Search papers, labs, and topics across Lattice.
This paper introduces an ensemble learning framework for network traffic anomaly detection in embedded systems, combining Random Forest, Gradient Boosting, and SVMs. It leverages SHAP values to provide interpretability, identifying `packet_count_5s`, `inter_arrival_time`, and `spectral_entropy` as key features influencing anomaly detection. Experiments on real-world network traffic data show that a Random Forest ensemble achieves 90% accuracy and 0.617 AUC, highlighting the effectiveness and interpretability of the approach.
You can now pinpoint the network traffic features most responsible for triggering anomaly detection, thanks to SHAP-guided ensemble learning.
Network security threats in embedded systems pose significant challenges to critical infrastructure protection. This paper presents a comprehensive framework combining ensemble learning methods with explainable artificial intelligence (XAI) techniques for robust anomaly detection in network traffic. We evaluate multiple machine learning models including Random Forest, Gradient Boosting, Support Vector Machines, and ensemble methods on a real-world network traffic dataset containing 19 features derived from packet-level and frequency domain characteristics. Our experimental results demonstrate that ensemble methods achieve superior performance, with Random Forest attaining 90% accuracy and an AUC of 0.617 on validation data. Furthermore, we employ SHAP (SHapley Additive exPlanations) analysis to provide interpretable insights into model predictions, revealing that packet_count_5s,inter_arrival_time, and spectral_entropy are the most influential features for anomaly detection. The integration of XAI techniques enhances model trustworthiness and facilitates deployment in security-critical embedded systems where interpretability is paramount.
