一句话：提出 HXAI-VDIM 概念框架，将安全分析师纳入人机回路，用可解释AI与可视化辅助漏洞检测、调查和缓解。
论文关注技术社会对网络弹性的迫切需求：计算系统、设备和数据持续成为攻击目标，复杂安全漏洞的检测、调查与缓解面临挑战。作者提出概念框架 HXAI-VDIM（Human-in-the-Loop Explainable-AI-Enabled Vulnerability Detection, Investigation, and Mitigation）。其核心不是把漏洞处理当作 AI/ML 模型的单一输出，而是将安全分析师或取证调查员纳入人机回路，利用可解释 AI（XAI）结合人工智能与智能助手（IA），在主动与被动流程中增强人类智能。目标是通过安全可视化构建交互式、迭代式的人机协作回路，让人类智能引导 XAI 系统并生成更精细的解决方案。摘要未报告实现或实验评估，属于概念性框架。
The need for cyber resilience is increasingly important in our technology-dependent society, where computing systems, devices and data will continue to be the target of cyber attackers. Hence, we propose a conceptual framework called ‘Human-in-the-Loop Explainable-AI-Enabled Vulnerability Detection, Investigation, and Mitigation’ (HXAI-VDIM). Specifically, instead of resolving complex scenario of security vulnerabilities as an output of an AI/ML model, we integrate the security analyst or forensic investigator into the man-machine loop and leverage explainable AI (XAI) to combine both AI and Intelligence Assistant (IA) to amplify human intelligence in both proactive and reactive processes. Our goal is that HXAI-VDIM integrates human and machine in an interactive and iterative loop with security visualization that utilizes human intelligence to guide the XAI-enabled system and generate refined solutions.
DOI 原文 ·
@inproceedings{paperbot6542,
title = {Human-in-the-Loop XAI-enabled Vulnerability Detection, Investigation, and Mitigation},
author = {Tien N. Nguyen and Raymond Choo},
booktitle = {ASE},
year = {2021},
doi = {10.1109/ase51524.2021.9678840}
}