Slide
Centre Interdisciplinaire
de Recherche et d’Innovation
en Cybersécurité et Société
de Recherche et d’Innovation
en Cybersécurité et Société
1.
Malasi, J. -J. M.; Moudoud, H.; Missaoui, R.
CausalGraph: When Causal Reasoning Meets Large Language Models for Intrusion Detection Systems Proceedings Article
In: Dig Tech Pap IEEE Int Conf Consum Electron, Institute of Electrical and Electronics Engineers Inc., 2026, ISBN: 0747668X (ISSN); 979-833155343-2 (ISBN), (Journal Abbreviation: Dig Tech Pap IEEE Int Conf Consum Electron).
Abstract | Links | BibTeX | Tags: Alarm systems, Budget control, causal reasoning, Chains, Computer crime, Concept Drift, Concept drifts, Conformal Risk Control, Counterfactuals, Generative AI, Human computer interaction, Intrusion Detection, Intrusion Detection Systems, Intrusion-Detection, Knowledge based systems, Language model, LLM, LLMs, Network intrusion, Network security, Risks controls, Sampling
@inproceedings{malasiCausalGraphWhenCausal2026,
title = {CausalGraph: When Causal Reasoning Meets Large Language Models for Intrusion Detection Systems},
author = {J. -J. M. Malasi and H. Moudoud and R. Missaoui},
url = {https://www.scopus.com/pages/publications/105037367854?origin=resultslist},
doi = {10.1109/ICCE67443.2026.11449614},
isbn = {0747668X (ISSN); 979-833155343-2 (ISBN)},
year = {2026},
date = {2026-01-01},
booktitle = {Dig Tech Pap IEEE Int Conf Consum Electron},
publisher = {Institute of Electrical and Electronics Engineers Inc.},
abstract = {Modern intrusion detection systems often achieve impressive benchmark accuracy yet fail in real-world deployment, where network behavior and attacker tactics continuously evolve. Under concept drift, decision boundaries learned offline can diverge from operational reality, triggering false-alarm cascades and creating detection blind spots that erode analyst trust. In this paper, we propose CausalGraph-IDS, a causal and language-model-assisted intrusion detection framework that moves beyond purely correlational scoring by explicitly verifying multi-stage attack chains. Additionally, we propose CHAIN-CRC, a unified algorithm that (i) learns a constrained attack-chain causal graph guided by knowledge-based priors derived from widely used adversary behavior taxonomies, (ii) computes robustness scores by testing whether alarms persist under feasible counterfactual security interventions, and (iii) applies conformal risk control to enforce operator-defined false-positive budgets with finite-sample guarantees.Generative models are integrated in strictly assistive roles through three modules: prior induction to distill causal constraints from unstructured threat reports, counterfactual generation to propose realistic and operationally feasible interventions, and causal logic justification to produce human-readable explanations grounded in the learned attack chain. Experiments on two widely used network intrusion detection benchmarks show that CausalGraph-IDS provides robust, explainable, and risk-governed detection, maintaining strong recall at low false-positive rates while delivering actionable causal insights for mitigation. © 2026 IEEE.},
note = {Journal Abbreviation: Dig Tech Pap IEEE Int Conf Consum Electron},
keywords = {Alarm systems, Budget control, causal reasoning, Chains, Computer crime, Concept Drift, Concept drifts, Conformal Risk Control, Counterfactuals, Generative AI, Human computer interaction, Intrusion Detection, Intrusion Detection Systems, Intrusion-Detection, Knowledge based systems, Language model, LLM, LLMs, Network intrusion, Network security, Risks controls, Sampling},
pubstate = {published},
tppubtype = {inproceedings}
}
Modern intrusion detection systems often achieve impressive benchmark accuracy yet fail in real-world deployment, where network behavior and attacker tactics continuously evolve. Under concept drift, decision boundaries learned offline can diverge from operational reality, triggering false-alarm cascades and creating detection blind spots that erode analyst trust. In this paper, we propose CausalGraph-IDS, a causal and language-model-assisted intrusion detection framework that moves beyond purely correlational scoring by explicitly verifying multi-stage attack chains. Additionally, we propose CHAIN-CRC, a unified algorithm that (i) learns a constrained attack-chain causal graph guided by knowledge-based priors derived from widely used adversary behavior taxonomies, (ii) computes robustness scores by testing whether alarms persist under feasible counterfactual security interventions, and (iii) applies conformal risk control to enforce operator-defined false-positive budgets with finite-sample guarantees.Generative models are integrated in strictly assistive roles through three modules: prior induction to distill causal constraints from unstructured threat reports, counterfactual generation to propose realistic and operationally feasible interventions, and causal logic justification to produce human-readable explanations grounded in the learned attack chain. Experiments on two widely used network intrusion detection benchmarks show that CausalGraph-IDS provides robust, explainable, and risk-governed detection, maintaining strong recall at low false-positive rates while delivering actionable causal insights for mitigation. © 2026 IEEE.
