{"id":"https://openalex.org/W4415707489","doi":"https://doi.org/10.1109/access.2025.3627529","title":"E-RXAI-IoT: A Systematic Evaluation Framework of Rule-Based XAI Methods for Anomaly Detection in IoT Systems","display_name":"E-RXAI-IoT: A Systematic Evaluation Framework of Rule-Based XAI Methods for Anomaly Detection in IoT Systems","publication_year":2025,"publication_date":"2025-01-01","ids":{"openalex":"https://openalex.org/W4415707489","doi":"https://doi.org/10.1109/access.2025.3627529"},"language":"en","primary_location":{"id":"doi:10.1109/access.2025.3627529","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3627529","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://doi.org/10.1109/access.2025.3627529","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5098683526","display_name":"Anna N. Gummadi","orcid":"https://orcid.org/0009-0005-4247-1489"},"institutions":[{"id":"https://openalex.org/I135191193","display_name":"University of Indianapolis","ror":"https://ror.org/052133d12","country_code":"US","type":"education","lineage":["https://openalex.org/I135191193"]},{"id":"https://openalex.org/I55769427","display_name":"Indiana University \u2013 Purdue University Indianapolis","ror":"https://ror.org/05gxnyn08","country_code":"US","type":"education","lineage":["https://openalex.org/I55769427","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Anna Namrita Gummadi","raw_affiliation_strings":["Computer and Information Technology Department, Purdue University in Indianapolis, Indianapolis, IN, USA"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Computer and Information Technology Department, Purdue University in Indianapolis, Indianapolis, IN, USA","institution_ids":["https://openalex.org/I135191193","https://openalex.org/I55769427"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5010413833","display_name":"Elsaid Md. Abdelrahim","orcid":"https://orcid.org/0000-0002-5054-3703"},"institutions":[{"id":"https://openalex.org/I118590987","display_name":"Northern Border University","ror":"https://ror.org/03j9tzj20","country_code":"SA","type":"education","lineage":["https://openalex.org/I118590987"]}],"countries":["SA"],"is_corresponding":false,"raw_author_name":"Elsaid Md Abdelrahim","raw_affiliation_strings":["Computer Science Department, Science College, Northern Border University (NBU), Arar, Saudi Arabia"],"raw_orcid":"https://orcid.org/0000-0002-5054-3703","affiliations":[{"raw_affiliation_string":"Computer Science Department, Science College, Northern Border University (NBU), Arar, Saudi Arabia","institution_ids":["https://openalex.org/I118590987"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5086453659","display_name":"Ibrahim Gad","orcid":"https://orcid.org/0000-0003-3388-9144"},"institutions":[{"id":"https://openalex.org/I21376657","display_name":"Tanta University","ror":"https://ror.org/016jp5b92","country_code":"EG","type":"education","lineage":["https://openalex.org/I21376657"]}],"countries":["EG"],"is_corresponding":false,"raw_author_name":"Ibrahim Gad","raw_affiliation_strings":["Computer Science Department, Faculty of Science, Tanta University, Tanta, Egypt"],"raw_orcid":"https://orcid.org/0000-0003-3388-9144","affiliations":[{"raw_affiliation_string":"Computer Science Department, Faculty of Science, Tanta University, Tanta, Egypt","institution_ids":["https://openalex.org/I21376657"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5007992878","display_name":"Mustafa Abdallah","orcid":"https://orcid.org/0000-0002-9554-9260"},"institutions":[{"id":"https://openalex.org/I135191193","display_name":"University of Indianapolis","ror":"https://ror.org/052133d12","country_code":"US","type":"education","lineage":["https://openalex.org/I135191193"]},{"id":"https://openalex.org/I55769427","display_name":"Indiana University \u2013 Purdue University Indianapolis","ror":"https://ror.org/05gxnyn08","country_code":"US","type":"education","lineage":["https://openalex.org/I55769427","https://openalex.org/I592451"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Mustafa Abdallah","raw_affiliation_strings":["Computer and Information Technology Department, Purdue University in Indianapolis, Indianapolis, IN, USA"],"raw_orcid":"https://orcid.org/0000-0002-9554-9260","affiliations":[{"raw_affiliation_string":"Computer