Musa Khan — Papers on Cortexa

openalexZenodo (CERN European Organization for Nuclear Research)2026-07-25

How Stable Are SHAP Explanations for Network Intrusion Detection? A Perturbation-Based Faithfulness Study

Explainable AI (XAI) methods such as SHAP are increasingly presented to security operations center (SOC) analysts as a way to justify machine-learning-based network intrusion detection system (NIDS) alerts, on the premise that a stated explanation increases trust and speeds triag…

View free PDFSource page

openalexZenodo (CERN European Organization for Nuclear Research)2026-07-25

Bridging LLM Reasoning and Classical Explainability in Phishing Email Classification: A Faithfulness and Robustness Comparison

Musa Khan

Large language models (LLMs) are increasingly proposed as reasoning engines for cyber threat intelligence (CTI) triage and threat hunting, promising to reduce the alert-fatigue burden long documented in security operations research. However, most reported evaluations emphasize ra…

View free PDFSource page