Conversational versus Dashboard Explainable AI for UAV Intrusion Detection: An Empirical Study of Operator Trust and Reliance

arXiv cs.AI 论文

摘要

This empirical study compares conversational XAI (powered by LLMs) against a traditional dashboard for UAV intrusion detection auditing, finding the conversational interface improves perceived usefulness but risks operator over-reliance on AI advice.

arXiv:2608.10434v1 Announce Type: new Abstract: Machine learning-based Intrusion Detection Systems (IDS) have demonstrated superior performance in securing Unmanned Aerial Vehicle (UAV) networks. However, the 'black-box' nature of these models, combined with the high dimensionality of multimodal cyber-physical data, poses significant interpretability challenges. Static visualization dashboards may struggle to present complex relationships among multimodal cyber-physical features in a form that is easy for operators to inspect and interpret. To address this, we propose a Conversational XAI interface powered by Large Language Models (LLM) to facilitate on-demand investigation. In a controlled experiment with participants, we systematically evaluated the impact of this conversational interface versus a traditional XAI Dashboard on operator understanding, trust, and reliance during post-incident auditing tasks. Our results suggest that the conversational interface was perceived as more useful than the dashboard, potentially because it helped participants access and synthesize relevant information more easily. However, this benefit was accompanied by a lower level of appropriate self-reliance, indicating a potential risk of over-reliance. One possible interpretation is that the natural-language responses made the AI advice easier to accept, which may have reduced participants' tendency to verify the underlying evidence when the IDS was incorrect. These findings point to a potential trade-off in human-AI collaboration for UAV intrusion auditing: interaction mechanisms that improve perceived usability may also increase the risk of inappropriate reliance. We conclude by discussing design implications for future XAI systems that balance seamless interaction with cognitive forcing functions to foster appropriate reliance.
查看原文
查看缓存全文

缓存时间: 2026/08/12 08:23

# Conversational versus Dashboard Explainable AI for UAV Intrusion Detection: An Empirical Study of Operator Trust and Reliance
Source: [https://arxiv.org/html/2608.10434](https://arxiv.org/html/2608.10434)
11institutetext:A2I Lab, Phenikaa School of Computing, Phenikaa University, Hanoi, Vietnam
22institutetext:MobiFone HighTech Center, MobiFone Corporation, Hanoi, Vietnam
33institutetext:Business AI Lab, College of Technology, National Economics University, Vietnam
33email:\{cong\.nguyenchi, trang\.maixuan\}@phenikaa\-uni\.edu\.vn, duc\.ngo@mobifone\.vn, \{ngannguyen, nghiant, thienlv\}@neu\.edu\.vnTrang Mai XuanVu\-Duc NgoKim\-Ngan Thi NguyenTrong\-Nghia NguyenThien Van LuongCorresponding author\.

###### Abstract

Machine learning\-based Intrusion Detection Systems \(IDS\) have demonstrated superior performance in securing Unmanned Aerial Vehicle \(UAV\) networks\. However, the ‘black\-box’ nature of these models, combined with the high dimensionality of multimodal cyber\-physical data, poses significant interpretability challenges\. Static visualization dashboards may struggle to present complex relationships among multimodal cyber\-physical features in a form that is easy for operators to inspect and interpret\. To address this, we propose a Conversational XAI interface powered by Large Language Models \(LLM\) to facilitate on\-demand investigation\. In a controlled experiment with participants, we systematically evaluated the impact of this conversational interface versus a traditional XAI Dashboard on operator understanding, trust, and reliance during post\-incident auditing tasks\. Our results suggest that the conversational interface was perceived as more useful than the dashboard, potentially because it helped participants access and synthesize relevant information more easily\. However, this benefit was accompanied by a lower level of appropriate self\-reliance, indicating a potential risk of over\-reliance\. One possible interpretation is that the natural\-language responses made the AI advice easier to accept, which may have reduced participants’ tendency to verify the underlying evidence when the IDS was incorrect\. These findings point to a potential trade\-off in human\-AI collaboration for UAV intrusion auditing: interaction mechanisms that improve perceived usability may also increase the risk of inappropriate reliance\. We conclude by discussing design implications for future XAI systems that balance seamless interaction with cognitive forcing functions to foster appropriate reliance\.