2.
Nabelsi, V.; Gagnon, S.
Information technology strategy for a patient-oriented, lean, and agile integration of hospital pharmacy and medical equipment supply chains Journal Article
In: International Journal of Production Research, vol. 55, no. 14, pp. 3929–3945, 2017, ISSN: 00207543, (Publisher: Taylor and Francis Ltd.).
Abstract | Links | BibTeX | Tags: Administrative data processing, Agile manufacturing systems, Artificial intelligence, Biomedical equipment, Budget control, Business process management, Decision support system (dss), Decision support systems, Enterprise resource management, Hospitals, Infusion pump, Patient-oriented, pharmacy inventory, Pumps, Radio frequency identification (RFID), Reengineering, Supply chain management, Supply chain managements (SCM)
@article{nabelsi_information_2017,
title = {Information technology strategy for a patient-oriented, lean, and agile integration of hospital pharmacy and medical equipment supply chains},
author = {V. Nabelsi and S. Gagnon},
url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84981229289&doi=10.1080%2f00207543.2016.1218082&partnerID=40&md5=7b476ebaef87d06a411d3c3c683a0362},
doi = {10.1080/00207543.2016.1218082},
issn = {00207543},
year = {2017},
date = {2017-01-01},
journal = {International Journal of Production Research},
volume = {55},
number = {14},
pages = {3929–3945},
publisher = {Taylor and Francis Ltd.},
abstract = {Both public and private hospitals are increasingly under pressure to reduce costs while improving patient care across all medical disciplines and departments. Hospitals must become patient-oriented, lean, and agile in order to properly realign and integrate health care processes, helping to reconcile efficiency imperatives with patient needs and hospital mission. One of the highest potential for improvement can be found in supply chain management (SCM) practices for medical supplies, which often represent more than 40% of a hospital’s operating budget. We report on 3 case studies of business process management and reengineering projects, relying on advanced information technology, focused on the supply chains of two major urban hospitals, involving $2 million in minimum stocks for drug inventory. Case study 1 deals with an in-depth analysis of SCM practices around a key medical asset in pharmaceutical supply, i.e. infusion pumps. Case study 2 builds upon the findings of case 1, and proposes an radio-frequency identification solution to support a new hospital-wide asset location process and system, aiming for just-in-time availability of infusion pumps for critical drugs administration. Case study 3 complements cases 1 and 2 by analysing the feasibility of integrating the various components of the hospital pharmacy inventories, which in turn could be integrated to asset location systems. Our 3 case studies lead us to a number of conclusions on how hospitals can develop a patient-oriented, agile, and lean perspectives and practices, as well as ensure the proper integration of patient needs within optimised supply chains. © 2016 Informa UK Limited, trading as Taylor & Francis Group.},
note = {Publisher: Taylor and Francis Ltd.},
keywords = {Administrative data processing, Agile manufacturing systems, Artificial intelligence, Biomedical equipment, Budget control, Business process management, Decision support system (dss), Decision support systems, Enterprise resource management, Hospitals, Infusion pump, Patient-oriented, pharmacy inventory, Pumps, Radio frequency identification (RFID), Reengineering, Supply chain management, Supply chain managements (SCM)},
pubstate = {published},
tppubtype = {article}
}
Both public and private hospitals are increasingly under pressure to reduce costs while improving patient care across all medical disciplines and departments. Hospitals must become patient-oriented, lean, and agile in order to properly realign and integrate health care processes, helping to reconcile efficiency imperatives with patient needs and hospital mission. One of the highest potential for improvement can be found in supply chain management (SCM) practices for medical supplies, which often represent more than 40% of a hospital’s operating budget. We report on 3 case studies of business process management and reengineering projects, relying on advanced information technology, focused on the supply chains of two major urban hospitals, involving $2 million in minimum stocks for drug inventory. Case study 1 deals with an in-depth analysis of SCM practices around a key medical asset in pharmaceutical supply, i.e. infusion pumps. Case study 2 builds upon the findings of case 1, and proposes an radio-frequency identification solution to support a new hospital-wide asset location process and system, aiming for just-in-time availability of infusion pumps for critical drugs administration. Case study 3 complements cases 1 and 2 by analysing the feasibility of integrating the various components of the hospital pharmacy inventories, which in turn could be integrated to asset location systems. Our 3 case studies lead us to a number of conclusions on how hospitals can develop a patient-oriented, agile, and lean perspectives and practices, as well as ensure the proper integration of patient needs within optimised supply chains. © 2016 Informa UK Limited, trading as Taylor & Francis Group.
