CORTEXA
← Browse
arxivcs.CRcs.LG2026-07-16

Improving Network Anomaly Detection via Choquet-Integral-Based Feature Aggregation

Abreu Quevedo, Roger Immich, Giancarlo Lucca, Graçaliz Dimuro, Bruno L. Dalmazo

This work investigates a generalized Choquet-integral-based feature aggregation framework to improve anomaly detection in high-dimensional network traffic data. The approach combines adaptive weighting with incremental feature selection to address feature redundancy. Using Random Forest and XGBoost classifiers, we evaluate models trained with both raw and Choquet-aggregated features under varying feature subset sizes. The proposed aggregation achieves up to $7\%$ higher accuracy while reducing data volume by $77.5\%$ (from $214$~MB to $48$~MB), without degrading precision and recall. Results averaged over multiple stratified repetitions indicate that Choquet-based aggregation yields statistically significant gains ($p < 0.05$) in scenarios with limited feature availability, highlighting its suitability for real-time intrusion detection under bandwidth and feature-availability constraints.

View free PDFSource page

Related papers

arxivcs.LGcs.AIcs.CLcs.CR2026-07-23

Beyond Heavy Log Curation: Perplexity-Based APT Detection via Unsupervised, Context-Augmented Language Models

Shoya Otsu, Kei Suzuki, Toshiaki Koike-Akino, Jing Liu, Ye Wang

Advanced Persistent Threats (APTs) remain difficult to detect because only a small fraction of events in large-scale logs are attack-related, and investigation is expensive and hard to scale. Prior machine-learning approaches can reduce analyst workload, but they often rely on he…

View free PDFSource page
arxivcs.LGcs.CRcs.CVcs.MM2026-07-23

Physiological Signals as a Forensic Modality for Talking-Face Deepfake Detection

Othmane Harraq, Tamer Aldwairi

Talking-face (TF) deepfake generation synthesizes photore- alistic facial video from a static source image and an au- dio signal, producing forgeries that current image-based detectors consistently fail to identify. Unlike face-swap ma- nipulation, TF synthesis has no underlying…

View free PDFSource page
arxivcs.CRcs.AIcs.LG2026-07-22

Taming the Security-Energy Paradox: A Green AI Approach to Optimized Android Malware Detection

Shrinidhi Sridhar, Vikas K. Malviya

An increase in advanced Android malware requires the use of deep learning models, which can run on Android devices. But there is a trade-off between security and energy use, as strong detection models can drain the battery of devices fast. This work tests different Multi-Layer Pe…

View free PDFSource page
arxivcs.LGcs.ARcs.CR2026-07-26

ADVERSARIAL: And-Inverter Graph-Assisted Hardware Trojan Detection At Scale

Yaroslav Popryho, Debjit Pal, Inna Partin-Vaisband

Modern System-on-Chip (SoCs) often contain hundreds of millions to tens of billions of gates, making existing Hardware Trojan (HT) detection methods impractical due to their immense scale. The proposed approach incorporates symbolically enabled learning by modeling flattened gate…

View free PDFSource page
arxivcs.CRcs.LG2026-07-23

Certified in Theory, Broken in Practice: Assumption Gaps in Cryptographic Model Certification

Carter Luck, Olive Franzese-McLaughlin, Elisaweta Masserova, Akira Takahashi, Antigoni Polychroniadou, Nicolas Papernot

Privacy-preserving machine learning auditing protocols allow auditors to assess models for properties such as accuracy or fairness, without revealing their internals or training data. This makes them especially attractive for auditing models deployed in sensitive domains such as…

View free PDFSource page