## 1Introduction

Unmanned Aerial Vehicles \(UAVs\) have witnessed widespread adoption across diverse sectors\[[1](https://arxiv.org/html/2608.10434#bib.bib1)\], yet their heavy reliance on open wireless communication exposes them to severe cyber threats such as replay, spoofing, and Denial\-of\-Service \(DoS\) attacks\[[11](https://arxiv.org/html/2608.10434#bib.bib20)\]\. To safeguard these networks, robust Intrusion Detection Systems \(IDS\) have become imperative\. Unlike traditional networks, UAV ecosystems generate high\-dimensional multimodal data, necessitating the fusion of cyber features and physical kinematics for effective threat identification; while benchmarks like the UAV\-ID dataset\[[7](https://arxiv.org/html/2608.10434#bib.bib8)\]show that fusing these modalities enhances detection efficacy, this complexity comes at a cost\. Driven by such rich data, modern IDS increasingly rely on machine learning, yet these models often function as opaque ‘black boxes’, creating a barrier to trust in high\-stakes defense\[[27](https://arxiv.org/html/2608.10434#bib.bib11)\]\. Although post\-hoc explanation techniques have been developed to interpret these predictions\[[21](https://arxiv.org/html/2608.10434#bib.bib13)\], their mere existence does not guarantee effective human\-AI collaboration: operators must establish appropriate reliance on IDS alerts when validating system outputs and reasoning about possible attack causes\[[23](https://arxiv.org/html/2608.10434#bib.bib18)\], which requires not just access to explanations but a comprehensive understanding of the underlying rationale\. However, static XAI dashboards may not always match the diverse information needs of stakeholders\[[12](https://arxiv.org/html/2608.10434#bib.bib21)\], particularly when operators need to inspect relationships among many cyber\-physical features\. In such settings, dense visual displays can make explanation navigation effortful\[[25](https://arxiv.org/html/2608.10434#bib.bib23)\]\. They also demand high AI literacy, leaving operators unable to articulate their specific inquiries effectively\[[22](https://arxiv.org/html/2608.10434#bib.bib24)\]\.

To address this gap, this paper focuses on the human\-AI interaction layer of explainable UAV intrusion detection\. Our main contributions are as follows:

- ∙\\bulletWe implement a conversational interface that allows users to query global explanations, local feature attributions, counterfactual explanations, and what\-if analyses through natural language, using the same underlying XAI evidence as a dashboard baseline\.
- ∙\\bulletWe conduct a user study comparing no explanation, Dashboard XAI, and Conversational XAI in a fallible IDS setting, measuring subjective understanding, explanation utility, trust, and behavioral reliance\.
- ∙\\bulletWe show that Conversational XAI increases agreement with AI advice but reduces appropriate self\-reliance compared with Dashboard XAI when the IDS is incorrect\. This finding indicates that fluent natural\-language explanations may make AI advice easier to accept without necessarily improving evidence verification\.

## 2Related Work

We review human\-AI decision making and explainable AI, identifying that the comparative impact of conversational interfaces versus XAI dashboards on operator understanding and reliance has been largely overlooked in the literature\.

### 2\.1Human\-AI Decision Making

Predictive AI systems are powerful but seldom perfect\[[11](https://arxiv.org/html/2608.10434#bib.bib20)\], which is problematic in high\-stakes UAV applications: machine learning\-based IDS lacks legal and moral accountability, yet human operators bear full responsibility for critical decisions\. Complementary team performance, in which humans leverage AI to cover their own blind spots, therefore becomes a critical goal\[[3](https://arxiv.org/html/2608.10434#bib.bib38)\], and remains vital in the era of Large Language Models \(LLM\) that increasingly underpin explanation generation tasks\[[2](https://arxiv.org/html/2608.10434#bib.bib39)\]\.

Achieving appropriate reliance is especially hard in the UAV domain given the high cost of errors: algorithm aversion may lead pilots to disregard valid jamming alerts and lose the vehicle, while algorithm appreciation can cause them to accept false positives and abort missions needlessly\[[8](https://arxiv.org/html/2608.10434#bib.bib34)\]\. Prior work has explored how confidence, risk perception, and explanations shape these outcomes\[[15](https://arxiv.org/html/2608.10434#bib.bib32)\], and how human factors such as expertise and domain knowledge affect trust\[[4](https://arxiv.org/html/2608.10434#bib.bib33)\]\. To mitigate bias, cognitive forcing functions, interaction mechanisms that require users to pause and deliberate before deciding, were proposed to encourage more thoughtful engagement with explanations\[[8](https://arxiv.org/html/2608.10434#bib.bib34)\], alongside tutorial interventions that reveal AI limitations\[[11](https://arxiv.org/html/2608.10434#bib.bib20)\]\.

