XAI-XGBoost: an innovative explainable intrusion detection approach for securing internet of medical things systems

dc.contributor.authorHosain, Yousif
dc.contributor.authorCakmak, Muhammet
dc.date.accessioned2026-04-25T14:20:04Z
dc.date.available2026-04-25T14:20:04Z
dc.date.issued2025
dc.departmentSinop Üniversitesi
dc.description.abstractThe Internet of Medical Things (IoMT) has transformed healthcare delivery but faces critical challenges, including cybersecurity threats that endanger patient safety and data integrity. Intrusion Detection Systems (IDS) are essential for protecting IoMT networks, yet conventional models often struggle with class imbalance, lack interpretability, and are unsuitable for real-world deployment in sensitive healthcare settings. This study aims to develop an innovative, explainable IDS framework tailored for IoMT systems that ensures both high detection accuracy and model transparency. The proposed approach integrates a hybrid random sampling technique to mitigate class imbalance, Recursive Feature Elimination (RFE) for feature selection, and an optimized XGBoost classifier for robust attack detection. Explainable AI techniques, namely SHAP and LIME, are employed to provide global and local insights into model predictions, enhancing interpretability and trustworthiness. The system was evaluated using the WUSTL-EHMS-2020 dataset, which contains network flow and biometric data, achieving outstanding performance: 99.22% accuracy, 98.35% precision, 99.91% recall, 99.12% F1-score, and 100% ROC-AUC. The proposed framework outperforms several traditional Machine Learning (ML) models and state-of-the-art IDS approaches, demonstrating its robustness and suitability for practical healthcare environments. By integrating advanced ML with explainable AI, this work addresses the critical need for secure, interpretable, and high-performing IDS solutions in IoMT systems. The study concludes that explainability is not an optional feature but a fundamental requirement in healthcare cybersecurity, and the proposed framework represents a significant step towards safer and more accountable AI-driven security solutions for the IoMT ecosystem.
dc.identifier.doi10.1038/s41598-025-07790-0
dc.identifier.issn2045-2322
dc.identifier.issue1
dc.identifier.orcid0000-0002-3752-6642
dc.identifier.pmid40594692
dc.identifier.scopus2-s2.0-105009890698
dc.identifier.scopusqualityN/A
dc.identifier.urihttps://doi.org/10.1038/s41598-025-07790-0
dc.identifier.urihttps://hdl.handle.net/11486/8343
dc.identifier.volume15
dc.identifier.wosWOS:001522985500032
dc.identifier.wosqualityQ1
dc.indekslendigikaynakWeb of Science
dc.indekslendigikaynakScopus
dc.indekslendigikaynakPubMed
dc.language.isoen
dc.publisherNature Portfolio
dc.relation.ispartofScientific Reports
dc.relation.publicationcategoryMakale - Uluslararası Hakemli Dergi - Kurum Öğretim Elemanı
dc.rightsinfo:eu-repo/semantics/openAccess
dc.snmzKA_WOS_20260420
dc.subjectInternet of medical things (IoMT)
dc.subjectIntrusion detection system (IDS)
dc.subjectExplainable artificial intelligence (XAI)
dc.subjectXGBoost classifier
dc.subjectFeature selection
dc.titleXAI-XGBoost: an innovative explainable intrusion detection approach for securing internet of medical things systems
dc.typeArticle

Dosyalar