Enhancing cyber threat detection transparency through explainable artificial intelligence models and data-driven security analytics

Kishor, I.; Mamodiya, U.; Almaiah, M.; Alqutaish, A.; Shehab, R.; Obeidat, M.

Abstract: The recent explosion of cyber threats in big data ecosystems has exposed the vulnerability of black-box machine learning models that prioritize accuracy over explainability. Traditional cybersecurity mechanisms do not create a sense as to why a prediction is provided and the analysts are left with doubts and the response mechanisms are slow. This is not very transparent and therefore compromises the operational trust and the traceability of high-risk decisions in real-time defense infrastructures. Current explainable AI (XAI) methods, despite their usefulness, are mostly stagnant, not connected to the changing situation of network behavior and human monitoring. They seldom inculcate the feedback mechanisms that can adjust the model explanations with new threat patterns. The research paper introduces an Explainable Artificial Intelligence and Data-Driven Security Analytics Framework that is hybrid and serves to combine global interpretability with SHAP, local reasoning with LIME, and adaptive refinement with an analyst-in-loop feedback layer. The architecture converts the threat detection to a self-fixing transparent process in which the analytical reasoning is dynamically developed with the data flow. In experimental tests of less than 10k concurrent traffic conditions, experimental results indicate that the system had a detection accuracy of 98.4 and Spearman correlation (0.91) between predicted risk scores and real levels of severity with a quantifiable 3.9% stability improvement over the similar XAI-based systems of intrusion detection. The combination of explainability with real-time analytics will further enhance the accuracy of detecting cyber threats and its interpretability reliability as well. The findings indicate the essential change to credible, self-explanatory, and adaptive security intelligence of the next-generation data networks.

How to cite this paper

        APA: Kishor, I., Mamodiya, U., Almaiah, M., Alqutaish, A., Shehab, R & Obeidat, M. (2026). Enhancing cyber threat detection transparency through explainable artificial intelligence models and data-driven security analytics. International Journal of Data and Network Science, 10(2), 969-982.
    

        Chicago/Turabian: Kishor, I., Mamodiya, U., Almaiah, M., Alqutaish, A., Shehab, R & Obeidat, M. 2026. "Enhancing cyber threat detection transparency through explainable artificial intelligence models and data-driven security analytics." International Journal of Data and Network Science 10, no. 2 (2026): 969-982.
    

        AMA: Kishor, I., Mamodiya, U., Almaiah, M., Alqutaish, A., Shehab, R & Obeidat, M. Enhancing cyber threat detection transparency through explainable artificial intelligence models and data-driven security analytics. International Journal of Data and Network Science. 2026;10(2):969-982.
    