Nevertheless, these studies primarily focus on static interventions in low\-risk environments\. It remains empirically unclear whether conversational interaction in UAV intrusion auditing acts as a cognitive aid or a source of inappropriate reliance\. This motivates us to fill such a research gap and explore how a conversational XAI interface affects user understanding, perceived utility, trust, and reliance in IDS auditing tasks\.

### 2\.2Explainable AI

Although machine\-learning\-based IDS have shown promising predictive performance for UAV networks, their ‘black\-box’ nature remains a primary barrier to adoption\. Prior legal and policy discussions have emphasized the importance of meaningful information about automated decisions, especially in high\-stakes settings\[[19](https://arxiv.org/html/2608.10434#bib.bib40)\]\.

To address the ‘black\-box’ issue, researchers have proposed diverse XAI algorithms: feature attribution methods highlight critical input features\[[14](https://arxiv.org/html/2608.10434#bib.bib41)\], while counterfactual and contrastive explanations offer alternatives\[[26](https://arxiv.org/html/2608.10434#bib.bib43)\], with a comprehensive review in\[[13](https://arxiv.org/html/2608.10434#bib.bib44)\]\. Yet raw algorithmic outputs are often insufficient\. Because UAV operators have diverse information needs spanning flight control and network security, there is no one\-size\-fits\-all solution; human\-centered XAI\[[5](https://arxiv.org/html/2608.10434#bib.bib45)\]therefore focuses on how explanations shape the operator’s mental model, an internal representation of the security status\[[16](https://arxiv.org/html/2608.10434#bib.bib46)\]\. Effectiveness depends heavily on presentation, and Conversational User Interfaces \(CUI\) have emerged as a promising solution: compared to Graphical User Interfaces, CUIs offer more human\-like interaction\[[22](https://arxiv.org/html/2608.10434#bib.bib24)\]and can simplify complex monitoring by filtering information, yielding higher subjective trust\[[13](https://arxiv.org/html/2608.10434#bib.bib44)\]\.

While conversational assistants have been widely adopted in domains such as search engines\[[10](https://arxiv.org/html/2608.10434#bib.bib49)\], their application in UAV security remains limited\. Although\[[20](https://arxiv.org/html/2608.10434#bib.bib50)\]explored conversational XAI in the contexts of collaborative writing, to the best of our knowledge, limited prior work has systematically compared conversational XAI interfaces with dashboard\-based XAI in terms of operator trust and reliance for UAV intrusion detection\. This motivates our work to bridge this empirical gap by analyzing whether a conversational interface can better support human\-AI decision\-making in auditing IDS alerts and interpreting potential threats against UAV networks\.

## 3Proposed Method

We propose a conversational XAI interface for UAV IDS that uses an LLM to interpret outputs from various XAI methods and deliver them as interactive explanations to the operator\. A comprehensive XAI Dashboard covering the same underlying methods serves as a comparative baseline\.

### 3\.1Intrusion Detection and XAI Method

![Refer to caption](https://arxiv.org/html/2608.10434v1/x1.png)Figure 1:The architectural overview of the proposed XAI\-IDS interface framework\.The overall architecture of our proposed framework is illustrated in Fig\.[1](https://arxiv.org/html/2608.10434#S3.F1)\. The pipeline commences with data collected from UAV sensors and ground stations, comprising 42,258 samples\. During preprocessing, we drop columns that would otherwise leak the label, such astimestamp\_c,frame\.number, andwlan\.bssid, and split the data into training and test sets at a 7:3 ratio\. Because the attack classes are imbalanced, we report macro\-averaged metrics so that minority classes are weighted equally\. We report the model with the highest macro F1\-score on the test set, which provides an aggregate measure that balances precision and recall across classes, with the comparative results presented in Table[1](https://arxiv.org/html/2608.10434#S4.T1)\.

Subsequent to the classification phase, interpretability is achieved through a suite of XAI methods selected to align with the taxonomy of user information needs regarding the rationale of AI advice\[[12](https://arxiv.org/html/2608.10434#bib.bib21)\]\. Following the XAI question bank\[[12](https://arxiv.org/html/2608.10434#bib.bib21)\], we focus on four information needs that are directly supported by our interface: how, why, how to be that, and what if\. Our framework integrates the following methods:

