{"id":"https://openalex.org/W4414017297","doi":"https://doi.org/10.3390/jcp5030068","title":"Novel Actionable Counterfactual Explanations for Intrusion Detection Using Diffusion Models","display_name":"Novel Actionable Counterfactual Explanations for Intrusion Detection Using Diffusion Models","publication_year":2025,"publication_date":"2025-09-05","ids":{"openalex":"https://openalex.org/W4414017297","doi":"https://doi.org/10.3390/jcp5030068"},"language":"en","primary_location":{"id":"doi:10.3390/jcp5030068","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5030068","pdf_url":"https://www.mdpi.com/2624-800X/5/3/68/pdf?version=1757067426","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"type":"article","indexed_in":["crossref","doaj"],"open_access":{"is_oa":true,"oa_status":"gold","oa_url":"https://www.mdpi.com/2624-800X/5/3/68/pdf?version=1757067426","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5116310039","display_name":"Vinura Galwaduge","orcid":"https://orcid.org/0000-0003-2650-797X"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":false,"raw_author_name":"Vinura Galwaduge","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Western Ontario, London, ON N6A 5B9, Canada"],"raw_orcid":"https://orcid.org/0000-0003-2650-797X","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Western Ontario, London, ON N6A 5B9, Canada","institution_ids":["https://openalex.org/I125749732"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5049647213","display_name":"Jagath Samarabandu","orcid":"https://orcid.org/0009-0006-5871-6548"},"institutions":[{"id":"https://openalex.org/I125749732","display_name":"Western University","ror":"https://ror.org/02grkyz14","country_code":"CA","type":"education","lineage":["https://openalex.org/I125749732"]}],"countries":["CA"],"is_corresponding":true,"raw_author_name":"Jagath Samarabandu","raw_affiliation_strings":["Department of Electrical and Computer Engineering, University of Western Ontario, London, ON N6A 5B9, Canada"],"raw_orcid":"https://orcid.org/0009-0006-5871-6548","affiliations":[{"raw_affiliation_string":"Department of Electrical and Computer Engineering, University of Western Ontario, London, ON N6A 5B9, Canada","institution_ids":["https://openalex.org/I125749732"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":["https://openalex.org/A5049647213"],"corresponding_institution_ids":["https://openalex.org/I125749732"],"apc_list":{"value":1000,"currency":"CHF","value_usd":1207},"apc_paid":{"value":1000,"currency":"CHF","value_usd":1207},"fwci":2.3072,"has_fulltext":true,"cited_by_count":4,"citation_normalized_percentile":{"value":0.89467887,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"5","issue":"3","first_page":"68","last_page":"68"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.9851999878883362,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10028","display_name":"Topic Modeling","score":0.9646999835968018,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/counterfactual-thinking","display_name":"Counterfactual thinking","score":0.8142462968826294},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.606606125831604},{"id":"https://openalex.org/keywords/diffusion","display_name":"Diffusion","score":0.5214495062828064},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4909229874610901},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.44512271881103516},{"id":"https://openalex.org/keywords/data-mining","display_name":"Data mining","score":0.3608160614967346},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.3418452739715576},{"id":"https://openalex.org/keywords/psychology","display_name":"Psychology","score":0.25212788581848145},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.12484806776046753},{"id":"https://openalex.org/keywords/social-psychology","display_name":"Social psychology","score":0.08808004856109619},{"id":"https://openalex.org/keywords/physics","display_name":"Physics","score":0.07126298546791077}],"concepts":[{"id":"https://openalex.org/C108650721","wikidata":"https://www.wikidata.org/wiki/Q1783253","display_name":"Counterfactual