Ruleset tuning that reduces label imbalance improves DeepCASE's alert classification and the correctness of its explanations in a real SOC dataset.
Ruling the unruly: Designing effective, low-noise network intrusion detection rules for security operations centers,
1 Pith paper cite this work. Polarity classification is still indexing.
1
Pith paper citing it
citation-role summary
background 1
citation-polarity summary
fields
cs.CR 1years
2025 1verdicts
CONDITIONAL 1roles
background 1polarities
support 1representative citing papers
citing papers explorer
-
On the Effect of Ruleset Tuning and Data Imbalance on Explainable Network Security Alert Classifications: a Case-Study on DeepCASE
Ruleset tuning that reduces label imbalance improves DeepCASE's alert classification and the correctness of its explanations in a real SOC dataset.