- ∙\\bulletGlobal Explanation \(PDP\):To address“how”feature values generally affect attack probabilities, we utilize Partial Dependence Plots \(PDP\)\[[6](https://arxiv.org/html/2608.10434#bib.bib57)\]\. This method visualizes global trends, showing the operator how the probability of a specific attack type fluctuates as a feature varies across its range\.
- ∙\\bulletLocal Feature Attribution \(SHAP\):To answer“why”a specific alert was classified as malicious or benign, we use TreeSHAP to compute instance\-level feature contributions for the predicted class of the XGBoost IDS\. Using SHAP as the default attribution method avoids switching between explanation methods across alerts and provides a consistent interpretation format throughout the study\.We evaluate attribution faithfulness with a deletion\-style test\. Features are ranked by absolute SHAP value, and the top\-kkfeatures,SkS\_\{k\}withk∈\{1,…,5\}k\\in\\\{1,\\ldots,5\\\}, are replaced with valid values sampled from the empirical training distribution\. We then measure the drop in the predicted probability of the original class: Δk=py​\(x\)−𝔼x~∼𝒟t​r​a​i​n​\[py​\(xSk←x~Sk\)\]\.\\Delta\_\{k\}=p\_\{y\}\(x\)\-\\mathbb\{E\}\_\{\\tilde\{x\}\\sim\\mathcal\{D\}\_\{train\}\}\\left\[p\_\{y\}\(x\_\{S\_\{k\}\\leftarrow\\tilde\{x\}\_\{S\_\{k\}\}\}\)\\right\]\.Continuous features are restricted to observed training ranges, and categorical or protocol\-related features are replaced only with valid observed values\. The deletion scores are averaged as: Faithfulness AUC=1K​∑k=1KΔk,K=5\.\\text\{Faithfulness AUC\}=\\frac\{1\}\{K\}\\sum\_\{k=1\}^\{K\}\\Delta\_\{k\},\\quad K=5\.We use this score only to validate explanation faithfulness, not to select explanation methods\.
- ∙\\bulletContrastive Counterfactual Explanation \(MACE\):To answer“how would this alert need to differ to be classified differently?”, we use MACE to generate counterfactual explanations\. We treat these counterfactuals as diagnostic evidence rather than direct operational recommendations, since many IDS features are observed packet\- or protocol\-level attributes\. Counterfactual search is constrained to valid feature domains: continuous features remain within observed training ranges, categorical features use valid observed categories, and immutable or leakage\-prone fields are excluded\. The interface reports minimal evidence changes asV​a​l​u​eo​l​d→V​a​l​u​en​e​wValue\_\{old\}\\rightarrow Value\_\{new\}, or states that no valid counterfactual is available\.
- ∙\\bulletInteractive Simulation \(What\-If\):To support hypothesis testing \(“what if”\), we integrate a What\-If analysis toolkit\[[24](https://arxiv.org/html/2608.10434#bib.bib60)\]\. This allows operators to manually perturb feature values and simulate the resulting change in the model’s prediction and confidence scores\.

The outputs from these modules, the raw dataset features, the classifier’s predictions, and the generated XAI explanations, form a shared knowledge base used by both the XAI Dashboard and the LLM\-powered Conversational XAI Interface, with the goal of providing comparable underlying evidence across the two modalities\.

#### Dashboard XAI Interface

To serve as a comparative baseline for established operational standards, we developed the XAI Dashboard, a GUI designed to provide security operators with on\-demand access to intrusion explanations\. As depicted in the system architecture, this interface organizes the XAI methods \(PDP, SHAP, MACE, and What\-If\) into distinct modules accessible via a navigation control panel\.

#### Conversational XAI Interface

While dashboards provide structured access to data, they may offer less flexibility for addressing dynamic, user\-specific inquiries during threat investigations\. We therefore propose this interface as a natural\-language front end, powered byllama3\.1:70b\-instruct\-q4\_K\_M, that maps user queries to executable XAI tasks and returns textual summaries of the resulting explanations\. The system operates in three steps:

1. 1\.Intent Recognition:When an operator queries an alert, the Llama model is prompted to parse the input and map the operator’s query to one of the supported XAI information needs\.
2. 2\.Tool Execution:Leveraging the native function calling capability of the Llama, the agent operates in a reasoning loop\. When an intent is recognized, the model outputs a structured procedure call\.
3. 3\.Response Synthesis:Finally, the model synthesizes the technical outputs into a coherent textual narrative, summarizing the visual results and presenting them as a natural\-language explanation to the operator\.

The interface also suggests context\-aware hint questions to trigger investigations, allowing operators to explore cyber threats through natural conversation\.

## 4Experimental Results and Discussion

This study focuses on analyzing the impact of the proposed XAI interfaces rather than solely evaluating the quality of explanations\.

### 4\.1Performance Measures

#### Operator Understanding of the IDS

Drawing on\[[18](https://arxiv.org/html/2608.10434#bib.bib52)\], we adopted four dimensions to assess how operators comprehend the underlying IDS logic through simulated intrusion scenarios\. Detailed questionnaire items are provided in the supplementary materials\.

