{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,8,14]],"date-time":"2026-08-14T06:31:31Z","timestamp":1786689091195,"version":"3.56.0"},"reference-count":33,"publisher":"Elsevier BV","license":[{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/tdm\/userlicense\/1.0\/"},{"start":{"date-parts":[[2026,9,1]],"date-time":"2026-09-01T00:00:00Z","timestamp":1788220800000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.elsevier.com\/legal\/tdmrep-license"},{"start":{"date-parts":[[2026,7,9]],"date-time":"2026-07-09T00:00:00Z","timestamp":1783555200000},"content-version":"vor","delay-in-days":0,"URL":"http:\/\/creativecommons.org\/licenses\/by\/4.0\/"}],"funder":[{"DOI":"10.13039\/100012973","name":"Universit\u00e9 de Moncton","doi-asserted-by":"publisher","id":[{"id":"10.13039\/100012973","id-type":"DOI","asserted-by":"publisher"}]},{"DOI":"10.13039\/501100000038","name":"NSERC","doi-asserted-by":"publisher","award":["RGPIN-2025-05918"],"award-info":[{"award-number":["RGPIN-2025-05918"]}],"id":[{"id":"10.13039\/501100000038","id-type":"DOI","asserted-by":"publisher"}]}],"content-domain":{"domain":["elsevier.com","sciencedirect.com"],"crossmark-restriction":true},"short-container-title":["Array"],"published-print":{"date-parts":[[2026,9]]},"DOI":"10.1016\/j.array.2026.101089","type":"journal-article","created":{"date-parts":[[2026,7,20]],"date-time":"2026-07-20T15:44:34Z","timestamp":1784562274000},"page":"101089","update-policy":"https:\/\/doi.org\/10.1016\/elsevier_cm_policy","source":"Crossref","is-referenced-by-count":0,"special_numbering":"C","title":["FRX-IDS: An explainable intrusion detection framework with tamper-evident alert evidence logging"],"prefix":"10.1016","volume":"31","author":[{"ORCID":"https:\/\/orcid.org\/0009-0008-7809-7996","authenticated-orcid":false,"given":"Amal","family":"Ajayan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Shoayee","family":"Alotaibi","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0009-0009-1491-4878","authenticated-orcid":false,"given":"Sghaier","family":"Guizani","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0001-8842-5844","authenticated-orcid":false,"given":"Kirubavathi","family":"G","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Asem I.","family":"Alalwan","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"ORCID":"https:\/\/orcid.org\/0000-0002-5320-1012","authenticated-orcid":false,"given":"Habib","family":"Hamam","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"78","reference":[{"key":"10.1016\/j.array.2026.101089_b1","article-title":"A survey on intrusion detection system in IoT networks","volume":"3","author":"Rahman","year":"2025","journal-title":"Cyber Secur Appl"},{"key":"10.1016\/j.array.2026.101089_b2","doi-asserted-by":"crossref","DOI":"10.1016\/j.comnet.2026.112224","article-title":"XNFT: Explainable network flow transformer for transparent detection of DDoS attacks in real-world networks","volume":"281","author":"Ajayan","year":"2026","journal-title":"Comput Netw"},{"key":"10.1016\/j.array.2026.101089_b3","doi-asserted-by":"crossref","DOI":"10.1016\/j.cose.2025.104542","article-title":"Explainable AI and random forest based reliable intrusion detection system","volume":"157","author":"Wali","year":"2025","journal-title":"Comput Secur"},{"issue":"13","key":"10.1016\/j.array.2026.101089_b4","doi-asserted-by":"crossref","DOI":"10.3390\/app15137329","article-title":"Explainable AI for forensic analysis: A comparative study of SHAP and LIME in intrusion detection models","volume":"15","author":"Hermosilla","year":"2025","journal-title":"Appl Sci"},{"key":"10.1016\/j.array.2026.101089_b5","article-title":"Industrial internet of things (IIoT) forensics: The forgotten concept in the race towards industry 4.0","volume":"5","author":"Kebande","year":"2022","journal-title":"Forensic Sci Int: Rep"},{"issue":"44","key":"10.1016\/j.array.2026.101089_b6","article-title":"A review of artificial intelligence-based intrusion detection in industrial internet of things","volume":"6","author":"Sanjalawe","year":"2026","journal-title":"Discov Internet Things"},{"key":"10.1016\/j.array.2026.101089_b7","doi-asserted-by":"crossref","DOI":"10.1016\/j.scs.2021.102994","article-title":"A new distributed architecture for evaluating AI-based security systems at the edge: Network TON_IoT datasets","volume":"72","author":"Moustafa","year":"2021","journal-title":"Sustain Cities Soc"},{"key":"10.1016\/j.array.2026.101089_b8","series-title":"2015 military communications and information systems conference","first-page":"1","article-title":"UNSW-NB15: a comprehensive data set for network intrusion