References

Abu Laila, D. (2025). Responsive Machine Learning Framework and Lightweight Utensil of Prevention of Evasion Attacks in the IoT-Based IDS. STAP Journal of Security Risk Management, 2025(1), 59–70. https://doi.org/10.63180/jsrm.thestap.2025.1.3
Adhikari, D. R., & Thapaliya, S. (2024, December). Explainable AI for cybersecurity: Interpretable models for malware analysis and network intrusion detection. NPRC Journal of Multidisciplinary Research, 1(9), 170–179. https://doi.org/10.3126/nprcjmr.v1i9.74177
Akpan, I. U., Omotosho, M. O., & Edim, E. B. (2024, December). Explainable AI for cybersecurity: Improving transparency and trust in intrusion detection systems. International Journal, 6(12), 229–240. https://doi.org/10.35629/5252-0612229240
Alabdulatif. (2025, July). A novel ensemble deep learning approach for cybersecurity intrusion detection with explainable artificial intelligence. Applied Sciences, 15(14), 7984. https://doi.org/10.3390/app15147984
Alang, K. S., & Kumar, M. (2025, March). Explainable AI in cybersecurity: Enhancing model transparency. Universal Research Reports, 12(1), 85–96. https://doi.org/10.36676/urr.v12.i1.1463
Albinhamad, H., Alotibi, A., Alagnam, A., Almaiah, M., & Salloum, S. (2025). Vehicular Ad-hoc Networks (VANETs): A Key Enabler for Smart Transportation Systems and Challenges. Jordanian Journal of Informatics and Computing, 2025(1), 4–15. https://doi.org/10.63180/jjic.thestap.2025.1.2
Ali, İ., Jhanjhi, N. Z., & Ray, S. K. (2024). Enabling explainable AI in cybersecurity solutions. In IGI Global (pp. 255–275). https://doi.org/10.4018/978-1-6684-6361-1.ch009
Almaiah, M. A., & Kadel, R. (2025). Leveraging ACO, GA, and GWO for Enhancing Port Scan Attack Detection Using Machine Learning. Journal of Cyber Security and Risk Auditing, 2025(4), 306–326. https://doi.org/10.63180/jcsra.thestap.2025.4.9
Almarshood, R., & Rahman, M. M. H. (2025). Enhancing Intrusion Detection Systems by Using Machine Learning in Smart Cities: Issues, Challenges and Future Research Direction. STAP Journal of Security Risk Management, 2025(1), 3–21. https://doi.org/10.63180/jsrm.thestap.2025.1.1
Alnahdi, & Narain, S. (2024, October). Towards transparent intrusion detection: A coherence-based framework in explainable AI integrating large language models. Conference Paper, 87–96. https://doi.org/10.1109/tps-isa62245.2024.00020
Alshinwan, M., Memon, A. G., Ghanem, M. C., & Almaayah, M. (2025). Unsupervised text feature selection approach based on improved Prairie dog algorithm for the text clustering. Jordanian Journal of Informatics and Computing, 2025(1), 27–36. https://doi.org/10.63180/jjic.thestap.2025.1.4
Arreche, O., Guntur, T. R., & Abdallah, M. (2024, May). XAI-IDS: Toward proposing an explainable artificial intelligence framework for enhancing network intrusion detection systems. Applied Sciences. https://doi.org/10.3390/app14104170
Barnard, P., DaSilva, L. A., & Marchetti, N. (2024). Don’t just explain, enhance! Using explainable artificial intelligence (XAI) to automatically improve network intrusion detection. TechRxiv. https://doi.org/10.36227/techrxiv.170775198.87587642/v1
Bhatia, A., & Kumar, A. (2025, February). AI explainability and trust in cybersecurity operations. In Advances in Information Security, Privacy, and Ethics (pp. 57–74). https://doi.org/10.4018/979-8-3373-0563-9.ch004
Bondhala, S. (2025, March). Cybersecurity in AI-driven data centers: Reinventing threat detection. International Journal of Advanced Research in Science, Communication and Technology, 510–519. https://doi.org/10.48175/ijarsct-24464
Dasari, K., Bisawas, S. K., & Purkayastha, B. (2025, August). Enhanced network intrusion detection systems with explainable artificial intelligence for network security. International Journal of Communication Systems, 38(14). https://doi.org/10.1002/dac.70209
Edim, E., Akpan, I. U., & Omotosho, M. O. (2025, January). AI-augmented cybersecurity threat intelligence: Enhancing situational awareness. International Journal of Science and Research Archive, 14(1), 890–897. https://doi.org/10.30574/ijsra.2025.14.1.2650
Femi, G., & Medugu, M. (2025, January). Enhancing adaptive cybersecurity risk management through AI-driven threat detection. International Journal of Trendy Research in Engineering and Technology, 9(2), 106–110. https://doi.org/10.54473/ijtret.2025.9210