#### Explanation Utility

Following\[[9](https://arxiv.org/html/2608.10434#bib.bib26)\], we evaluated utility along four dimensions, completeness, coherence, clarity, and usefulness, capturing how effectively an explanation fosters a robust mental model of the attack\.

#### Operator Trust

We quantified subjective trust using three validated subscales from the Trust in Automation questionnaire, previously validated and commonly used for evaluating trust in automation and human\-AI collaboration\[[11](https://arxiv.org/html/2608.10434#bib.bib20)\]\.

#### Reliance and Appropriate Reliance

We evaluate reliance by logging operators’ pre\- and post\-interface decisions, measuring theagreementandswitch fractions\. To distinguish warranted from blind reliance, we use appropriate\-reliance measures\[[17](https://arxiv.org/html/2608.10434#bib.bib15)\]: relative positive AI reliance \(RAIR\) and relative positive self\-reliance \(RSR\)\. A decreasing RSR during disagreements can indicate a higher risk of over\-reliance, particularly when participants abandon correct initial judgments in favor of incorrect AI advice\. Differences across the three conditions are tested with the non\-parametric Kruskal\-WallisHHtest, which suits the ordinal, non\-normally distributed scores and reports a test statisticHHwith itspp\-value\.

### 4\.2Classifier selection

Table 1:Multi\-class detection performance of different base modelsA high\-performing classifier is a prerequisite for the framework\. As Table[1](https://arxiv.org/html/2608.10434#S4.T1)shows, XGBoost outperforms all baselines on every metric, achieving the highest accuracy of 81\.09% and an F1\-Score of 85\.66%, and is therefore selected as our core classification engine\.

### 4\.3Procedure

A total of 57 participants are recruited and evenly distributed across three conditions: a no\-explanation Control, in which the alert is audited from the raw IDS verdict alone without any XAI support, the Dashboard XAI, and the Conversational XAI interface \(examples in Fig\.[2](https://arxiv.org/html/2608.10434#S4.F2)\)\. To support the technical validity of the evaluation, participants were required to have prior experience with AI or machine learning concepts\.

Each operator audited the same set of 20 alerts for which the IDS issued a verdict to validate\. To model a realistic yet fallible assistant, we manually curated this set so that the AI was correct on 14 alerts and wrong on six\. We further decoupled the model’s reported confidence from its correctness: using the trained XGBoost classifier, we interleaved high\-, low\-, and random\-confidence predictions, including confidently wrong and hesitantly correct cases, so that operators could not fall back on a simple confidence heuristic and instead had to engage with the explanation itself\.

The procedure consists of the following steps:

1. 1\.Consent and Profiling:Participants provide informed consent and complete a demographic survey to verify their technical expertise\.
2. 2\.Contextual Onboarding:Participants are briefed on the scenario, highlighting the challenge of manual analysis and the need for XAI support in root cause identification\.
3. 3\.Training:A brief tutorial and practice trial are conducted to familiarize participants with the navigation and functions of their assigned XAI interface\.
4. 4\.Task Execution:Participants utilize the tool to investigate the flagged event, with the specific goal of validating the alert’s reliability and explaining the intrusion’s root cause\.
5. 5\.Post\-task Evaluation:Finally, participants complete a knowledge test and subjective questionnaires to assess Operator Understanding, Explanation Utility, and Operator Trust based on our defined metrics\.

### 4\.4Comparative Analysis

The subjective results for Operator Understanding, Explanation Utility, and Operator Trust are summarized in Fig\.[3](https://arxiv.org/html/2608.10434#S4.F3): descriptively, the Conversational interface received slightly higher mean ratings than the Dashboard across the three subjective dimensions\.

![Refer to caption](https://arxiv.org/html/2608.10434v1/x2.png)Figure 2:Conversational XAI when analyzing a DoS attack\.In Explanation Utility, the Conversational interface scored 4\.10 against the Dashboard’s 3\.90; participants reported that natural language interaction eased information filtering and synthesis\. Operator Trust was descriptively and only marginally higher for the Conversational interface \(4\.23 versus 4\.20\)\.

![Refer to caption](https://arxiv.org/html/2608.10434v1/x3.png)Figure 3:Comparative evaluation of user perception metrics between the Dashboard and Conversational XAI interfaces\. Error bars represent the 95% confidence interval\.Operator Understanding was also slightly higher in the Conversational condition \(3\.78 versus 3\.68 for the Dashboard\), but the narrower margin suggests that the agent’s greater perceived helpfulness did not translate into deeper comprehension of the underlying IDS logic\.

