"score":0.43129879236221313},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.40226462483406067},{"id":"https://openalex.org/C13280743","wikidata":"https://www.wikidata.org/wiki/Q131089","display_name":"Geodesy","level":1,"score":0.0},{"id":"https://openalex.org/C205649164","wikidata":"https://www.wikidata.org/wiki/Q1071","display_name":"Geography","level":0,"score":0.0},{"id":"https://openalex.org/C26873012","wikidata":"https://www.wikidata.org/wiki/Q214781","display_name":"Condensed matter physics","level":1,"score":0.0},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.0},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2024.3425472","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3425472","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:aa543fc4b5c64677bd47ed3e3fafc5c8","is_oa":true,"landing_page_url":"https://doaj.org/article/aa543fc4b5c64677bd47ed3e3fafc5c8","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 12, Pp 95659-95672 (2024)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2024.3425472","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2024.3425472","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":52,"referenced_works":["https://openalex.org/W228207274","https://openalex.org/W2053075547","https://openalex.org/W2204335237","https://openalex.org/W2208211896","https://openalex.org/W2516587643","https://openalex.org/W2560021099","https://openalex.org/W2562383263","https://openalex.org/W2745980806","https://openalex.org/W2754665629","https://openalex.org/W2755791218","https://openalex.org/W2756452435","https://openalex.org/W2765467597","https://openalex.org/W2767094836","https://openalex.org/W2883560233","https://openalex.org/W2898998129","https://openalex.org/W2903478803","https://openalex.org/W2911727988","https://openalex.org/W2945020349","https://openalex.org/W2947815220","https://openalex.org/W2965838158","https://openalex.org/W2983753125","https://openalex.org/W2993658339","https://openalex.org/W3016874949","https://openalex.org/W3018898752","https://openalex.org/W3040266635","https://openalex.org/W3100214273","https://openalex.org/W3109519143","https://openalex.org/W3135550350","https://openalex.org/W3146613606","https://openalex.org/W3183619936","https://openalex.org/W3204153914","https://openalex.org/W3216065183","https://openalex.org/W4213258821","https://openalex.org/W4214586787","https://openalex.org/W4283077289","https://openalex.org/W4283159491","https://openalex.org/W4286432986","https://openalex.org/W4320525798","https://openalex.org/W4360996547","https://openalex.org/W4376288669","https://openalex.org/W4377226909","https://openalex.org/W4378365142","https://openalex.org/W4378647935","https://openalex.org/W4384407578","https://openalex.org/W4385059984","https://openalex.org/W4385423342","https://openalex.org/W4386142022","https://openalex.org/W4386255686","https://openalex.org/W4387734759","https://openalex.org/W4390494339","https://openalex.org/W4391909893","https://openalex.org/W4391935121"],"related_works":["https://openalex.org/W3030836721","https://openalex.org/W2797441709","https://openalex.org/W2346578521","https://openalex.org/W2047881532","https://openalex.org/W4297660007","https://openalex.org/W2886918272","https://openalex.org/W1984273188","https://openalex.org/W2943982549","https://openalex.org/W2998015774","https://openalex.org/W4387589990"],"abstract_inverted_index":{"Artificial":[0,36],"Intelligence":[1,37],"(AI)":[2],"has":[3,217],"made":[4],"tremendous":[5],"progress":[6],"in":[7,26,220],"anomaly":[8],"detection.":[9],"However,":[10],"AI":[11],"models":[12,198],"work":[13,216],"as":[14,186],"a":[15,27,45,147,151,177],"black-box,":[16],"making":[17],"it":[18,145,158],"challenging":[19],"to":[20,70,80,97,128,156],"provide":[21],"reasoning":[22],"behind":[23],"their":[24],"judgments":[25,75],"Log":[28,224],"Anomaly":[29,93,225],"Detection":[30,94,226],"(LAD).":[31],"To":[32],"the":[33,90,104,113,141,169,221],"rescue,":[34],"Explainable":[35],"(XAI)":[38],"improves":[39],"system":[40,71,82],"log":[41],"analysis.":[42],"It":[43,164],"follows":[44],"white-box":[46,152],"model":[47,149],"for":[48],"transparency,":[49],"understandability,":[50],"trustworthiness,":[51,107],"and":[52,58,76,84,108,131,162,180,193,206],"dependability":[53],"of":[54,203,223,230],"Machine":[55],"Learning":[56,60],"(ML)":[57],"Deep":[59],"(DL)":[61],"Models.":[62],"In":[63],"addition,":[64],"Shapely":[65,91],"Additive":[66],"Explanation":[67],"(SHAP),":[68],"added":[69],"dynamics,":[72],"makes":[73],"informed":[74],"adoptable":[77],"proactive":[78],"methods":[79],"optimize":[81],"functionality":[83],"reliability.":[85],"Therefore,":[86],"this":[87],"paper":[88],"proposed":[89],"eXplainable":[92],"(SXAD)":[95],"framework":[96,111],"identify":[98],"different":[99],"events":[100,134],"(features)":[101],"that":[102],"impact":[103],"models\u2019":[105],"interpretability,":[106],"explainability.":[109],"The":[110],"utilizes":[112,165],"Kernel":[114],"SHAP":[115],"approach,":[116],"which":[117],"is":[118],"based":[119],"on":[120],"Shapley":[121],"values":[122],"principle,":[123],"providing":[124],"an":[125],"innovative":[126],"approach":[127],"event":[129],"selection":[130],"identifying":[132],"specific":[133],"causing":[135],"abnormal":[136],"behavior.":[137],"This":[138],"study":[139],"addresses":[140],"LAD":[142],"by":[143],"transforming":[144],"from":[146,168],"black-box":[148],"into":[150],"one,":[153],"leveraging":[154],"XAI":[155],"make":[157],"transparent,":[159],"interpretable,":[160],"explainable,":[161],"dependable.":[163],"benchmark":[166],"data":[167],"Hadoop":[170],"Distributed":[171],"File":[172],"System":[173],"(HDFS),":[174],"organized":[175],"using":[176],"Drain":[178],"parser,":[179],"employs":[181],"several":[182],"ML":[183],"models,":[184],"such":[185],"Decision":[187],"Tree":[188],"(DT),":[189],"Random":[190],"Forest":[191],"(RF),":[192],"Gradient":[194],"Boosting":[195],"(GB).":[196],"These":[197],"achieve":[199],"impressive":[200],"accuracy":[201],"rates":[202],"99.99%,":[204,207],"99.85%,":[205],"respectively.":[208],"Our":[209],"contribution":[210],"are":[211],"novel":[212],"because":[213],"no":[214],"earlier":[215],"been":[218],"done":[219],"area":[222],"(LAD)":[227],"with":[228],"integration":[229],"XAI-SHAP.":[231]},"counts_by_year":[{"year":2026,"cited_by_count":11},{"year":2025,"cited_by_count":12},{"year":2024,"cited_by_count":1}],"updated_date":"2026-06-11T09:08:48.828518","created_date":"2025-10-10T00:00:00"}