<?xml version="1.0" encoding="utf-8"?>
<TEI xmlns="http://www.tei-c.org/ns/1.0" xmlns:xsi="http://www.w3.org/2001/XMLSchema-instance" xmlns:hal="http://hal.archives-ouvertes.fr/" xmlns:gml="http://www.opengis.net/gml/3.3/" xmlns:gmlce="http://www.opengis.net/gml/3.3/ce" version="1.1" xsi:schemaLocation="http://www.tei-c.org/ns/1.0 http://api.archives-ouvertes.fr/documents/aofr-sword.xsd">
  <teiHeader>
    <fileDesc>
      <titleStmt>
        <title>HAL TEI export of hal-04328482</title>
      </titleStmt>
      <publicationStmt>
        <distributor>CCSD</distributor>
        <availability status="restricted">
          <licence target="https://creativecommons.org/publicdomain/zero/1.0/">CC0 1.0 - Universal</licence>
        </availability>
        <date when="2026-05-23T08:58:31+02:00"/>
      </publicationStmt>
      <sourceDesc>
        <p part="N">HAL API Platform</p>
      </sourceDesc>
    </fileDesc>
  </teiHeader>
  <text>
    <body>
      <listBibl>
        <biblFull>
          <titleStmt>
            <title xml:lang="fr">Un système d'apprentissage ensembliste explicable pour détecter des attaques réseau inconnues</title>
            <author role="aut">
              <persName>
                <forename type="first">Céline</forename>
                <surname>Minh</surname>
              </persName>
              <email type="md5">0f1a5321917bebebe2e1296f6b8f770b</email>
              <email type="domain">custocy.com</email>
              <idno type="idhal" notation="numeric">1290383</idno>
              <idno type="halauthorid" notation="string">1670475-1290383</idno>
              <affiliation ref="#struct-1170242"/>
              <affiliation ref="#struct-388967"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Kevin</forename>
                <surname>Vermeulen</surname>
              </persName>
              <email type="md5">1541542afcdf4daff690eee1babe11be</email>
              <email type="domain">cnrs.fr</email>
              <idno type="idhal" notation="string">kevin-vermeulen</idno>
              <idno type="idhal" notation="numeric">753022</idno>
              <idno type="halauthorid" notation="string">55018-753022</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-6168-7887</idno>
              <affiliation ref="#struct-388967"/>
              <affiliation ref="#struct-441569"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Cédric</forename>
                <surname>Lefebvre</surname>
              </persName>
              <email type="md5">e6c611de4c1f3474bdd0e28fcb1e38b6</email>
              <email type="domain">custocy.com</email>
              <idno type="idhal" notation="numeric">1290384</idno>
              <idno type="halauthorid" notation="string">1407933-1290384</idno>
              <idno type="IDREF">https://www.idref.fr/260229555</idno>
              <affiliation ref="#struct-1170242"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">Philippe</forename>
                <surname>Owezarski</surname>
              </persName>
              <email type="md5">11e8a050275242e79cf23862dea484c0</email>
              <email type="domain">laas.fr</email>
              <idno type="idhal" notation="string">philippe-owezarski</idno>
              <idno type="idhal" notation="numeric">13969</idno>
              <idno type="halauthorid" notation="string">5222-13969</idno>
              <idno type="ORCID">https://orcid.org/0000-0001-7713-7003</idno>
              <idno type="IDREF">https://www.idref.fr/119076977</idno>
              <affiliation ref="#struct-388967"/>
            </author>
            <author role="aut">
              <persName>
                <forename type="first">William</forename>
                <surname>Ritchie</surname>
              </persName>
              <email type="md5">e3a792cd92d2f3521b7a0eebb483c103</email>
              <email type="domain">custocy.com</email>
              <idno type="idhal" notation="numeric">1290385</idno>
              <idno type="halauthorid" notation="string">149540-1290385</idno>
              <affiliation ref="#struct-1170242"/>
            </author>
            <editor role="depositor">
              <persName>
                <forename>Laure</forename>
                <surname>DELETRAZ</surname>
              </persName>
              <email type="md5">79790d1d893f4ca185a7da8e416c28be</email>
              <email type="domain">intradef.gouv.fr</email>
            </editor>
          </titleStmt>
          <editionStmt>
            <edition n="v1" type="current">
              <date type="whenSubmitted">2023-12-07 10:14:29</date>
              <date type="whenModified">2025-10-22 18:04:09</date>
              <date type="whenReleased">2023-12-07 16:45:39</date>
              <date type="whenProduced">2023-11-22</date>
              <date type="whenEndEmbargoed">2023-12-07</date>
              <ref type="file" target="https://hal.science/hal-04328482v1/document">
                <date notBefore="2023-12-07"/>
              </ref>
              <ref type="file" subtype="author" n="1" target="https://hal.science/hal-04328482v1/file/paper7.pdf" id="file-4328482-3772242">
                <date notBefore="2023-12-07"/>
              </ref>
            </edition>
