Article

Near-Deterministic Reconstruction of Enterprise Firewall Decisions for Policy Audit: Proxy Structure, Context Shift, and Residual Uncertainty

2026-08-05

Abstract excerpt

<title>Abstract</title> <p>Near-perfect supervised performance on firewall logs can reflect deployed decision traces rather than independent threat detection. This study analyzes 1,048,576 Palo Alto traffic-log records with Allow, Drop, and Deny labels from a tool-capped 46-minute window. Direct label-source fields are excluded, and established tree ensembles serve as diagnostic instruments. A model-free audit fi...

Topics

Open a Topic to create a Post that cites this publication.

Identifiers and source

Literature Corpus work: ef07692c-6242-5d14-919b-222b90edc836
DOI: 10.21203/rs.3.rs-10586406/v1

Open publication

Related research

Semantic proximity does not establish scientific evidence.

Click a neighbor to travelStep 1 · 12 closest

Near-Deterministic Reconstruction of Enterprise Firewall Decisions for Policy Audit: Proxy Structure, Context Shift, and Residual UncertaintyDOI 10.21203/rs.3.rs-10586406/v1Read

SynthGuard-ReleaseBench: Locked-Audit Evidence for Synthetic Tabular Data ReleasesSemantic proximity Read

Structural Leakage in Host Intrusion Alert Corpora: An Evaluation Framework for ATT&CK Technique and Tactic MappingSemantic proximity Read

Ethical and Transparent AI in Cyber Defense: An Explainable AI Plugin for Network Intrusion Detection Using SHAP, LIME, and ELI5Semantic proximity Read

Machine Unlearning for GDPR Right-to-Erasure in Antimicrobial Resistance Prediction ModelsSemantic proximity Read

Bridging the Gap: Advancing the Transparency and Trustworthiness of Network Intrusion Detection with Explainable AISemantic proximity Read

A Layered Guardrail Architecture for Agentic AI in Cloud-Native DevOps Pipelines: Design, Implementation, and Empirical Evaluation on Live AWS InfrastructureSemantic proximity Read

DEGA: A Deterministic Diagnostic Evidence Governance Agent for Industrial IoT—A DUDU-BLDC Case StudySemantic proximity Read

An Integrated Observability Intelligence Framework: Bridging Semantic Data Modeling, Caching, and LLM-Powered Multi-Agent Root Cause AnalysisSemantic proximity Read

XAI-Compliance-by-Design: A Modular Framework for GDPR- and AI Act-Aligned Decision Transparency in High-Risk AI SystemsSemantic proximity Read

Classifier-Guided Discrete Diffusion for Malware Family-Conditional Graph GenerationSemantic proximity Read

Towards Sociotechnical Intelligence in Cyber Intrusion Detection: A Systematic Review Integrating ML/DL Performance, Human Adoption, and RAG-Enhanced Explainable AISemantic proximity Read

Beyond Injection Detection: A Positive-Security Prompt Firewall that Closes the Scope and PHI Gap SOTA Classifiers Miss in HealthcareSemantic proximity Read