and Information Technology Department, Purdue University in Indianapolis, Indianapolis, IN, USA","institution_ids":["https://openalex.org/I135191193","https://openalex.org/I55769427"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":{"value":2075,"currency":"USD","value_usd":2075},"apc_paid":{"value":2075,"currency":"USD","value_usd":2075},"fwci":1.1245,"has_fulltext":false,"cited_by_count":1,"citation_normalized_percentile":{"value":0.85391558,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":97},"biblio":{"volume":"13","issue":null,"first_page":"188730","last_page":"188754"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.5600000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.5600000023841858,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.2728999853134155,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.026900000870227814,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/interpretability","display_name":"Interpretability","score":0.7926999926567078},{"id":"https://openalex.org/keywords/anomaly-detection","display_name":"Anomaly detection","score":0.6671000123023987},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.617900013923645},{"id":"https://openalex.org/keywords/domain","display_name":"Domain (mathematical analysis)","score":0.46380001306533813},{"id":"https://openalex.org/keywords/internet-of-things","display_name":"Internet of Things","score":0.44339999556541443},{"id":"https://openalex.org/keywords/decision-tree","display_name":"Decision tree","score":0.4307999908924103},{"id":"https://openalex.org/keywords/botnet","display_name":"Botnet","score":0.41990000009536743},{"id":"https://openalex.org/keywords/artificial-neural-network","display_name":"Artificial neural network","score":0.35179999470710754}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.823199987411499},{"id":"https://openalex.org/C2781067378","wikidata":"https://www.wikidata.org/wiki/Q17027399","display_name":"Interpretability","level":2,"score":0.7926999926567078},{"id":"https://openalex.org/C739882","wikidata":"https://www.wikidata.org/wiki/Q3560506","display_name":"Anomaly detection","level":2,"score":0.6671000123023987},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.617900013923645},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4936000108718872},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.46650001406669617},{"id":"https://openalex.org/C36503486","wikidata":"https://www.wikidata.org/wiki/Q11235244","display_name":"Domain (mathematical analysis)","level":2,"score":0.46380001306533813},{"id":"https://openalex.org/C81860439","wikidata":"https://www.wikidata.org/wiki/Q251212","display_name":"Internet of Things","level":2,"score":0.44339999556541443},{"id":"https://openalex.org/C84525736","wikidata":"https://www.wikidata.org/wiki/Q831366","display_name":"Decision tree","level":2,"score":0.4307999908924103},{"id":"https://openalex.org/C22735295","wikidata":"https://www.wikidata.org/wiki/Q317671","display_name":"Botnet","level":3,"score":0.41990000009536743},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3734999895095825},{"id":"https://openalex.org/C50644808","wikidata":"https://www.wikidata.org/wiki/Q192776","display_name":"Artificial neural network","level":2,"score":0.35179999470710754},{"id":"https://openalex.org/C2522767166","wikidata":"https://www.wikidata.org/wiki/Q2374463","display_name":"Data science","level":1,"score":0.34290000796318054},{"id":"https://openalex.org/C182590292","wikidata":"https://www.wikidata.org/wiki/Q989632","display_name":"Network security","level":2,"score":0.3151000142097473},{"id":"https://openalex.org/C110875604","wikidata":"https://www.wikidata.org/wiki/Q75","display_name":"The Internet","level":2,"score":0.3052999973297119},{"id":"https://openalex.org/C12997251","wikidata":"https://www.wikidata.org/wiki/Q567560","display_name":"Anomaly (physics)","level":2,"score":0.2904999852180481},{"id":"https://openalex.org/C108583219","wikidata":"https://www.wikidata.org/wiki/Q197536","display_name":"Deep learning","level":2,"score":0.2703000009059906},{"id":"https://openalex.org/C129361004","wikidata":"https://www.wikidata.org/wiki/Q2470236","display_name":"Profitability