            <respStmt>
              <resp>contributor</resp>
              <name key="1020234">
                <persName>
                  <forename>Laure</forename>
                  <surname>DELETRAZ</surname>
                </persName>
                <email type="md5">79790d1d893f4ca185a7da8e416c28be</email>
                <email type="domain">intradef.gouv.fr</email>
              </name>
            </respStmt>
          </editionStmt>
          <publicationStmt>
            <distributor>CCSD</distributor>
            <idno type="halId">hal-04328482</idno>
            <idno type="halUri">https://hal.science/hal-04328482</idno>
            <idno type="halBibtex">minh:hal-04328482</idno>
            <idno type="halRefHtml">&lt;i&gt;Conference on Artificial Intelligence for Defense&lt;/i&gt;, DGA Maîtrise de l'Information, Nov 2023, Rennes, France</idno>
            <idno type="halRef">Conference on Artificial Intelligence for Defense, DGA Maîtrise de l'Information, Nov 2023, Rennes, France</idno>
            <availability status="restricted">
              <licence target="https://about.hal.science/hal-authorisation-v1/">HAL Authorization<ref corresp="#file-4328482-3772242"/></licence>
            </availability>
          </publicationStmt>
          <seriesStmt>
            <idno type="stamp" n="UNIV-TLSE2">Université Toulouse 2</idno>
            <idno type="stamp" n="UNIV-TLSE3">Université de Toulouse</idno>
            <idno type="stamp" n="CNRS">CNRS - Centre national de la recherche scientifique</idno>
            <idno type="stamp" n="INSA-TOULOUSE">Institut National des Sciences Appliquées de Toulouse</idno>
            <idno type="stamp" n="LAAS">Laboratoire d'analyse et d'architecture des systèmes</idno>
            <idno type="stamp" n="LAAS-SARA" corresp="LAAS-RISC">Équipe Services et Architectures pour Réseaux Avancés</idno>
            <idno type="stamp" n="UT1-CAPITOLE">Université Toulouse 1 Capitole</idno>
            <idno type="stamp" n="LAAS-RESEAUX-ET-COMMUNICATIONS" corresp="LAAS">LAAS-Réseaux et Communications</idno>
            <idno type="stamp" n="INSA-GROUPE">Groupe INSA</idno>
            <idno type="stamp" n="LAAS-RISC" corresp="LAAS">Réseaux, Informatique, Systèmes de Confiance</idno>
            <idno type="stamp" n="TOULOUSE-INP">Toulouse - INP</idno>
            <idno type="stamp" n="UNIV-UT3">Université Toulouse 3</idno>
            <idno type="stamp" n="UT3-INP">Université de Toulouse / Toulouse INP</idno>
            <idno type="stamp" n="UT3-TOULOUSEINP">Université de Toulouse / Toulouse INP</idno>
            <idno type="stamp" n="TEST7-HALCNRS">test 7 du portail hal cnrs</idno>
          </seriesStmt>
          <notesStmt>
            <note type="audience" n="3">National</note>
            <note type="invited" n="0">No</note>
            <note type="popular" n="0">No</note>
            <note type="peer" n="1">Yes</note>
            <note type="proceedings" n="1">Yes</note>
          </notesStmt>
          <sourceDesc>
            <biblStruct>
              <analytic>
                <title xml:lang="fr">Un système d'apprentissage ensembliste explicable pour détecter des attaques réseau inconnues</title>
                <author role="aut">
                  <persName>
                    <forename type="first">Céline</forename>
                    <surname>Minh</surname>
                  </persName>
                  <email type="md5">0f1a5321917bebebe2e1296f6b8f770b</email>
                  <email type="domain">custocy.com</email>
                  <idno type="idhal" notation="numeric">1290383</idno>
                  <idno type="halauthorid" notation="string">1670475-1290383</idno>
                  <affiliation ref="#struct-1170242"/>
                  <affiliation ref="#struct-388967"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Kevin</forename>
                    <surname>Vermeulen</surname>
                  </persName>
                  <email type="md5">1541542afcdf4daff690eee1babe11be</email>
                  <email type="domain">cnrs.fr</email>
                  <idno type="idhal" notation="string">kevin-vermeulen</idno>
                  <idno type="idhal" notation="numeric">753022</idno>
                  <idno type="halauthorid" notation="string">55018-753022</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-6168-7887</idno>
                  <affiliation ref="#struct-388967"/>
                  <affiliation ref="#struct-441569"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Cédric</forename>
                    <surname>Lefebvre</surname>
                  </persName>
                  <email type="md5">e6c611de4c1f3474bdd0e28fcb1e38b6</email>
                  <email type="domain">custocy.com</email>
                  <idno type="idhal" notation="numeric">1290384</idno>
                  <idno type="halauthorid" notation="string">1407933-1290384</idno>
                  <idno type="IDREF">https://www.idref.fr/260229555</idno>
                  <affiliation ref="#struct-1170242"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">Philippe</forename>
                    <surname>Owezarski</surname>
                  </persName>
                  <email type="md5">11e8a050275242e79cf23862dea484c0</email>