3.
Nabelsi, V.; Gagnon, S.
Information technology strategy for a patient-oriented, lean, and agile integration of hospital pharmacy and medical equipment supply chains Journal Article
In: International Journal of Production Research, vol. 55, no. 14, pp. 3929–3945, 2017, ISSN: 00207543.
Abstract | Links | BibTeX | Tags: Administrative data processing, Agile manufacturing systems, Artificial intelligence, Biomedical equipment, Budget control, Business process management, Decision support system (dss), Decision support systems, Enterprise resource management, Hospitals, Infusion pump, Patient-oriented, pharmacy inventory, Pumps, Radio frequency identification (RFID), Reengineering, Supply chain management, Supply chain managements (SCM)
@article{nabelsiInformationTechnologyStrategy2017,
title = {Information technology strategy for a patient-oriented, lean, and agile integration of hospital pharmacy and medical equipment supply chains},
author = {V. Nabelsi and S. Gagnon},
url = {https://www.scopus.com/inward/record.uri?eid=2-s2.0-84981229289&doi=10.1080%2f00207543.2016.1218082&partnerID=40&md5=7b476ebaef87d06a411d3c3c683a0362},
doi = {10.1080/00207543.2016.1218082},
issn = {00207543},
year = {2017},
date = {2017-01-01},
journal = {International Journal of Production Research},
volume = {55},
number = {14},
pages = {3929–3945},
publisher = {Taylor and Francis Ltd.},
abstract = {Both public and private hospitals are increasingly under pressure to reduce costs while improving patient care across all medical disciplines and departments. Hospitals must become patient-oriented, lean, and agile in order to properly realign and integrate health care processes, helping to reconcile efficiency imperatives with patient needs and hospital mission. One of the highest potential for improvement can be found in supply chain management (SCM) practices for medical supplies, which often represent more than 40% of a hospital’s operating budget. We report on 3 case studies of business process management and reengineering projects, relying on advanced information technology, focused on the supply chains of two major urban hospitals, involving $2 million in minimum stocks for drug inventory. Case study 1 deals with an in-depth analysis of SCM practices around a key medical asset in pharmaceutical supply, i.e. infusion pumps. Case study 2 builds upon the findings of case 1, and proposes an radio-frequency identification solution to support a new hospital-wide asset location process and system, aiming for just-in-time availability of infusion pumps for critical drugs administration. Case study 3 complements cases 1 and 2 by analysing the feasibility of integrating the various components of the hospital pharmacy inventories, which in turn could be integrated to asset location systems. Our 3 case studies lead us to a number of conclusions on how hospitals can develop a patient-oriented, agile, and lean perspectives and practices, as well as ensure the proper integration of patient needs within optimised supply chains. © 2016 Informa UK Limited, trading as Taylor & Francis Group.},
keywords = {Administrative data processing, Agile manufacturing systems, Artificial intelligence, Biomedical equipment, Budget control, Business process management, Decision support system (dss), Decision support systems, Enterprise resource management, Hospitals, Infusion pump, Patient-oriented, pharmacy inventory, Pumps, Radio frequency identification (RFID), Reengineering, Supply chain management, Supply chain managements (SCM)},
pubstate = {published},
tppubtype = {article}
}
Both public and private hospitals are increasingly under pressure to reduce costs while improving patient care across all medical disciplines and departments. Hospitals must become patient-oriented, lean, and agile in order to properly realign and integrate health care processes, helping to reconcile efficiency imperatives with patient needs and hospital mission. One of the highest potential for improvement can be found in supply chain management (SCM) practices for medical supplies, which often represent more than 40% of a hospital’s operating budget. We report on 3 case studies of business process management and reengineering projects, relying on advanced information technology, focused on the supply chains of two major urban hospitals, involving $2 million in minimum stocks for drug inventory. Case study 1 deals with an in-depth analysis of SCM practices around a key medical asset in pharmaceutical supply, i.e. infusion pumps. Case study 2 builds upon the findings of case 1, and proposes an radio-frequency identification solution to support a new hospital-wide asset location process and system, aiming for just-in-time availability of infusion pumps for critical drugs administration. Case study 3 complements cases 1 and 2 by analysing the feasibility of integrating the various components of the hospital pharmacy inventories, which in turn could be integrated to asset location systems. Our 3 case studies lead us to a number of conclusions on how hospitals can develop a patient-oriented, agile, and lean perspectives and practices, as well as ensure the proper integration of patient needs within optimised supply chains. © 2016 Informa UK Limited, trading as Taylor & Francis Group.