DB-HSM: LLM-driven semantic boundary debugging for network intrusion detection
Machine-learning intrusion detectors reach high average accuracy yet fail consistently on a small set of flows near the decision boundary, where benign and attack traffic overlap in feature space. These errors matter operationally, and standard remedies stop short: adversarial training adds perturbations whose gradient...