[35] L. Yang, W. Guo, Q. Hao, A. Ciptadi, A. Ahmadzadeh, X. Xing, and G. Wang, “CADE: detecting and explaining concept drift samples for security applications,” in USENIX Security Symposium, 2021.
[36] M. Sundararajan, A. Taly, and Q. Yan, "Axiomatic attribution for deep networks," in International Conference on Machine Learning (ICML), 2017.
[37] B. Letham, C. Rudin, T. H. McCormick, and D. Madigan, "Interpretable classifiers using rules and bayesian analysis: Building a better stroke prediction model," CoRR, vol. abs/1511.01644, 2015.
[38] A. Barbado, O. Corcho, and R. Benjamins, "Rule extraction in unsupervised anomaly detection for model explainability: Application to oneclass svm," Expert Systems with Applications, vol. 189, p. 116100, 2022.
[39] I. van der Linden, H. Haned, and E. Kanoulas, “Global aggregations of local explanations for black box models,” CoRR, vol. abs/1907.03039, 2019.
[40] M. Setzu, R. Guidotti, A. Monreale, F. Turini, D. Pedreschi, and F. Giannotti, “Glocalx - from local to global explanations of black box AI models,” Artif. Intell., vol. 294, p. 103457, 2021.
[41] Q. Li, R. Cummings, and Y. Mintz, "Optimal local explainer aggregation for interpretable prediction," in AAAI Conference on Artificial Intelligence (AAAI), 2022.
[42] N. Frosst and G. E. Hinton, "Distilling a neural network into a soft decision tree," CoRR, vol. abs/1711.09784, 2017.
[43] Y. Li, J. Bai, J. Li, X. Yang, Y. Jiang, and S. Xia, "Rectified decision trees: Exploring the landscape of interpretable and effective machine learning," CoRR, vol. abs/2008.09413, 2020.
[44] L. Breiman, J. H. Friedman, R. A. Olshen, and C. J. Stone, Classification and Regression Trees. Wadsworth, 1984.
[45] I. J. Goodfellow, J. Shlens, and C. Szegedy, “Explaining and harnessing adversarial examples,” in International Conference on Learning Representations (ICLR), 2015.
[46] X. Xu, J. Li, Y. Yang, and F. Shen, "Toward effective intrusion detection using log-cosh conditional variational autoencoder," IEEE Internet of Things Journal, vol. 8, no. 8, pp. 6187-6196, 2021.
[47] A. Binbusayyis and T. Vaiyapuri, "Unsupervised deep learning approach for network intrusion detection combining convolutional autoencoder and one-class SVM," Appl. Intell., vol. 51, no. 10, pp. 7094-7108, 2021.
[48] Y. Dong, Q. Li, K. Wu, R. Li, D. Zhao, G. Tyson, J. Peng, Y. Jiang, S. Xia, and M. Xu, "Horuseye: Realtime iot malicious traffic detection framework with programmable switches," in USENIX Security Symposium, 2023.
[49] L. Liu, G. Engelen, T. M. Lynar, D. Essam, and W. Joosen, "Error prevalence in NIDS datasets: A case study on CIC-IDS-2017 and CSE-CIC-IDS-2018," in IEEE Conference on Communications and Network Security (CNS), 2022.
[50] T. M. Booij, I. Chiscop, E. Meeuwissen, N. Moustafa, and F. T. H. den Hartog, "Ton_iot: The role of heterogeneity and the need for standardization of features and attack types in IoT network intrusion data sets," IEEE Internet of Things Journal, vol. 9, no. 1, pp. 485-496, 2022.
[51] B. A. AlAhmadi, L. Axon, and I. Martinovic, “ $99\%$  false positives: A qualitative study of SOC analysts’ perspectives on security alarms,” in USENIX Security Symposium, 2022.
[52] G. Apruzzese, P. Laskov, and A. Tastemirova, "Sok: The impact of unlabelled data in cyberthreat detection," in IEEE European Symposium on Security and Privacy (EuroS&P), 2022.