This dissociation between perception and comprehension surfaced directly in operator behavior, summarized in Table[2](https://arxiv.org/html/2608.10434#S4.T2)\. Relative to the no\-explanation Control, both interfaces sharply raised reliance, with the agreement fraction climbing from 0\.74 to 0\.86 \(Dashboard\) and 0\.89 \(Conversational\)\. Yet this added reliance was not matched by appropriate reliance: RAIR improved only modestly \(0\.35 to 0\.50 and 0\.48\), while appropriate self\-reliance \(RSR\) decreased substantially from 0\.57 to 0\.29 and 0\.11, reaching its lowest value under the Conversational interface\. Kruskal–Wallis tests indicated statistically significant overall differences across conditions for agreement fraction \(H=33\.66H=33\.66,p<\.001p<\.001\), switch fraction \(H=19\.14H=19\.14,p<\.001p<\.001\), RAIR \(H=11\.01H=11\.01,p=\.004p=\.004\), RSR \(H=38\.26H=38\.26,p<\.001p<\.001\), and decision accuracy \(H=9\.09H=9\.09,p=\.011p=\.011\)\. Both interfaces also improved decision accuracy relative to the Control \(0\.62 to 0\.74 and 0\.71\)\. Critically, however, the Conversational interface, despite eliciting the highest agreement and the lowest self\-reliance, did not achieve higher accuracy than the Dashboard; descriptively, its accuracy was slightly lower\. This pattern is consistent with the concern that the additional reliance elicited by the conversational modality was not converted into better decisions, plausibly because some participants switched from correct initial judgments to AI\-aligned decisions even when the system was incorrect\. Following\[[17](https://arxiv.org/html/2608.10434#bib.bib15)\], the combination of high agreement and low self\-reliance, without a corresponding accuracy advantage over the Dashboard, provides evidence consistent with an elevated risk of over\-reliance in the Conversational condition\.

Table 2:Behavioral reliance and appropriate\-reliance metrics by condition \(mean±\\pmSD\);HHandppfrom Kruskal–Wallis tests\.
### 4\.5Discussion

The results point to a potential trade\-off in high\-dimensional intrusion detection\. One possible explanation is that the Conversational Interface made it easier to navigate many cyber\-physical features, but its coherent natural\-language responses may also have encouraged participants to accept explanations without fully inspecting the underlying evidence\. The Dashboard’s raw telemetry and packet logs may encourage more direct inspection of the data\. By contrast, the Llama\-powered agent presents anomalies as coherent narratives, which may make uncertainty less salient to users unless uncertainty cues are explicitly shown\. The reliance measures are consistent with the concern that participants may accept plausible\-sounding diagnoses without sufficiently verifying the raw feature values\.

We therefore argue that smooth interaction may be insufficient for high\-stakes UAV defense; future designs may benefit from Cognitive Forcing Functions that encourage active verification\. Rather than passively displaying an answer, effective XAI interfaces must impede rapid agreement when model confidence is low, for instance by requiring operators to correlate the AI’s claim with a specific trend in the PDP or SHAP plots before confirming a countermeasure, transforming the operator from a passive consumer into an active auditor\.

## 5Conclusion

This study presents a comparative evaluation of Dashboard and Conversational XAI interfaces for UAV intrusion detection\. Our empirical results suggest a trade\-off in this human\-AI auditing setting\. While the Conversational interface was perceived as useful and may reduce the effort required to access relevant explanations, our results suggest a risk of increased over\-reliance, as indicated by lower RSR under the conversational condition: agreement with AI advice increased and appropriate self\-reliance was lower, yet the higher reliance it elicited did not translate into better decision accuracy than the Dashboard\. Future work prioritizes the implementation of cognitive forcing functions to encourage high\-stakes security decisions to be grounded in evidence verification rather than in the fluency of natural\-language explanations\.

## Acknowledgement

This research was supported by National Economics University under grant number NEU1\-2025\.02, and by Vietnam National Foundation for Science and Technology Development \(NAFOSTED\) under grant number 102\.05\-2025\.57\.