detection systems (UNSW-NB15 network data set)","author":"Moustafa","year":"2015"},{"issue":"1","key":"10.1016\/j.array.2026.101089_b9","doi-asserted-by":"crossref","first-page":"5","DOI":"10.1023\/A:1010933404324","article-title":"Random forests","volume":"45","author":"Breiman","year":"2001","journal-title":"Mach Learn"},{"issue":"1","key":"10.1016\/j.array.2026.101089_b10","doi-asserted-by":"crossref","first-page":"3","DOI":"10.1007\/s10994-006-6226-1","article-title":"Extremely randomized trees","volume":"63","author":"Geurts","year":"2006","journal-title":"Mach Learn","ISSN":"https:\/\/id.crossref.org\/issn\/1573-0565","issn-type":"print"},{"key":"10.1016\/j.array.2026.101089_b11","series-title":"Proceedings of the 22nd ACM SIGKDD international conference on knowledge discovery and data mining","isbn-type":"print","doi-asserted-by":"crossref","first-page":"785","DOI":"10.1145\/2939672.2939785","article-title":"XGBoost: a scalable tree boosting system","author":"Chen","year":"2016","ISBN":"https:\/\/id.crossref.org\/isbn\/9781450342322"},{"key":"10.1016\/j.array.2026.101089_b12","series-title":"Proceedings of the 31st international conference on neural information processing systems","isbn-type":"print","first-page":"3149","article-title":"LightGBM: a highly efficient gradient boosting decision tree","author":"Ke","year":"2017","ISBN":"https:\/\/id.crossref.org\/isbn\/9781510860964"},{"issue":"60","key":"10.1016\/j.array.2026.101089_b13","article-title":"Advanced system log analyzer for anomaly detection and cyber forensic investigations using LSTM and transformer networks","volume":"14","author":"Chourasiya","year":"2025","journal-title":"J Cloud Comput"},{"key":"10.1016\/j.array.2026.101089_b14","doi-asserted-by":"crossref","DOI":"10.1016\/j.mex.2026.103992","article-title":"A method for forensic-ready intrusion detection using explainable learning, prediction-aware graph modeling, and counterfactual analysis","volume":"16","author":"Guizani","year":"2026","journal-title":"MethodsX","ISSN":"https:\/\/id.crossref.org\/issn\/2215-0161","issn-type":"print"},{"issue":"15","key":"10.1016\/j.array.2026.101089_b15","doi-asserted-by":"crossref","DOI":"10.3390\/s25154841","article-title":"(H-DIR)2: a scalable entropy-based framework for anomaly detection and cybersecurity in cloud IoT data centers","volume":"25","author":"Tosi","year":"2025","journal-title":"Sensors"},{"issue":"58","key":"10.1016\/j.array.2026.101089_b16","article-title":"Hybrid intrusion detection system using blockchain framework","volume":"2022","author":"Khonde","year":"2022","journal-title":"EURASIP J Wirel Commun Netw"},{"issue":"2","key":"10.1016\/j.array.2026.101089_b17","doi-asserted-by":"crossref","DOI":"10.3390\/ai7020039","article-title":"A hybrid intrusion detection framework using deep autoencoder and machine learning models","volume":"7","author":"Hussein","year":"2026","journal-title":"AI"},{"issue":"150","key":"10.1016\/j.array.2026.101089_b18","article-title":"Explainable AI-based innovative hybrid ensemble model for intrusion detection","volume":"13","author":"Ahmed","year":"2024","journal-title":"J Cloud Comput"},{"key":"10.1016\/j.array.2026.101089_b19","doi-asserted-by":"crossref","first-page":"1095","DOI":"10.1007\/s12243-025-01118-9","article-title":"A versatile XAI-based framework for efficient and explainable intrusion detection systems","volume":"80","author":"Nugraha","year":"2025","journal-title":"Ann Telecommun"},{"key":"10.1016\/j.array.2026.101089_b20","doi-asserted-by":"crossref","DOI":"10.1016\/j.neucom.2025.132398","article-title":"DistilXIDS: Efficient, lightweight and explainable transformer-based language model for real-time network intrusion detection","volume":"668","author":"Ajayan","year":"2026","journal-title":"Neurocomputing","ISSN":"https:\/\/id.crossref.org\/issn\/0925-2312","issn-type":"print"},{"key":"10.1016\/j.array.2026.101089_b21","series-title":"LENS-XAI: redefining lightweight and explainable network security through knowledge distillation and variational autoencoders for scalable intrusion detection in cybersecurity","author":"Yagiz","year":"2025"},{"key":"10.1016\/j.array.2026.101089_b22","doi-asserted-by":"crossref","first-page":"33848","DOI":"10.1038\/s41598-025-06761-9","article-title":"Enhanced intrusion detection in cybersecurity through dimensionality reduction and explainable artificial intelligence","volume":"15","author":"Alamro","year":"2025","journal-title":"Sci Rep"},{"key":"10.1016\/j.array.2026.101089_b23","article-title":"Explainable artificial intelligence models in intrusion detection systems","volume":"144","author":"A.L.","year":"2025","journal-title":"Eng