Yida Bao

TRACE: Feature-Space Feasible Action Contracts for Explainable Intrusion Triage

Explainable intrusion detection systems often provide feature attributions without indicating whether a security action should be released, downgraded, or deferred. This paper investigates whether action-governed explanations can provide bounded triage evidence under traffic feature feasibility constraints. We present...