## References

- \[1\]F\. Al\-Turjman, M\. Abujubbeh, A\. Malekloo, and L\. Mostarda\(2020\)UAVs assessment in software\-defined IoT networks: An overview\.Computer Communications\.External Links:ISSN 0140\-3664Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1)\.
- \[2\]A\. Balayn, M\. Yurrita, F\. Rancourt, F\. Casati, and U\. Gadiraju\(2025\)Unpacking trust dynamics in the LLM supply chain: an empirical exploration to foster trustworthy LLM production & use\.InCHI 2025,New York, NY, USA\.Cited by:[§2\.1](https://arxiv.org/html/2608.10434#S2.SS1.p1.1)\.
- \[3\]G\. Bansal, T\. Wu, J\. Zhou, R\. Fok, and Nushi\(2021\)Does the whole exceed its parts? The effect of AI explanations on complementary team performance\.InCHI 2021,New York, NY, USA\.Cited by:[§2\.1](https://arxiv.org/html/2608.10434#S2.SS1.p1.1)\.
- \[4\]C\. Chiang and M\. Yin\(2022\)Exploring the effects of Machine Learning literacy interventions on laypeople’s reliance on Machine Learning models\.InIUI 22,New York, NY, USA\.Cited by:[§2\.1](https://arxiv.org/html/2608.10434#S2.SS1.p2.1)\.
- \[5\]U\. Ehsan and M\. O\. Riedl\(2020\)Human\-centered explainable AI: Towards a reflective sociotechnical approach\.InHCIC 2020,Cited by:[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p2.1)\.
- \[6\]J\. H\. Friedman\(2001\)Greedy function approximation: A gradient boosting machine\.Annals of Statistics\.Cited by:[item∙\\bullet](https://arxiv.org/html/2608.10434#S3.I1.ix1.p1.1)\.
- \[7\]S\. Hassler, U\. Mughal, and M\. Ismail\(2023\-01\)Cyber\-physical intrusion detection system for unmanned aerial vehicles\.IEEE Trans\. Intell\. Transp\. Syst\.\.Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1)\.
- \[8\]G\. He, A\. Bharos, and U\. Gadiraju\(2024\)To err is AI\! debugging as an intervention to facilitate appropriate reliance on AI systems\.InACM HT 24,New York, NY, USA\.Cited by:[§2\.1](https://arxiv.org/html/2608.10434#S2.SS1.p2.1)\.
- \[9\]A\. Jacovi, J\. Bastings, S\. Gehrmann, Y\. Goldberg, and K\. Filippova\(2023\)Diagnosing AI explanation methods with folk concepts of behavior\.InFAccT 23\),New York, NY, USA\.Cited by:[§4\.1](https://arxiv.org/html/2608.10434#S4.SS1.SSS0.Px2.p1.1)\.
- \[10\]D\. Jannach, A\. Manzoor, W\. Cai, and L\. Chen\(2021\)A survey on conversational recommender systems\.ACM CSUR54\(5\)\.Cited by:[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p3.1)\.
- \[11\]V\. Lai, C\. Chen, A\. Smith\-Renner, Q\. V\. Liao, and C\. Tan\(2023\)Towards a science of Human\-AI decision making: an overview of design space in empirical human\-subject studies\.InFAccT 23,Chicago, IL, USA\.Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1),[§2\.1](https://arxiv.org/html/2608.10434#S2.SS1.p1.1),[§2\.1](https://arxiv.org/html/2608.10434#S2.SS1.p2.1),[§4\.1](https://arxiv.org/html/2608.10434#S4.SS1.SSS0.Px3.p1.1)\.
- \[12\]Q\. V\. Liao, D\. Gruen, and S\. Miller\(2020\)Questioning the AI: informing design practices for explainable AI user experiences\.InCHI EA 2020,New York, NY, USA\.Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1),[§3\.1](https://arxiv.org/html/2608.10434#S3.SS1.p2.1)\.
- \[13\]M\. Nauta, J\. Trienes, S\. Pathak, E\. Nguyen, M\. Peters, and Schmitt\(2023\)From anecdotal evidence to quantitative evaluation methods: A systematic review on evaluating explainable AI\.ACM Computing Surveys55\(13s\)\.Cited by:[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p2.1)\.
- \[14\]M\. T\. Ribeiro, S\. Singh, and C\. Guestrin\(2016\)"Why should I trust you?": explaining the predictions of any classifier\.In22nd ACM SIGKDD,Cited by:[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p2.1)\.