thinking","level":2,"score":0.8142462968826294},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.606606125831604},{"id":"https://openalex.org/C69357855","wikidata":"https://www.wikidata.org/wiki/Q163214","display_name":"Diffusion","level":2,"score":0.5214495062828064},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4909229874610901},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.44512271881103516},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.3608160614967346},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3418452739715576},{"id":"https://openalex.org/C15744967","wikidata":"https://www.wikidata.org/wiki/Q9418","display_name":"Psychology","level":0,"score":0.25212788581848145},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.12484806776046753},{"id":"https://openalex.org/C77805123","wikidata":"https://www.wikidata.org/wiki/Q161272","display_name":"Social psychology","level":1,"score":0.08808004856109619},{"id":"https://openalex.org/C121332964","wikidata":"https://www.wikidata.org/wiki/Q413","display_name":"Physics","level":0,"score":0.07126298546791077},{"id":"https://openalex.org/C97355855","wikidata":"https://www.wikidata.org/wiki/Q11473","display_name":"Thermodynamics","level":1,"score":0.0},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":2,"locations":[{"id":"doi:10.3390/jcp5030068","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5030068","pdf_url":"https://www.mdpi.com/2624-800X/5/3/68/pdf?version=1757067426","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},{"id":"pmh:oai:doaj.org/article:7695cdd2a0a3493690a62314a538f5bd","is_oa":true,"landing_page_url":"https://doaj.org/article/7695cdd2a0a3493690a62314a538f5bd","pdf_url":null,"source":{"id":"https://openalex.org/S4306401280","display_name":"DOAJ (DOAJ: Directory of Open Access Journals)","issn_l":null,"issn":null,"is_oa":false,"is_in_doaj":false,"is_core":false,"host_organization":null,"host_organization_name":null,"host_organization_lineage":[],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by-sa","license_id":"https://openalex.org/licenses/cc-by-sa","version":"submittedVersion","is_accepted":false,"is_published":false,"raw_source_name":"Journal of Cybersecurity and Privacy, Vol 5, Iss 3, p 68 (2025)","raw_type":"article"}],"best_oa_location":{"id":"doi:10.3390/jcp5030068","is_oa":true,"landing_page_url":"https://doi.org/10.3390/jcp5030068","pdf_url":"https://www.mdpi.com/2624-800X/5/3/68/pdf?version=1757067426","source":{"id":"https://openalex.org/S4210232532","display_name":"Journal of Cybersecurity and Privacy","issn_l":"2624-800X","issn":["2624-800X"],"is_oa":true,"is_in_doaj":true,"is_core":true,"host_organization":"https://openalex.org/P4310310987","host_organization_name":"Multidisciplinary Digital Publishing Institute","host_organization_lineage":["https://openalex.org/P4310310987"],"host_organization_lineage_names":["Multidisciplinary Digital Publishing Institute"],"type":"journal"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Journal of Cybersecurity and Privacy","raw_type":"journal-article"},"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G279537525","display_name":null,"funder_award_id":"RGPIN 2017 ?","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"},{"id":"https://openalex.org/G3543545127","display_name":"Active Intrusion Prediction and Response for Computing Devices on the Internet","funder_award_id":"rgpin-2017-04755","funder_id":"https://openalex.org/F4320334593","funder_display_name":"Natural Sciences and Engineering Research Council of Canada"}],"funders":[{"id":"https://openalex.org/F4320334593","display_name":"Natural Sciences and Engineering Research Council of