mlsanityData to 14 Oct 2026

Stabilising Explainability Fragility in Cybersecurity AI: The Impact and Mitigation of Multicollinearity in Public Benchmark Datasets

arXiv 2605.22529 ↗First posted 21 May 2026cs.LG cs.AIcited by 0

Not on the map. Why?

Abstract (arXiv)

This paper investigates a unexplored yet impactful vulnerability in AI explainability used in intrusion detection (IDS): multicollinearity-induced instability. Despite extensive reliance on post-hoc explainability tools such as SHAP or LIME, the impact of correlated features on explanation robustness is not evaluated. We introduce a formal theorem stating that multicollinearity inflates attribution variance. This demonstrates that explanations and feature importances are non-identifiable under multicollinearity. A suite of comprehensive experiments validates the theorem on a representative benchmark dataset, UNSW-NB15. Four widely used families of models are evaluated, including linear, tree-based, kernel, and neural, across full and pruned feature sets based on VIF and correlation thresholding. We propose the novel metric of Explanability Fragility Score and two novel methods to mitigate it with variable integration complexity. CAA-Filtering focuses on stabilising explanations by grouping attributions of trained models. SHARP is a novel training-time regularisation framework that penalises attribution instability, enabling controllable and monotonic improvement of explainability stability. The findings support stable predictive performance, using Kendall's τ to quantify instability across bootstrapped explanations. This work has direct implications for the trustworthiness and reproducibility of XAI in security-critical contexts, and motivates incorporating multicollinearity mitigations into the IDS pipelines, providing a set of guidelines for practitioners.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 5 of its 21 references that are in the map. First posted on arXiv 21 May 2026.

Builds on

5 of 21 references.

References · 5

  1. 2020Problems with Shapley-value-based explanations as feature importance measurescited by 200
  2. 2019Unrestricted Permutation forces Extrapolation: Variable Importance Requires at least One More Model, or There Is No Free Variable Importancecited by 87
  3. 2018Benchmarking datasets for Anomaly-based Network Intrusion Detection: KDD CUP 99 alternativescited by 18
  4. 2021Explaining Network Intrusion Detection System Using Explainable AI Frameworkcited by 11
  5. 2025Evaluating Model Explanations without Ground Truthcited by 7

Built on by

Not cited yet.