Appl Artif Intell"},{"key":"10.1016\/j.array.2026.101089_b24","doi-asserted-by":"crossref","first-page":"112392","DOI":"10.1109\/ACCESS.2022.3216617","article-title":"Explainable intrusion detection systems (X-IDS): A survey of current methods, challenges, and opportunities","volume":"10","author":"Neupane","year":"2022","journal-title":"IEEE Access"},{"key":"10.1016\/j.array.2026.101089_b25","series-title":"Proceedings of the 31st international conference on neural information processing systems","isbn-type":"print","first-page":"4768","article-title":"A unified approach to interpreting model predictions","author":"Lundberg","year":"2017","ISBN":"https:\/\/id.crossref.org\/isbn\/9781510860964"},{"key":"10.1016\/j.array.2026.101089_b26","series-title":"Proceedings of the 22nd ACM SIGKDD international conference on knowledge discovery and data mining","isbn-type":"print","doi-asserted-by":"crossref","first-page":"1135","DOI":"10.1145\/2939672.2939778","article-title":"\u201dWhy should I trust you?\u201d: Explaining the predictions of any classifier","author":"Ribeiro","year":"2016","ISBN":"https:\/\/id.crossref.org\/isbn\/9781450342322"},{"key":"10.1016\/j.array.2026.101089_b27","doi-asserted-by":"crossref","first-page":"23954","DOI":"10.1109\/ACCESS.2024.3365140","article-title":"E-XAI: Evaluating black-box explainable AI frameworks for network intrusion detection","volume":"12","author":"Arreche","year":"2024","journal-title":"IEEE Access"},{"key":"10.1016\/j.array.2026.101089_b28","article-title":"A systematic review on the integration of explainable artificial intelligence in intrusion detection systems to enhancing transparency and interpretability in cybersecurity","volume":"Volume 8 - 2025","author":"Mohale","year":"2025","journal-title":"Front Artif Intell","ISSN":"https:\/\/id.crossref.org\/issn\/2624-8212","issn-type":"print"},{"key":"10.1016\/j.array.2026.101089_b29","doi-asserted-by":"crossref","first-page":"10302","DOI":"10.1109\/TIFS.2024.3488967","article-title":"An interpretable generalization mechanism for accurately detecting anomaly and identifying networking intrusion techniques","volume":"19","author":"Pai","year":"2024","journal-title":"IEEE Trans Inf Forensics Secur"},{"issue":"16","key":"10.1016\/j.array.2026.101089_b30","doi-asserted-by":"crossref","first-page":"14764","DOI":"10.1109\/JIOT.2023.3287678","article-title":"Explainable artificial intelligence (XAI) for internet of things: A survey","volume":"10","author":"Kok","year":"2023","journal-title":"IEEE Internet Things J"},{"issue":"135","key":"10.1016\/j.array.2026.101089_b31","first-page":"1","article-title":"Provenance-based intrusion detection systems: A survey","volume":"55","author":"Zipperle","year":"2022","journal-title":"ACM Comput Surv"},{"key":"10.1016\/j.array.2026.101089_b32","series-title":"FRX-IDS: An explainable intrusion detection framework with tamper-evident alert evidence logging","author":"Ajayan","year":"2026"},{"key":"10.1016\/j.array.2026.101089_b33","series-title":"FRX-IDS v4","author":"Ajayan","year":"2026"}],"container-title":["Array"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2590005626004121?httpAccept=text\/xml","content-type":"text\/xml","content-version":"vor","intended-application":"text-mining"},{"URL":"https:\/\/api.elsevier.com\/content\/article\/PII:S2590005626004121?httpAccept=text\/plain","content-type":"text\/plain","content-version":"vor","intended-application":"text-mining"}],"deposited":{"date-parts":[[2026,8,14]],"date-time":"2026-08-14T06:08:53Z","timestamp":1786687733000},"score":1,"resource":{"primary":{"URL":"https:\/\/linkinghub.elsevier.com\/retrieve\/pii\/S2590005626004121"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2026,9]]},"references-count":33,"alternative-id":["S2590005626004121"],"URL":"https:\/\/doi.org\/10.1016\/j.array.2026.101089","relation":{},"ISSN":["2590-0056"],"issn-type":[{"value":"2590-0056","type":"print"}],"subject":[],"published":{"date-parts":[[2026,9]]},"assertion":[{"value":"Elsevier","name":"publisher","label":"This article is maintained by"},{"value":"FRX-IDS: An explainable intrusion detection framework with tamper-evident alert evidence logging","name":"articletitle","label":"Article Title"},{"value":"Array","name":"journaltitle","label":"Journal Title"},{"value":"https:\/\/doi.org\/10.1016\/j.array.2026.101089","name":"articlelink","label":"CrossRef DOI link to publisher maintained version"},{"value":"article","name":"content_type","label":"Content Type"},{"value":"\u00a9 2026 The Authors. Published by Elsevier Inc.","name":"copyright","label":"Copyright"}],"article-number":"101089"}}