{"id":"https://openalex.org/W4389154962","doi":"https://doi.org/10.1145/3630050.3630177","title":"Explainability-based Metrics to Help Cyber Operators Find and Correct Misclassified Cyberattacks","display_name":"Explainability-based Metrics to Help Cyber Operators Find and Correct Misclassified Cyberattacks","publication_year":2023,"publication_date":"2023-11-30","ids":{"openalex":"https://openalex.org/W4389154962","doi":"https://doi.org/10.1145/3630050.3630177"},"language":"en","primary_location":{"id":"doi:10.1145/3630050.3630177","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3630050.3630177","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 on Explainable and Safety Bounded, Fidelitous, Machine Learning for Networking","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5079202000","display_name":"Robin Duraz","orcid":"https://orcid.org/0000-0001-8364-2989"},"institutions":[{"id":"https://openalex.org/I161929037","display_name":"Universit\u00e9 de Bretagne Occidentale","ror":"https://ror.org/01b8h3982","country_code":"FR","type":"education","lineage":["https://openalex.org/I161929037"]},{"id":"https://openalex.org/I4210123702","display_name":"Laboratoire des Sciences et Techniques de l\u2019Information de la Communication et de la Connaissance","ror":"https://ror.org/0266kfd37","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I180375564","https://openalex.org/I201181511","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I4210123702","https://openalex.org/I4210127572","https://openalex.org/I4210145102","https://openalex.org/I4210148559","https://openalex.org/I4210159245","https://openalex.org/I4405260085"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Robin Duraz","raw_affiliation_strings":["Chaire of Naval Cyberdefense, Lab-STICC, Brest, France"],"raw_orcid":"https://orcid.org/0000-0001-8364-2989","affiliations":[{"raw_affiliation_string":"Chaire of Naval Cyberdefense, Lab-STICC, Brest, France","institution_ids":["https://openalex.org/I161929037","https://openalex.org/I4210123702"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5020780913","display_name":"David Esp\u00e8s","orcid":"https://orcid.org/0000-0003-3445-947X"},"institutions":[{"id":"https://openalex.org/I161929037","display_name":"Universit\u00e9 de Bretagne Occidentale","ror":"https://ror.org/01b8h3982","country_code":"FR","type":"education","lineage":["https://openalex.org/I161929037"]},{"id":"https://openalex.org/I4210123702","display_name":"Laboratoire des Sciences et Techniques de l\u2019Information de la Communication et de la Connaissance","ror":"https://ror.org/0266kfd37","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I180375564","https://openalex.org/I201181511","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I4210123702","https://openalex.org/I4210127572","https://openalex.org/I4210145102","https://openalex.org/I4210148559","https://openalex.org/I4210159245","https://openalex.org/I4405260085"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"David Espes","raw_affiliation_strings":["UBO, Lab-STICC, Brest, France"],"raw_orcid":"https://orcid.org/0000-0003-3445-947X","affiliations":[{"raw_affiliation_string":"UBO, Lab-STICC, Brest, France","institution_ids":["https://openalex.org/I161929037","https://openalex.org/I4210123702"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5047750057","display_name":"Julien Francq","orcid":"https://orcid.org/0000-0002-4604-4522"},"institutions":[{"id":"https://openalex.org/I4210137815","display_name":"Naval Group (France)","ror":"https://ror.org/03rks9355","country_code":"FR","type":"company","lineage":["https://openalex.org/I4210137815"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Julien Francq","raw_affiliation_strings":["Naval Group, Naval Cyber Laboratory, Ollioules, France"],"raw_orcid":"https://orcid.org/0000-0002-4604-4522","affiliations":[{"raw_affiliation_string":"Naval Group, Naval Cyber Laboratory, Ollioules, France","institution_ids":["https://openalex.org/I4210137815"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5043411973","display_name":"Sandrine Vaton","orcid":"https://orcid.org/0000-0001-8940-6004"},"institutions":[{"id":"https://openalex.org/I161929037","display_name":"Universit\u00e9 de Bretagne Occidentale","ror":"https://ror.org/01b8h3982","country_code":"FR","type":"education","lineage":["https://openalex.org/I161929037"]},{"id":"https://openalex.org/I4210123702","display_name":"Laboratoire des Sciences et Techniques de l\u2019Information de la Communication et de la Connaissance","ror":"https://ror.org/0266kfd37","country_code":"FR","type":"facility","lineage":["https://openalex.org/I1294671590","https://openalex.org/I1294671590","https://openalex.org/I180375564","https://openalex.org/I201181511","https://openalex.org/I205703379","https://openalex.org/I2802204017","https://openalex.org/I4210123702","https://openalex.org/I4210127572","https://openalex.org/I4210145102","https://openalex.org/I4210148559","https://openalex.org/I4210159245","https://openalex.org/I4405260085"]},{"id":"https://openalex.org/I4210127572","display_name":"IMT