Article Per Year (5 Year)
p-Index From 2021 - 2026
0.23
P-Index
This Author published in this journals
All Journal INOVTEK Polbeng - Seri Informatika
Ahmad Jauharul Ilmi
Muhammadiyah University of Malang
Computer Science & IT

Published : 1 Documents Claim Missing Document
Claim Missing Document
Check
Articles

Found 1 Documents
Search

 1 
Comparative Analysis of Performance and Interpretability of XGBoost and TabNet Models in IDS Using XAI Ahmad Jauharul Ilmi; Denar Regata Akbi
Journal of Innovation and Technology Polbeng Series on Informatics (INOVTEK Polbeng - Seri Informatika) Vol. 11 No. 3 (2026): August (Inpress)
Publisher : P3M Politeknik Negeri Bengkalis

Show Abstract | Download Original | Original Source | Check in Google Scholar | DOI: 10.35314/js504z34

Abstract

Cyberattacks are becoming a more apparent danger to modern network traffic. Robust and transparent Intrusion Detection Systems (IDS) are increasingly needed to counter this massive wave. The emergence of machine learning (ML) and deep learning (DL) offers a huge advantage in detecting this wave with high precision; nevertheless, they also have a downside due to their secretive nature regarding decision-making algorithms, often referred to as the “black-box” problem. Digital forensics is affected by this nature as well. As a result, XGBoost (ML) and TabNet (DL) were selected and compared based on their performance and interpretability using Explainable AI (XAI) to understand the reasoning behind their decisions with the CIC-IDS-2017 dataset in this study. Both models naturally achieved extremely high classification capabilities, with XGBoost slightly outperforming TabNet in overall detection reliability and in minimizing false negatives. The XAI evaluation additionally uncovered equally valid decision-making logic: TabNet prioritizes connection states and temporal variances, while XGBoost primarily relies on rigid volumetric payload statistics. LIME analysis also affirms that both models maintain high consistency with SHAP global explanations. In summary, XGBoost is recommended as the primary real-time detector due to its superior precision and transparent logic, while TabNet serves as a secondary validator.
Co-Authors Denar Regata Akbi