Article

A Dynamic Explainable AI FrameworkforReal-Time Intrusion Detection andAutomatedAlert Prioritization in Security OperationCenters

2026-06-24

Abstract excerpt

<title>Abstract</title> <p>Security Operation Center (SOC) analysts face an overwhelming volume of 50--100 security alerts per hour, leading to cognitive fatigue and delayed incident response. The global mean time to detect a data breach is 181 days, enabling attackers to inflict an average financial loss of USD~5.46 million per breach. Existing intrusion detection systems (IDS) suffer from high false-positive ra...

Topics

Open a Topic to create a Post that cites this publication.

Identifiers and source

Literature Corpus work: f275b317-561d-5344-bc89-4d58f94b9f28
DOI: 10.21203/rs.3.rs-9603260/v1

Open publication

Related research

Semantic proximity does not establish scientific evidence.

Click a neighbor to travelStep 1 · 12 closest

A Dynamic Explainable AI FrameworkforReal-Time Intrusion Detection andAutomatedAlert Prioritization in Security OperationCentersDOI 10.21203/rs.3.rs-9603260/v1Read

Ethical and Transparent AI in Cyber Defense: An Explainable AI Plugin for Network Intrusion Detection Using SHAP, LIME, and ELI5Semantic proximity Read

A Hybrid Explainable AI Framework for Cyber Threat Detection and ResponseSemantic proximity Read

Bridging the Gap: Advancing the Transparency and Trustworthiness of Network Intrusion Detection with Explainable AISemantic proximity Read

Next-Generation Cyber Defense: Transformer-Based AI for Threat Detection and Autonomous Response in Dynamic EnvironmentsSemantic proximity Read

AI-Driven Threat Detection and Response: Toward Autonomous Cyber Defense SystemsSemantic proximity Read

SentinelSphere: An AI-driven cybersecurity platform integrating real-time threat detection with security awareness educationSemantic proximity Read

Towards Sociotechnical Intelligence in Cyber Intrusion Detection: A Systematic Review Integrating ML/DL Performance, Human Adoption, and RAG-Enhanced Explainable AISemantic proximity Read

An Explainable Artificial Intelligence Framework for Decision-Making in Critical Information Technology SystemsSemantic proximity Read

Using LLMs as AI Agents to Identify False Positive Alerts in Security Operation CenterSemantic proximity Read

Enhancing Threat Hunting with Splunk and Generative AI forAutomated Security OperationsSemantic proximity Read

Use of Explainable Artificial Intelligence for Analyzing and Explaining Intrusion Detection SystemsSemantic proximity Read