index","level":2,"score":0.2702000141143799},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C170858558","wikidata":"https://www.wikidata.org/wiki/Q1394144","display_name":"Automatic summarization","level":2,"score":0.26269999146461487},{"id":"https://openalex.org/C12267149","wikidata":"https://www.wikidata.org/wiki/Q282453","display_name":"Support vector machine","level":2,"score":0.2621999979019165},{"id":"https://openalex.org/C75684735","wikidata":"https://www.wikidata.org/wiki/Q858810","display_name":"Big data","level":2,"score":0.25369998812675476},{"id":"https://openalex.org/C139502532","wikidata":"https://www.wikidata.org/wiki/Q1122090","display_name":"Computational intelligence","level":2,"score":0.25130000710487366}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.1109/access.2025.3627529","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3627529","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:f286fe1640d5443b99c3d17557958974","is_oa":true,"landing_page_url":"https://doaj.org/article/f286fe1640d5443b99c3d17557958974","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"IEEE Access, Vol 13, Pp 188730-188754 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.1109/access.2025.3627529","is_oa":true,"landing_page_url":"https://doi.org/10.1109/access.2025.3627529","pdf_url":null,"source":{"id":"https://openalex.org/S2485537415","display_name":"IEEE Access","issn_l":"2169-3536","issn":["2169-3536"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Access","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"The":[0,174],"increasing":[1],"complexity":[2],"of":[3,5,12,155,162],"Internet":[4],"Things":[6],"(IoT)":[7],"systems":[8],"necessitates":[9],"the":[10,116,131,151,160,186],"development":[11],"interpretable":[13],"and":[14,56,72,95,105,125,130,153,172,191,202],"robust":[15],"artificial":[16],"intelligence":[17],"(AI)":[18],"techniques":[19,158],"for":[20,40,177,185],"anomaly":[21,42,164],"detection.":[22],"While":[23],"prior":[24],"work":[25],"has":[26],"explored":[27],"deep":[28],"learning-based":[29],"explainable":[30],"AI":[31,94],"(XAI)":[32],"methods,":[33,200],"systematic":[34],"studies":[35],"evaluating":[36],"rule-based":[37,53,156],"XAI":[38,54,86,157],"approaches":[39],"IoT":[41,114,121,163],"detection":[43],"remain":[44],"limited.":[45],"In":[46],"this":[47,146,196],"paper,":[48],"we":[49,148],"investigate":[50],"two":[51,112],"state-of-the-art":[52],"methods\u2014ANCHOR":[55],"RuleFit\u2014across":[57],"multiple":[58],"machine":[59],"learning":[60],"models:":[61],"Random":[62],"Forest":[63],"(RF),":[64],"Decision":[65],"Tree":[66],"(DT),":[67],"Deep":[68],"Neural":[69],"Network":[70],"(DNN),":[71],"Support":[73],"Vector":[74],"Machine":[75],"(SVM).":[76],"We":[77],"introduce":[78],"a":[79],"comprehensive":[80],"evaluation":[81,179],"framework":[82,108,180],"that":[83],"assesses":[84],"these":[85],"methods":[87],"using":[88],"seven":[89],"critical":[90],"metrics":[91],"mapped":[92],"to":[93,111,188],"security":[96],"domains:":[97],"descriptive":[98],"accuracy,":[99],"sparsity,":[100],"efficiency,":[101],"stability,":[102],"fidelity,":[103],"coverage,":[104],"precision.":[106],"Our":[107],"is":[109,181],"applied":[110],"distinct":[113],"datasets:":[115],"N-BaIoT":[117],"dataset,":[118,133],"which":[119,134],"captures":[120],"botnet":[122],"attacks":[123],"(Mirai":[124],"Gafgyt)":[126],"on":[127,136],"commercial":[128],"devices,":[129],"MEMS":[132],"focuses":[135],"detecting":[137],"anomalies":[138],"in":[139,159,195],"sensor":[140],"readings":[141],"from":[142],"manufacturing":[143],"processes.":[144],"Through":[145],"study,":[147],"systematically":[149],"highlight":[150],"strengths":[152],"limitations":[154],"context":[161],"detection,":[165],"providing":[166],"practical":[167],"insights":[168],"into":[169],"their":[170],"interpretability":[171],"robustness.":[173],"source":[175],"code":[176],"our":[178],"made":[182],"publicly":[183],"available":[184],"community":[187],"foster":[189],"reproducibility":[190],"encourage":[192],"further":[193],"research":[194],"domain":[197],"with":[198],"more":[199],"metrics,":[201],"datasets.":[203]},"counts_by_year":[{"year":2026,"cited_by_count":1}],"updated_date":"2026-08-21T09:56:20.448147","created_date":"2025-10-30T00:00:00"}