Abstract:Internet of Things (IoT) is an emerging paradigm that is turning and revolutionizing worldwide cities into smart cities. However, this emergence is accompanied with several cybersecurity concerns due mainly to the data sharing and constant connectivity of IoT networks. To address this problem, multiple Intrusion Detection Systems (IDSs) have been designed as security mechanisms, which showed their efficiency in mitigating several IoT-related attacks, especially when using deep learning (DL) algorithms. Indeed, Deep Neural Networks (DNNs) significantly improve the detection rate of IoT-related intrusions. However, DL-based models are becoming more and more complex, and their decisions are hardly interpreted by users, especially companies’ executive staff and cybersecurity experts. Hence, the corresponding users cannot neither understand and trust DL models decisions, nor optimize their decisions (users) based on DL models outputs. To overcome these limits, Explainable Artificial Intelligence (XAI) is an emerging paradigm of Artificial Intelligence (AI), that provides a set of techniques to help interpreting and understanding predictions made by DL models. Thus, XAI enables to explain the decisions of DL-based IDSs to make them interpretable by cybersecurity experts. In this paper, we design a new XAI-based framework to give explanations to any critical DL-based decisions for IoT-related IDSs. Our framework relies on a novel IDS for IoT networks, that we also develop by leveraging deep neural network, to detect IoT-related intrusions. In addition, our framework uses three main XAI techniques ($i.e.$ , RuleFit, Local Interpretable Model-Agnostic Explanations (LIME), and SHapley Additive exPlanations (SHAP)), on top of our DNN-based model. Our framework can provide both local and global explanations to optimize the interpretation of DL-based decisions. The local explanations target a single/particular DL output, while global explanations focus on deducing the most important features that have conducted to each made decision (e.g., intrusion detection). Thus, our proposed framework introduces more transparency and trust between the decisions made by our DL-based IDS model and cybersecurity experts. Both NSL-KDD and UNSW-NB15 datasets are used to validate the feasibility of our XAI framework. The experimental results show the efficiency of our framework to improve the interpretability of the IoT IDS against well-known IoT attacks, and help the cybersecurity experts get a better understanding of IDS decisions.

Explainable AI and Deep Autoencoders Based Security Framework for IoT Network Attack Certainty (Extended Abstract)

“Why Should I Trust Your IDS?”: An Explainable Deep Learning Framework for Intrusion Detection Systems in Internet of Things Networks

An Adaptive End-to-End IoT Security Framework Using Explainable AI and LLMs

Improving IoT Security With Explainable AI: Quantitative Evaluation of Explainability for IoT Botnet Detection

Utilizing the Ensemble Learning and XAI for Performance Improvements in IoT Network Attack Detection

Explaining Network Intrusion Detection System Using Explainable AI Framework

Neurosymbolic Learning in the XAI Framework for Enhanced Cyberattack Detection with Expert Knowledge Integration

Deceiving Post-Hoc Explainable AI (XAI) Methods in Network Intrusion Detection

Trust My IDS: an Explainable AI Integrated Deep Learning-Based Transparent Threat Detection System for Industrial Networks

HEN: a Novel Hybrid Explainable Neural Network Based Framework for Robust Network Intrusion Detection

An Explainable Machine Learning Framework for Intrusion Detection Systems

Explainable AI over the Internet of Things (IoT): Overview, State-of-the-Art and Future Directions

Self-learning and explainable deep learning network toward the security of artificial intelligence of things

LENS-XAI: Redefining Lightweight and Explainable Network Security through Knowledge Distillation and Variational Autoencoders for Scalable Intrusion Detection in Cybersecurity

XAI-IoT: An Explainable AI Framework for Enhancing Anomaly Detection in IoT Systems

Explainable and Data-Efficient Deep Learning for Enhanced Attack Detection in IIoT Ecosystem

Advancing IoT security: a comprehensive AI-based trust framework for intrusion detection

Explainable Intrusion Detection Systems (X-IDS): A Survey of Current Methods, Challenges, and Opportunities

Explainable AI for Medical Image Analysis in Medical Cyber-Physical Systems: Enhancing Transparency and Trustworthiness of IoMT

E-XAI: Evaluating Black-Box Explainable AI Frameworks for Network Intrusion Detection

Zero-Trust Marine Cyberdefense for IoT-Based Communications: An Explainable Approach