Published March 24, 2026
| Version v1.0.0
Software
Open
ACDC: Unified Alert Correlation for Cyber-Physical Power Systems via Prototype-Guided Differentiable Clustering
Authors/Creators
Description
ACDC is a graph-free framework that couples multi-view alert representation learning with prototype-guided differentiable clustering to correct temporal-semantic bias in cyber-physical SOC alert streams.
This repository contains the reference implementation accompanying the submitted manuscript. Public benchmark results are reported as means over five random seeds with fixed data.random_seed: 42.
Key features:
- Multi-view alert representation (semantic, temporal, host behavior, frequency)
- Prototype-guided differentiable clustering with Iterative Cross-Attention (ICA)
- Jointly optimized clustering-aware representation learning
- One-command reproducibility verification helper
Results:
| Dataset | ARI | NMI |
|---|---|---|
| Alert-SOC-2024 | 0.618 | 0.634 |
| HDFS | 0.607 | 0.626 |
| ISCX-IDS-2012 | 0.692 | 0.755 |
Citation: Citation will be added upon publication.
Files
acdc_v1.0.0.zip
Additional details
Related works
- Is supplement to
- https://github.com/nobugpal/ACDC (URL)