                  <email type="domain">laas.fr</email>
                  <idno type="idhal" notation="string">philippe-owezarski</idno>
                  <idno type="idhal" notation="numeric">13969</idno>
                  <idno type="halauthorid" notation="string">5222-13969</idno>
                  <idno type="ORCID">https://orcid.org/0000-0001-7713-7003</idno>
                  <idno type="IDREF">https://www.idref.fr/119076977</idno>
                  <affiliation ref="#struct-388967"/>
                </author>
                <author role="aut">
                  <persName>
                    <forename type="first">William</forename>
                    <surname>Ritchie</surname>
                  </persName>
                  <email type="md5">e3a792cd92d2f3521b7a0eebb483c103</email>
                  <email type="domain">custocy.com</email>
                  <idno type="idhal" notation="numeric">1290385</idno>
                  <idno type="halauthorid" notation="string">149540-1290385</idno>
                  <affiliation ref="#struct-1170242"/>
                </author>
              </analytic>
              <monogr>
                <idno type="localRef">Rapport LAAS n° 23427</idno>
                <meeting>
                  <title>Conference on Artificial Intelligence for Defense</title>
                  <date type="start">2023-11-22</date>
                  <date type="end">2023-11-23</date>
                  <settlement>Rennes</settlement>
                  <country key="FR">France</country>
                </meeting>
                <respStmt>
                  <resp>conferenceOrganizer</resp>
                  <name>DGA Maîtrise de l'Information</name>
                </respStmt>
                <imprint>
                  <date type="datePub">2023-11</date>
                </imprint>
              </monogr>
            </biblStruct>
          </sourceDesc>
          <profileDesc>
            <langUsage>
              <language ident="fr">French</language>
            </langUsage>
            <textClass>
              <classCode scheme="halDomain" n="info">Computer Science [cs]</classCode>
              <classCode scheme="halTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halOldTypology" n="COMM">Conference papers</classCode>
              <classCode scheme="halTreeTypology" n="COMM">Conference papers</classCode>
            </textClass>
            <abstract xml:lang="fr">
              <p>L'apprentissage automatique est une technologie prometteuse pour les systèmes de détection d'intrusions. Il existe une grande variété d'algorithmes d'apprentissage automatique dont les résultats semblent complémentaires, mais déterminer quel résultat est correct dans un cas spécifique est difficile car les algorithmes ne sont pas tous explicables. Cet article introduit un système conc ¸u pour être explicable qui reconstruit des schémas d'attaques à partir des sorties d'un ensemble de détecteurs d'anomalies non supervisés et les présente aux analystes de sécurité pour les aider à interpréter chacune des détections. Mots-clés-Sécurité réseau, détection d'anomalies non supervisée, IA explicable, apprentissage ensembliste, CNN</p>
            </abstract>
          </profileDesc>
        </biblFull>
      </listBibl>
    </body>
    <back>
      <listOrg type="structures">
        <org type="institution" xml:id="struct-1170242" status="VALID">
          <orgName>Custocy</orgName>
          <date type="start">2018-01-01</date>
          <desc>
            <address>
              <addrLine>1244 L’Occitane, 31670 Labège</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.custocy.com/</ref>
          </desc>
        </org>
        <org type="researchteam" xml:id="struct-388967" status="OLD">
          <orgName>Équipe Services et Architectures pour Réseaux Avancés</orgName>
          <orgName type="acronym">LAAS-SARA</orgName>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.laas.fr/public/fr/sara</ref>
          </desc>
          <listRelation>
            <relation active="#struct-459" type="direct"/>
            <relation active="#struct-81148" type="indirect"/>
            <relation name="443875" active="#struct-443875" type="indirect"/>
            <relation active="#struct-116255" type="indirect"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation active="#struct-116256" type="indirect"/>
            <relation active="#struct-217752" type="indirect"/>
            <relation name="UPR8001" active="#struct-441569" type="indirect"/>
            <relation active="#struct-448187" type="indirect"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-441569" status="VALID">
          <idno type="IdRef">02636817X</idno>
          <idno type="ISNI">0000000122597504</idno>
          <idno type="ROR">https://ror.org/02feahw73</idno>
          <orgName>Centre National de la Recherche Scientifique</orgName>
          <orgName type="acronym">CNRS</orgName>
          <date type="start">1939-10-19</date>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.cnrs.fr/</ref>
          </desc>
        </org>
        <org type="laboratory" xml:id="struct-459" status="OLD">
          <idno type="IdRef">199278792</idno>