Atlantique","ror":"https://ror.org/030hj3061","country_code":"FR","type":"education","lineage":["https://openalex.org/I205703379","https://openalex.org/I4210127572"]}],"countries":["FR"],"is_corresponding":false,"raw_author_name":"Sandrine Vaton","raw_affiliation_strings":["IMT Atlantique, Lab-STICC, Brest, France"],"raw_orcid":"https://orcid.org/0000-0001-8940-6004","affiliations":[{"raw_affiliation_string":"IMT Atlantique, Lab-STICC, Brest, France","institution_ids":["https://openalex.org/I161929037","https://openalex.org/I4210123702","https://openalex.org/I4210127572"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":3,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"9","last_page":"15"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9980000257492065,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9968000054359436,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12026","display_name":"Explainable Artificial Intelligence (XAI)","score":0.9957000017166138,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/correctness","display_name":"Correctness","score":0.8967252373695374},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.8265371322631836},{"id":"https://openalex.org/keywords/completeness","display_name":"Completeness (order theory)","score":0.785578727722168},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.5310968160629272},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.5189080834388733},{"id":"https://openalex.org/keywords/quality","display_name":"Quality (philosophy)","score":0.511214017868042},{"id":"https://openalex.org/keywords/context","display_name":"Context (archaeology)","score":0.5022211074829102},{"id":"https://openalex.org/keywords/usable","display_name":"USable","score":0.4915395677089691},{"id":"https://openalex.org/keywords/operator","display_name":"Operator (biology)","score":0.479230672121048},{"id":"https://openalex.org/keywords/point","display_name":"Point (geometry)","score":0.47691890597343445},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.44098758697509766},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3612520694732666},{"id":"https://openalex.org/keywords/machine-learning","display_name":"Machine learning","score":0.33526498079299927},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.13367179036140442},{"id":"https://openalex.org/keywords/world-wide-web","display_name":"World Wide Web","score":0.07755431532859802},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.07574298977851868}],"concepts":[{"id":"https://openalex.org/C55439883","wikidata":"https://www.wikidata.org/wiki/Q360812","display_name":"Correctness","level":2,"score":0.8967252373695374},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8265371322631836},{"id":"https://openalex.org/C17231256","wikidata":"https://www.wikidata.org/wiki/Q5156540","display_name":"Completeness (order theory)","level":2,"score":0.785578727722168},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.5310968160629272},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.5189080834388733},{"id":"https://openalex.org/C2779530757","wikidata":"https://www.wikidata.org/wiki/Q1207505","display_name":"Quality (philosophy)","level":2,"score":0.511214017868042},{"id":"https://openalex.org/C2779343474","wikidata":"https://www.wikidata.org/wiki/Q3109175","display_name":"Context (archaeology)","level":2,"score":0.5022211074829102},{"id":"https://openalex.org/C2780615836","wikidata":"https://www.wikidata.org/wiki/Q2471869","display_name":"USable","level":2,"score":0.4915395677089691},{"id":"https://openalex.org/C17020691","wikidata":"https://www.wikidata.org/wiki/Q139677","display_name":"Operator (biology)","level":5,"score":0.479230672121048},{"id":"https://openalex.org/C28719098","wikidata":"https://www.wikidata.org/wiki/Q44946","display_name":"Point (geometry)","level":2,"score":0.47691890597343445},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.44098758697509766},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3612520694732666},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.33526498079299927},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.13367179036140442},{"id":"https://openalex.org/C136764020","wikidata":"https://www.wikidata.org/wiki/Q466","display_name":"World Wide Web","level":1,"score":0.07755431532859802},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.07574298977851868},{"id":"https://openalex.org/C59822182","wikidata":"https://www.wikidata.org/wiki/Q441","display_name":"Botany","level":1,"score":0.0},{"id":"https://openalex.org/C86803240","wikidata":"https://www.wikidata.org/wiki/Q420","display_name":"Biology","level":0,"score":0.0},{"id":"https://openalex.org/C158448853","wikidata":"https://www.wikidata.org/wiki/Q425218","display_name":"Repressor","level":4,"score":0.0},{"id":"https://openalex.org/C151730666","wikidata":"https://www.wikidata.org/wiki/Q7205","display_name":"Paleontology","level":1,"score":0.0},{"id":"https://openalex.org/C2524010","wikidata":"https://www.wikidata.org/wiki/Q8087","display_name":"Geometry","level":1,"score":0.0},{"id":"https://openalex.org/C134306372","wikidata":"https://www.wikidata.org/wiki/Q7754","display_name":"Mathematical