DOI

Generally, Artificial Intelligence (AI) algorithms are unable to account for the logic of each decision they take during the course of arriving at a solution. This 'black box' problem limits the usefulness of AI in military, medical, and financial security applications, among others, where the price for a mistake is great and the decision-maker must be able to monitor and understand each step along the process. In our research, we focus on the application of Explainable AI for log anomaly detection systems of a different kind. In particular, we use the Shapley value approach from cooperative game theory to explain the outcome or solution of two anomaly-detection algorithms: Decision tree and DeepLog. Both algorithms come from the machine learning-based log analysis toolkit for the automated anomaly detection 'Loglizer'. The novelty of our research is that by using the Shapley value and special coding techniques we managed to evaluate or explain the contribution of both a single event and a grouped sequence of events of the Log for the purposes of anomaly detection. We explain how each event and sequence of events influences the solution, or the result, of an anomaly detection system.

Original languageEnglish
Title of host publicationMachine Learning and Artificial Intelligence
Subtitle of host publicationProceedings of MLIS 2020
EditorsAntonio J. Tallon-Ballesteros, Chi-Hua Chen
PublisherIOS Press
Pages152-164
ISBN (Electronic)9781643681368
DOIs
StatePublished - 2 Dec 2020
Event2020 International Conference on Machine Learning and Intelligent Systems, MLIS 2020 - Virtual, Online, Korea, Republic of
Duration: 25 Oct 202028 Oct 2020

Publication series

NameFrontiers in Artificial Intelligence and Applications
Volume332
ISSN (Print)0922-6389

Conference

Conference2020 International Conference on Machine Learning and Intelligent Systems, MLIS 2020
Country/TerritoryKorea, Republic of
CityVirtual, Online
Period25/10/2028/10/20

    Scopus subject areas

  • Artificial Intelligence

    Research areas

  • Anomaly detection, Decision tree, DeepLog, Explainable AI, Log anomaly detection, Shapley value

ID: 73623720