A Hybrid and Adaptive Architecture for Explainable Intrusion Detection in Constrained IoT Environments

Internet of Things (IoT) environments are increasingly vulnerable to cyberattacks, necessitating effective and explainable intrusion detection solutions.This paper proposes a hybrid and adaptive architecture for explainable intrusion detection in constrained IoT environments.The approach combines workflow mining techniques with security rule-based detection to identify intrusions.It allows to avoid false positives during intrusion detection.Here, explainability also use methods to provide insights into detection decisions.More, the solution is hybrid due to the use of several techniques and also because it allows the detection of intrusions locally or through the Internet.The defined architecture offers advantages such as scalability and flexibility.