          <idno type="ISNI">0000 0001 2188 216X </idno>
          <idno type="RNSR">199517454Y</idno>
          <idno type="ROR">https://ror.org/03vcm6439</idno>
          <orgName>Laboratoire d'analyse et d'architecture des systèmes</orgName>
          <orgName type="acronym">LAAS</orgName>
          <date type="start">1968-01-01</date>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>7 Av du colonel Roche 31077 TOULOUSE CEDEX 4</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.laas.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-81148" type="direct"/>
            <relation name="443875" active="#struct-443875" type="indirect"/>
            <relation active="#struct-116255" type="direct"/>
            <relation active="#struct-301232" type="indirect"/>
            <relation active="#struct-443875" type="indirect"/>
            <relation active="#struct-116256" type="direct"/>
            <relation active="#struct-217752" type="direct"/>
            <relation name="UPR8001" active="#struct-441569" type="direct"/>
            <relation active="#struct-448187" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-81148" status="VALID">
          <idno type="IdRef">026404354</idno>
          <idno type="ISNI">0000000121902837</idno>
          <idno type="ROR">https://ror.org/0443n9e75</idno>
          <orgName>Université Toulouse Capitole</orgName>
          <orgName type="acronym">UT Capitole</orgName>
          <date type="start">1970-01-01</date>
          <desc>
            <address>
              <addrLine>2 rue du Doyen-Gabriel-Marty - 31042 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.ut-capitole.fr/</ref>
          </desc>
          <listRelation>
            <relation name="443875" active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-443875" status="VALID">
          <idno type="ROR">https://ror.org/017tgbk05</idno>
          <orgName>Communauté d'universités et établissements de Toulouse</orgName>
          <orgName type="acronym">Comue de Toulouse</orgName>
          <desc>
            <address>
              <addrLine>41 Allée Jules Guesde, 31000 Toulouse</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.univ-toulouse.fr/</ref>
          </desc>
        </org>
        <org type="institution" xml:id="struct-116255" status="VALID">
          <idno type="IdRef">026388766</idno>
          <idno type="ISNI">0000 0001 2286 8343</idno>
          <idno type="ROR">https://ror.org/01h8pf755</idno>
          <idno type="Wikidata">Q858979</idno>
          <orgName>Institut National des Sciences Appliquées - Toulouse</orgName>
          <orgName type="acronym">INSA Toulouse</orgName>
          <date type="start">1963-10-21</date>
          <desc>
            <address>
              <addrLine>135, avenue de Rangueil - 31077 Toulouse cedex 4</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.insa-toulouse.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-301232" type="direct"/>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="regroupinstitution" xml:id="struct-301232" status="VALID">
          <idno type="IdRef">162105150</idno>
          <orgName>Institut National des Sciences Appliquées</orgName>
          <orgName type="acronym">INSA</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
          </desc>
        </org>
        <org type="institution" xml:id="struct-116256" status="VALID">
          <idno type="IdRef">026403994</idno>
          <idno type="ROR">https://ror.org/04ezk3x31</idno>
          <orgName>Université Toulouse - Jean Jaurès</orgName>
          <orgName type="acronym">UT2J</orgName>
          <date type="start">1971-01-01</date>
          <desc>
            <address>
              <addrLine>5 allées Antonio Machado - 31058 Toulouse Cedex 9</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-tlse2.fr</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-217752" status="OLD">
          <idno type="IdRef">026404672</idno>
          <idno type="ISNI">0000000121617331</idno>
          <idno type="ROR">https://ror.org/02v6kpv12</idno>
          <idno type="Wikidata">Q1273188</idno>
          <orgName>Université Toulouse III - Paul Sabatier</orgName>
          <orgName type="acronym">UT3</orgName>
          <date type="end">2025-01-01</date>
          <desc>
            <address>
              <addrLine>118 route de Narbonne - 31062 Toulouse</addrLine>
              <country key="FR"/>
            </address>
            <ref type="url">http://www.univ-tlse3.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
        <org type="institution" xml:id="struct-448187" status="VALID">
          <idno type="IdRef">026388820</idno>
          <idno type="ISNI">0000000121766169</idno>
          <idno type="ROR">https://ror.org/033p9g875</idno>
          <orgName>Institut National Polytechnique (Toulouse)</orgName>
          <orgName type="acronym">Toulouse INP</orgName>
          <desc>
            <address>
              <country key="FR"/>
            </address>
            <ref type="url">https://www.inp-toulouse.fr/</ref>
          </desc>
          <listRelation>
            <relation active="#struct-443875" type="direct"/>
          </listRelation>
        </org>
      </listOrg>
    </back>
  </text>
</TEI>