Canada","ror":"https://ror.org/01h531d29"}],"has_content":{"grobid_xml":true,"pdf":true},"content_urls":{"pdf":"https://content.openalex.org/works/W4414017297.pdf","grobid_xml":"https://content.openalex.org/works/W4414017297.grobid-xml"},"referenced_works_count":39,"referenced_works":["https://openalex.org/W2296509296","https://openalex.org/W2789828921","https://openalex.org/W2902900716","https://openalex.org/W2945295328","https://openalex.org/W2963125461","https://openalex.org/W2973319951","https://openalex.org/W2982682021","https://openalex.org/W3006614673","https://openalex.org/W3023497337","https://openalex.org/W3036167779","https://openalex.org/W3047132966","https://openalex.org/W3099844187","https://openalex.org/W3103795814","https://openalex.org/W3104149808","https://openalex.org/W3125997628","https://openalex.org/W3214404698","https://openalex.org/W4210250501","https://openalex.org/W4225150645","https://openalex.org/W4285058242","https://openalex.org/W4285248859","https://openalex.org/W4287329820","https://openalex.org/W4293192745","https://openalex.org/W4295854586","https://openalex.org/W4327656811","https://openalex.org/W4367309662","https://openalex.org/W4378365142","https://openalex.org/W4385568033","https://openalex.org/W4391741433","https://openalex.org/W4396815670","https://openalex.org/W4399407030","https://openalex.org/W4399576156","https://openalex.org/W4400439014","https://openalex.org/W4401454212","https://openalex.org/W4405935219","https://openalex.org/W4406325182","https://openalex.org/W4406595425","https://openalex.org/W4407938051","https://openalex.org/W4412694794","https://openalex.org/W4413024567"],"related_works":["https://openalex.org/W3201448254","https://openalex.org/W4286970243","https://openalex.org/W2066431708","https://openalex.org/W4384133558","https://openalex.org/W3025615835","https://openalex.org/W2364419519","https://openalex.org/W2133389611","https://openalex.org/W2360767377","https://openalex.org/W2017948608","https://openalex.org/W2360951146"],"abstract_inverted_index":{"Modern":[0],"network":[1,88,107],"intrusion":[2,33,89,108,198],"detection":[3,199],"systems":[4],"(NIDSs)":[5],"rely":[6],"on":[7,104,210],"complex":[8],"deep":[9,17],"learning":[10,18],"models.":[11],"However,":[12],"the":[13,27,50,53,55,59,111,120,125,131,147,152,162,192],"\u201cblack-box\u201d":[14],"nature":[15],"of":[16,30,61,113,124,133,177,191],"methods":[19,39],"hinders":[20],"transparency":[21],"and":[22,140,200],"trust":[23],"in":[24],"predictions,":[25,54],"preventing":[26],"timely":[28],"implementation":[29,207],"countermeasures":[31],"against":[32,96],"attacks.":[34,90],"Although":[35],"explainable":[36],"AI":[37],"(XAI)":[38],"provide":[40,84,166],"a":[41,75,175],"solution":[42],"to":[43,155],"this":[44,71,116],"problem":[45],"by":[46,58,171],"providing":[47],"insights":[48],"into":[49,67,174],"reasons":[51],"behind":[52],"explanations":[56,86,143,168],"provided":[57],"majority":[60],"them":[62,173],"cannot":[63],"be":[64],"trivially":[65],"converted":[66],"actionable":[68,85,167,178],"countermeasures.":[69],"In":[70],"work,":[72],"we":[73],"propose":[74],"novel":[76],"tabular":[77],"diffusion-based":[78],"counterfactual":[79,101,127,142,149,180],"explanation":[80,102,128],"framework":[81],"that":[82],"can":[83,165],"for":[87,169,196],"We":[91,158,203],"evaluated":[92],"our":[93,114,206],"proposed":[94,136,163],"algorithm":[95],"several":[97],"other":[98],"publicly":[99,208],"available":[100,209],"algorithms":[103,129],"three":[105],"modern":[106],"datasets.":[109],"To":[110],"best":[112],"knowledge,":[115],"work":[117],"also":[118,159],"presents":[119],"first":[121],"comparative":[122],"analysis":[123],"existing":[126],"within":[130],"context":[132],"NIDSs.":[134],"Our":[135],"method":[137,164],"provides":[138],"plausible":[139],"diverse":[141],"more":[144],"efficiently":[145],"than":[146],"tested":[148],"algorithms,":[150],"reducing":[151],"time":[153],"required":[154],"generate":[156],"explanations.":[157],"demonstrate":[160],"how":[161],"NIDSs":[170],"summarizing":[172],"set":[176],"global":[179],"rules,":[181],"which":[182],"effectively":[183],"filter":[184],"out":[185],"incoming":[186],"attack":[187],"queries.":[188],"This":[189],"ability":[190],"rules":[193],"is":[194],"crucial":[195],"efficient":[197],"defense":[201],"mechanisms.":[202],"have":[204],"made":[205],"GitHub.":[211]},"counts_by_year":[{"year":2026,"cited_by_count":4}],"updated_date":"2026-08-23T07:36:19.812096","created_date":"2025-10-10T00:00:00"}