# Certified Causal Attribution for Real-Time Attack Forensics in 6G Network Slicing

arXiv: https://arxiv.org/abs/2605.26679 · HTML: https://mlsanity.com/paper/2605.26679/

## Key facts

- No citing papers in the map yet (data through 14 Oct 2026).
- Builds on 9 of its 42 references that are in the map.
- First posted on arXiv 26 May 2026.

## Builds on (most cited first, 9 of 9)

- [Inductive Representation Learning on Large Graphs](https://mlsanity.com/paper/1706.02216/) (2017)
- [Neural Machine Translation by Jointly Learning to Align and Translate](https://mlsanity.com/paper/1409.0473/) (2014)
- [Neural Ordinary Differential Equations](https://mlsanity.com/paper/1806.07366/) (2018)
- [Detecting causal associations in large nonlinear time series datasets](https://mlsanity.com/paper/1702.07007/) (2017)
- [Granger Causality: A Review and Recent Advances](https://mlsanity.com/paper/2105.02675/) (2021)
- [HOLMES: Real-time APT Detection through Correlation of Suspicious Information Flows](https://mlsanity.com/paper/1810.01594/) (2018)
- [6G Wireless Systems: Vision, Requirements, Challenges, Insights, and Opportunities](https://mlsanity.com/paper/2008.03213/) (2020)
- [Adversarial Feature Selection against Evasion Attacks](https://mlsanity.com/paper/2005.12154/) (2020)
- [Domain-Adapted Granger Causality for Real-Time Cross-Slice Attack Attribution in 6G Networks](https://mlsanity.com/paper/2510.05165/) (2025)

## Abstract (arXiv)

Cross-slice attack attribution in 6G networks requires identifying causal propagation chains through shared infrastructure in under 100 ms. Existing methods struggle to satisfy this strict SLA without sacrificing accuracy, because shared resource contention creates spurious correlations that are indistinguishable from genuine causal links under standard Granger tests. We propose DA-GC, a certified causal attribution framework that integrates resource-conditioned Granger causality with an axiomatically derived Resource Contention Model (RCM) to systematically block resource-mediated confounding. On a 15-slice production-emulation 6G testbed with 1,100 attack scenarios, DA-GC achieves 89.2% attribution accuracy at 87 ms. This represents a 7.9 percentage-point improvement over the strongest baseline at 2.7x lower latency, alongside demonstrated cross-topology generalization and concept-drift resilience. Crucially, DA-GC is backed by a comprehensive formal certification stack. We provide mathematically proven validity certificates for statistical soundness under serially dependent telemetry and piecewise-stationarity. Furthermore, we establish strict security bounds, including an adversarial utilization spoofing breakdown point of δ^* ≈ 0.95, and define the minimum differential-privacy noise required for a provably private and robust deployment.