Cardiff Metropolitan University
s42979-023-01744-x.pdf (931.08 kB)
Download file

Advanced Persistent Threat Identification with Boosting and Explainable AI

Download (931.08 kB)
journal contribution
posted on 2023-03-21, 09:38 authored by Md. Mahadi Hasan, Muhammad Usama Islam, Jasim Uddin

 Advanced persistent threat (APT) is a serious concern in cyber-security that has matured and grown over the years with the advent of technology. The main aim of this study is to establish an effective identification model for APT attacks to prevent and reduce their influence. Machine learning has the potential as well as substantial background to detect and predict cyber-security threats including APT. This study utilized several boosting-based machine learning methods to predict various types of APTs that are consistent in cyber-security domain. Furthermore, Explainable Artificial Intelligence (XAI) was coupled with the predictions to provide actionable insights to the domain stakeholders as well as practitioners in this domain. The results, particularly XGBoost with weighted F1 score of 0.97 and SHapley Additive exPlanations (SHAP)-based explanation, prove that boosting methods as well as machine learning models paired with XAI are indeed promising in handling cyber-security-related dataset problems which can be extrapolated towards new avenues of challenging research by effectively deploying boosting-based XAI models. 


Published in

SN Computer Science




  • VoR (Version of Record)


Hasan, M.M., Islam, M.U. & Uddin, J. (2023) 'Advanced Persistent Threat Identification with Boosting and Explainable AI', SN Computer Science. 4, 271.

Electronic ISSN


Cardiff Met Affiliation

  • Cardiff School of Technologies

Cardiff Met Authors

Jasim Uddin

Copyright Holder

  • © The Authors


  • en

Usage metrics

    School of Technologies Research - Journal Articles