
CARE-GATE: Cost-Aware Uncertainty Gating for Digital Twin based IoT Intrusion Response
Nauman Irshad Ali Shah, Syed Qarib Ali Naqvi, Muhammad Umer Amir, Ali Ahmad, Danish Ali, Ahmad Arsalan
Conference manuscript · Digital Twin IoT intrusion response
Read abstractHide abstract
Machine-learning intrusion detectors usually report predictive performance but do not specify how a detected IoT attack should be handled when response actions have different operational costs. This paper presents CARE-GATE, a cost-aware response policy that combines detector confidence, explanation stability, and a Digital Twin state residual in an uncertainty gate. The gate blocks automatic isolation when evidence is uncertain and uses an explicit cost matrix to calibrate its weights and threshold. Evaluated on a balanced eight-class subset of CICIoT2023, CatBoost gives the best weighted F1-score (76.09%). These results show how explicit operational costs and uncertainty evidence shape response behavior beyond detector accuracy alone.
Keywords: Internet of Things · intrusion detection · cost-sensitive response · uncertainty gating · Digital Twin · explainable AI · SHAP · CatBoost