- \[15\]V\. Robbemond, O\. Inel, and U\. Gadiraju\(2022\)Understanding the role of explanation modality in AI\-assisted decision\-making\.InUMAP 22\),New York, NY, USA\.Cited by:[§2\.1](https://arxiv.org/html/2608.10434#S2.SS1.p2.1)\.
- \[16\]Y\. Rong, T\. Leemann, T\. Nguyen, L\. Fiedler, and Qian\(2023\)Towards human\-centered explainable AI: A survey of user studies for model explanations\.IEEE TPAMI46\(5\)\.Cited by:[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p2.1)\.
- \[17\]M\. Schemmer, P\. Hemmer, N\. Kühl, C\. Benz, and G\. Satzger\(2022\)Should i follow AI\-based advice? measuring appropriate reliance in Human\-AI decision\-making\.IntrAIt 22,Cited by:[§4\.1](https://arxiv.org/html/2608.10434#S4.SS1.SSS0.Px4.p1.3),[§4\.4](https://arxiv.org/html/2608.10434#S4.SS4.p4.10)\.
- \[18\]T\. Schmude, L\. Koesten, T\. Möller, and S\. Tschiatschek\(2023\)On the impact of explanations on understanding of algorithmic decision\-making\.InACM FAccT 23,New York, NY, USA\.Cited by:[§4\.1](https://arxiv.org/html/2608.10434#S4.SS1.SSS0.Px1.p1.1)\.
- \[19\]A\. D\. Selbst and J\. Powles\(2018\)“Meaningful information” and the right to explanation\.InFAT 2018,PMLR\.Cited by:[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p1.1)\.
- \[20\]H\. Shen, C\. Huang, T\. Wu, and T\. ’\. Huang\(2023\)ConvXAI: delivering heterogeneous AI explanations via conversations to support Human\-AI scientific writing\.arXiv preprint arXiv:2305\.09770\.Cited by:[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p3.1)\.
- \[21\]D\. Slack, S\. Hilgard, S\. Singh, and H\. Lakkaraju\(2021\)Reliable post hoc explanations: modeling uncertainty in explainability\.External Links:2008\.05030Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1)\.
- \[22\]D\. Slack, S\. Krishna, H\. Lakkaraju, and S\. Singh\(2023\)Explaining machine learning models with interactive natural language conversations using TalkToModel\.Nature Machine Intelligence\(7\)\.Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1),[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p2.1)\.
- \[23\]H\. Vasconcelos, M\. Jörke, M\. Grunde\-McLaughlin, T\. Gerstenberg, M\. S\. Bernstein, and R\. Krishna\(2023\)Explanations can reduce overreliance on AI systems during decision\-making\.PACMHCI\(CSCW2\)\.Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1)\.
- \[24\]J\. Wexler, M\. Pushkarna, T\. Bolukbasi, M\. Wattenberg, F\. Viegas, and J\. Wilson\(2019\)The what\-if tool: interactive probing of machine learning models\.IEEE Trans\. Vis\. Comput\. Graph\.External Links:ISSN 2160\-9306Cited by:[item∙\\bullet](https://arxiv.org/html/2608.10434#S3.I1.ix4.p1.1)\.
- \[25\]W\. Yang, H\. Le, T\. Laud, S\. Savarese, and S\. C\. H\. Hoi\(2022\)OmniXAI: a library for explainable AI\.External Links:2206\.01612Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1)\.
- \[26\]K\. Yin and G\. Neubig\(2022\)Interpreting language models with contrastive explanations\.InEMNLP 2022,Abu Dhabi, United Arab Emirates\.Cited by:[§2\.2](https://arxiv.org/html/2608.10434#S2.SS2.p2.1)\.
- \[27\]X\. Zhang, S\. Tan, P\. Koch, Y\. Lou, U\. Chajewska, and R\. Caruana\(2019\)Axiomatic interpretability for multiclass additive models\.External Links:1810\.09092Cited by:[§1](https://arxiv.org/html/2608.10434#S1.p1.1)\.

相似文章

每个AI可见性工具都在欺骗你

Hacker News Top

本文批判性地审视了声称能衡量品牌在生成式AI回复中曝光度的AI可见性工具,指出由于非确定性、个性化和抓取偏差,这些工具提供了虚假精度。文章呼吁方法透明,并警告不要将不透明的仪表盘视为稳定真相。

称量烟雾:为何AI可见性仪表盘基本无用

Hacker News Top

文章认为,声称能追踪AI搜索回答中品牌存在的AI可见性仪表盘并不可靠,且缺乏预测有效性,将其比作称量烟雾,因为AI输出结果的不一致性以及缺乏与业务结果的有意义关联。

RogueAI:一种用于检测对话中特许AI欺骗的反向图灵测试

arXiv cs.CL

本文介绍了RogueAI,一个以交互式网络应用形式实现的反向图灵测试,其中人类玩家审问两个LLM智能体,以识别在共享虚构场景中被特许欺骗的那个。初步部署显示,启发式检测(准确率75.6%)与人类表现(准确率56.6%)之间存在差距,凸显了该系统作为AI欺骗与诚实数据收集和教学工具的潜力。