A Dynamic Explainable AI FrameworkforReal-Time Intrusion Detection andAutomatedAlert Prioritization in Security OperationCenters
This paper proposes the Dynamic Explainable Framework (DEF), a three-stage pipeline integrating time-series Transformers, Graph Convolutional Networks, and post-hoc explainability techniques to achieve high-accuracy intrusion detection, significantly reduce analyst alert fatigue by prioritizing critical incidents, and provide transparent, near-real-time rationales for Security Operation Center environments.