Goel, P. K., Shieh, C., & Horng, M.-F. (2025, May). Explainable AI (XAI) for cybersecurity decision-making in industrial automation. In Advances in Computational Intelligence and Robotics (pp. 279–294). https://doi.org/10.4018/979-8-3373-3241-3.ch014
Gupta, L., & Misra, D. (2025, June). Cybersecurity threat detection through explainable artificial intelligence (XAI): A data-driven framework. International Research Journal of MMC, 6(2), 119–131. https://doi.org/10.3126/irjmmc.v6i2.80687
Kwubeghari, & Ezeji, N. G. (2025, August). Designing an explainable intrusion detection system (X-IDS) using machine learning: A framework for transparency and trust. ABUAD Journal of Engineering Research and Development, 8(2), 319–328. https://doi.org/10.53982/ajerd.2025.0802.32-j
Mmaduekwe, E. (2025, June). AI-driven cyber threat detection for securing national critical infrastructure. Asian Journal of Research in Computer Science, 18(6), 424–431. https://doi.org/10.9734/ajrcos/2025/v18i6711
Nnaka, K. I., Mbamalu, P. O., Nwaigbo, J. C., Ozo-ogueji, P. C., Njoku, V. I., & Ekechi, C. C. (2025, August). AI-powered threat detection: Opportunities and limitations in modern cyber defense. World Journal of Advanced Research and Reviews, 27(2), 210–223. https://doi.org/10.30574/wjarr.2025.27.2.2854
Patil. (2025, January). Explainable artificial intelligence (XAI): Enhancing transparency and trust in machine learning models. SSRN. https://doi.org/10.2139/ssrn.5057400
Paul, S., Kumari, S., Navadia, N. R., & Sinha, S. (2025, August). Explainable intrusion detection system for Internet of Things: Explainability with reliability. Conference Paper, 226–232. https://doi.org/10.1109/icscsa66339.2025.11170796
Safavi, S., Abdulnabi, M., Rana, M. E., & Alizadeh, S. (2025, May). From black box to trustworthy AI: A secure framework for explainable cybersecurity decision-making. Conference Paper, 1–4. https://doi.org/10.1109/assic64892.2025.11158699
Sahito, S.-U.-R., et al. (2025, August). Explainable AI (XAI) for security decisions to mitigate cybersecurity attacks. Journal of Advanced Research in Applied Sciences and Engineering Technology, 55(2), 214–223. https://doi.org/10.37934/araset.55.2.214223
Samtani, S., Chen, H., Kantarcioglu, M., & Thuraisingham, B. (2022, July). Explainable artificial intelligence for cyber threat intelligence (XAI-CTI). IEEE Transactions on Dependable and Secure Computing, 19(4), 2149–2150. https://doi.org/10.1109/tdsc.2022.3168187
Sankaram, M., Roopesh, M., Rasetti, S., & Nishat, N. (2024, July). A comprehensive review of artificial intelligence applications in enhancing cybersecurity threat detection and response mechanisms. Deleted Journal, 3(5), 1–14. https://doi.org/10.62304/jbedpm.v3i05.180
Sharma, S. K. (2025, April). AI-powered cybersecurity: The future of threat detection. Indian Scientific Journal of Research in Engineering and Management, 9(4), 1–9. https://doi.org/10.55041/ijsrem45943
Singh, R., & Dineshkumar, A. (2025, March). Combining explainable AI and advanced visual analytics for threat attribution and response justification in machine learning frameworks. Book Chapter, 388–416. https://doi.org/10.71443/9789349552388-14
Sulaiman, R. B., & Khraisat, A. (2025). Metaheuristic-Driven Feature Selection with SVM and KNN for Robust DDoS Attack Detection: A Comparative Study. Journal of Cyber Security and Risk Auditing, 2025(4), 182–203. https://doi.org/10.63180/jcsra.thestap.2025.4.1
Upendran, S. V., Karthiyayini, S., & Jamthe, D. V. (2025, March). Explainable AI (XAI) for cybersecurity decision-making using SHAP and LIME for transparent threat detection. Book Chapter, 354–386. https://doi.org/10.71443/9789349552029-12
Uysal, İ., & Köse, U. (2024, October). Analysis of network intrusion detection via explainable artificial intelligence: Applications with SHAP and LIME. Conference Paper, 1–6. https://doi.org/10.1109/cars61786.2024.10778742
Uzoka, E., Cadet, E., & Ojukwu, P. U. (2024, October). Applying artificial intelligence in cybersecurity to enhance threat detection, response, and risk management. CSIT Research Journal, 5(10). https://doi.org/10.51594/csitrj.v5i10.1677
Zeleke, S. N., Jember, A. F., & Bochicchio, M. A. (2025, January). Integrating explainable AI for effective malware detection in encrypted network traffic. arXiv Preprint. https://doi.org/10.48550/arxiv.2501.05387