{"id":"https://openalex.org/W7160248223","doi":"https://doi.org/10.48550/arxiv.2605.01962","title":"FIRCE: A Framework for Intrusion Response and Conformal Evaluation","display_name":"FIRCE: A Framework for Intrusion Response and Conformal Evaluation","publication_year":2026,"publication_date":"2026-05-03","ids":{"openalex":"https://openalex.org/W7160248223","doi":"https://doi.org/10.48550/arxiv.2605.01962"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2605.01962","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01962","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2605.01962","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5114231071","display_name":"Seth Barrett","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Barrett, Seth","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135344917","display_name":"Lin Li","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Li, Lin","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085777000","display_name":"Gokila Dorai","orcid":"https://orcid.org/0000-0001-5825-7034"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Dorai, Gokila","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5119770650","display_name":"Swarnamugi Rajaganapathy","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Rajaganapathy, Swarnamugi","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.5443000197410583,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T12761","display_name":"Data Stream Mining Techniques","score":0.5443000197410583,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.2808000147342682,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11512","display_name":"Anomaly Detection Techniques and Applications","score":0.03310000151395798,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.6976000070571899},{"id":"https://openalex.org/keywords/granularity","display_name":"Granularity","score":0.6427000164985657},{"id":"https://openalex.org/keywords/testbed","display_name":"Testbed","score":0.6384000182151794},{"id":"https://openalex.org/keywords/conformal-map","display_name":"Conformal map","score":0.636900007724762},{"id":"https://openalex.org/keywords/benchmark","display_name":"Benchmark (surveying)","score":0.5002999901771545},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.4514000117778778},{"id":"https://openalex.org/keywords/a-priori-and-a-posteriori","display_name":"A priori and a posteriori","score":0.40220001339912415},{"id":"https://openalex.org/keywords/chunking","display_name":"Chunking (psychology)","score":0.365200012922287}],"concepts":[{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.6976000070571899},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.6672999858856201},{"id":"https://openalex.org/C177774035","wikidata":"https://www.wikidata.org/wiki/Q1246948","display_name":"Granularity","level":2,"score":0.6427000164985657},{"id":"https://openalex.org/C31395832","wikidata":"https://www.wikidata.org/wiki/Q1318674","display_name":"Testbed","level":2,"score":0.6384000182151794},{"id":"https://openalex.org/C98214594","wikidata":"https://www.wikidata.org/wiki/Q850275","display_name":"Conformal map","level":2,"score":0.636900007724762},{"id":"https://openalex.org/C185798385","wikidata":"https://www.wikidata.org/wiki/Q1161707","display_name":"Benchmark (surveying)","level":2,"score":0.5002999901771545},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.4514000117778778},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.4332999885082245},{"id":"https://openalex.org/C75553542","wikidata":"https://www.wikidata.org/wiki/Q178161","display_name":"A priori and a posteriori","level":2,"score":0.40220001339912415},{"id":"https://openalex.org/C203357204","wikidata":"https://www.wikidata.org/wiki/Q1089605","display_name":"Chunking (psychology)","level":2,"score":0.365200012922287},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.3621000051498413},{"id":"https://openalex.org/C60777511","wikidata":"https://www.wikidata.org/wiki/Q3045002","display_name":"Concept drift","level":3,"score":0.3596999943256378},{"id":"https://openalex.org/C165838908","wikidata":"https://www.wikidata.org/wiki/Q736777","display_name":"Calibration","level":2,"score":0.3458999991416931},{"id":"https://openalex.org/C19012869","wikidata":"https://www.wikidata.org/wiki/Q578372","display_name":"Response time","level":2,"score":0.30309998989105225},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.30000001192092896},{"id":"https://openalex.org/C137524506","wikidata":"https://www.wikidata.org/wiki/Q2247688","display_name":"Anomaly-based intrusion detection system","level":3,"score":0.29899999499320984},{"id":"https://openalex.org/C79403827","wikidata":"https://www.wikidata.org/wiki/Q3988","display_name":"Real-time computing","level":1,"score":0.2989000082015991},{"id":"https://openalex.org/C48105269","wikidata":"https://www.wikidata.org/wiki/Q1141160","display_name":"Header","level":2,"score":0.2987000048160553},{"id":"https://openalex.org/C136695289","wikidata":"https://www.wikidata.org/wiki/Q415568","display_name":"Bitstream","level":3,"score":0.2696000039577484},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.26919999718666077},{"id":"https://openalex.org/C81669768","wikidata":"https://www.wikidata.org/wiki/Q2359161","display_name":"Precision and recall","level":2,"score":0.2680000066757202},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.25699999928474426}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2605.01962","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01962","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2605.01962","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2605.01962","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":"2331-8422","issn":["2331-8422"],"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":null,"license_id":null,"version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Machine":[0],"learning-based":[1],"intrusion":[2],"detection":[3],"systems":[4],"deployed":[5],"in":[6,20,89],"real-world":[7],"environments":[8],"frequently":[9],"suffer":[10],"from":[11],"model":[12,130],"degradation":[13],"due":[14],"to":[15,91,124,142,164],"concept":[16],"drift,":[17],"where":[18],"changes":[19],"traffic":[21],"patterns":[22],"invalidate":[23],"training":[24],"assumptions.":[25],"To":[26],"address":[27],"this,":[28],"we":[29,120],"present":[30],"FIRCE,":[31],"a":[32,102],"Framework":[33],"for":[34],"Intrusion":[35],"Response":[36],"and":[37,50,63,110,117,128,139,161],"Conformal":[38],"Evaluation":[39],"that":[40,84,149],"augments":[41],"supervised":[42],"IDS":[43],"classifiers":[44],"with":[45,73,155],"conformal":[46,56,150],"evaluation-based":[47,151],"uncertainty":[48],"quantification":[49],"drift":[51,95,118,152],"detection.":[52],"FIRCE":[53,77,135],"supports":[54],"four":[55],"evaluation":[57,87],"strategies:":[58],"Inductive,":[59],"Cross,":[60],"Approximate":[61,66],"Transductive,":[62],"our":[64],"proposed":[65],"Cross-Conformal":[67],"Evaluator,":[68],"which":[69],"achieves":[70],"robust":[71,162],"performance":[72],"minimal":[74],"calibration":[75],"overhead.":[76],"also":[78],"introduces":[79],"an":[80,159],"adaptive":[81,156],"chunking":[82],"mechanism":[83],"dynamically":[85],"adjusts":[86],"granularity":[88],"response":[90,163],"stream":[92],"volatility,":[93],"improving":[94],"responsiveness":[96],"while":[97],"preserving":[98],"computational":[99],"efficiency.":[100],"Using":[101],"custom":[103],"IoT":[104],"testbed":[105],"of":[106],"10":[107],"commercial":[108],"devices":[109],"time-series":[111],"network":[112],"captures":[113],"under":[114],"simulated":[115],"attack":[116],"conditions,":[119],"demonstrate":[121],"FIRCE's":[122],"ability":[123],"detect":[125],"distributional":[126],"shifts":[127],"trigger":[129],"retraining.":[131],"We":[132],"additionally":[133],"benchmark":[134],"on":[136],"the":[137],"CICIDS2018":[138],"UNSW-NB15":[140],"datasets":[141],"validate":[143],"its":[144],"generalizability.":[145],"Experimental":[146],"results":[147],"show":[148],"detection,":[153],"combined":[154],"chunking,":[157],"enables":[158],"efficient":[160],"evolving":[165],"threats.":[166]},"counts_by_year":[],"updated_date":"2026-07-28T07:46:37.118299","created_date":"2026-05-06T00:00:00"}