Multi-Level Distributional Entropy from Flow Summary Statistics for Explainable Network Intrusion Detection.

arXiv:2606.29797v2 Announce Type: replace-cross Abstract: Machine learning network intrusion detection systems (IDS) operate on aggregate flow statistics that discard the distributional structure of traffic, and although information-theoretic measures capture