undefined

Blockchain and explainable AI for enhanced decision making in cyber threat detection

Year of publication

2024

Authors

Kumar Prabhat; Javeed Danish; Kumar Randhir; Islam AKM Najmul

Abstract

Artificial Intelligence (AI) based cyber threat detection tools are widely used to process and analyze a large amount of data for improved intrusion detection performance. However, these models are often considered as black box by the cybersecurity experts due to their inability to comprehend or interpret the reasoning behind the decisions. Moreover, AI-based threat hunting is data-driven and is usually modeled using the data provided by multiple cloud vendors. This is another critical challenge, as a malicious cloud can provide false information (i.e., insider attacks) and can degrade the threat-hunting capability. In this paper, we present a blockchain-enabled eXplainable AI (XAI) for enhancing the decision-making capability of cyber threat detection in the context of Smart Healthcare Systems. Specifically, first, we use blockchain to validate and store data between multiple cloud vendors by implementing a Clique Proof-of-Authority (C-PoA) consensus. Second, a novel deep learning-based threat-hunting model is built by combining Parallel Stacked Long Short Term Memory (PSLSTM) networks with a multi-head attention mechanism for improved attack detection. The extensive experiment confirms its potential to be used as an enhanced decision support system by cybersecurity analysts.
Show more

Organizations and authors

LUT University

Islam Najmul

Kumar Prabhat Orcid -palvelun logo

Publication type

Publication format

Article

Parent publication type

Journal

Article type

Original article

Audience

Scientific

Peer-reviewed

Peer-Reviewed

MINEDU's publication type classification code

A1 Journal article (refereed), original research

Publication channel information

Volume

54

Issue

8

Pages

1337-1360

​Publication forum

67354

​Publication forum level

2

Open access

Open access in the publisher’s service

Yes

Open access of publication channel

Partially open publication channel

Self-archived

No

Other information

Fields of science

Computer and information sciences

Identified topic

[object Object]

Internationality of the publisher

International

International co-publication

Yes

Co-publication with a company

No

DOI

10.1002/spe.3319

The publication is included in the Ministry of Education and Culture’s Publication data collection

Yes