analysis","level":1,"score":0.0},{"id":"https://openalex.org/C104317684","wikidata":"https://www.wikidata.org/wiki/Q7187","display_name":"Gene","level":2,"score":0.0},{"id":"https://openalex.org/C86339819","wikidata":"https://www.wikidata.org/wiki/Q407384","display_name":"Transcription factor","level":3,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0},{"id":"https://openalex.org/C185592680","wikidata":"https://www.wikidata.org/wiki/Q2329","display_name":"Chemistry","level":0,"score":0.0},{"id":"https://openalex.org/C55493867","wikidata":"https://www.wikidata.org/wiki/Q7094","display_name":"Biochemistry","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3630050.3630177","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3630050.3630177","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2023 on Explainable and Safety Bounded, Fidelitous, Machine Learning for Networking","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"score":0.7900000214576721,"display_name":"Peace, Justice and strong institutions","id":"https://metadata.un.org/sdg/16"}],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":11,"referenced_works":["https://openalex.org/W2282821441","https://openalex.org/W2296509296","https://openalex.org/W3017093935","https://openalex.org/W3036047738","https://openalex.org/W3090540360","https://openalex.org/W4200399545","https://openalex.org/W4224249813","https://openalex.org/W4280639483","https://openalex.org/W4285058242","https://openalex.org/W4295854586","https://openalex.org/W4391130695"],"related_works":["https://openalex.org/W3008339103","https://openalex.org/W2404647514","https://openalex.org/W1667647204","https://openalex.org/W4247536566","https://openalex.org/W3119814709","https://openalex.org/W2018477250","https://openalex.org/W1508895727","https://openalex.org/W4241418540","https://openalex.org/W4311656218","https://openalex.org/W4283813433"],"abstract_inverted_index":{"Machine":[0],"Learning":[1],"(ML)-based":[2],"Intrusion":[3],"Detection":[4],"Systems":[5],"(IDS)":[6],"have":[7,85],"shown":[8],"promising":[9],"performance.":[10],"However,":[11,119],"in":[12,93],"a":[13,26,33,88,155],"human-centered":[14],"context":[15],"where":[16],"they":[17,72],"are":[18,113,129],"used":[19,194],"alongside":[20],"human":[21,82],"operators,":[22],"there":[23],"is":[24,49,97,125],"often":[25,53],"need":[27],"to":[28,64,86,99,120,147,163,185,195],"understand":[29],"the":[30,66,75,79,110,171,176,197,206],"reasons":[31],"of":[32,46,68,78,91,116,158,170,178,188],"particular":[34],"decision.":[35],"EXplainable":[36],"AI":[37],"(XAI)":[38],"has":[39],"partially":[40],"solved":[41],"this":[42],"issue,":[43],"but":[44],"evaluation":[45],"such":[47],"methods":[48,133],"still":[50],"difficult":[51],"and":[52,62,108,182,191],"lacking.":[54],"This":[55],"paper":[56],"revisits":[57],"two":[58],"quantitative":[59],"metrics,":[60],"Completeness":[61,138,181],"Correctness,":[63],"measure":[65],"quality":[67,177],"explanations,":[69],"i.e.,":[70],"if":[71,127],"properly":[73],"reflect":[74],"actual":[76],"behaviour":[77],"IDS.":[80,172],"Because":[81],"operators":[83],"generally":[84],"handle":[87],"huge":[89],"amount":[90],"information":[92],"limited":[94],"time,":[95],"it":[96,124],"important":[98,106,111,151],"ensure":[100],"that":[101,109,144],"explanations":[102,128,145],"do":[103],"not":[104],"miss":[105],"causes,":[107],"features":[112],"indeed":[114],"causes":[115,152],"an":[117],"event.":[118],"be":[121,164,193],"more":[122],"usable,":[123],"better":[126],"compact.":[130],"For":[131],"XAI":[132,179],"based":[134],"on":[135,140],"feature":[136],"importance,":[137],"shows":[139],"some":[141],"public":[142],"datasets":[143],"tend":[146],"point":[148,196],"out":[149],"all":[150],"only":[153],"with":[154,167],"high":[156],"number":[157],"features,":[159],"whereas":[160],"Correctness":[161,183],"seem":[162,184],"highly":[165],"correlated":[166],"prediction":[168],"results":[169],"Finally,":[173],"besides":[174],"evaluating":[175],"methods,":[180],"enable":[186],"identification":[187],"IDS":[189],"failures":[190],"can":[192],"operator":[198],"towards":[199],"suspicious":[200],"activity":[201],"missed":[202],"or":[203],"misclassified":[204],"by":[205],"IDS,":[207],"suggesting":[208],"manual":[209],"investigation":[210],"for":[211],"correction.":[212]},"counts_by_year":[{"year":2025,"cited_by_count":2},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-22T07:51:19.307946","created_date":"2025-10-10T00:00:00"}