Summary
Network security systems often must choose between speed and understanding: fast methods detect known threats quickly but miss new ones, while slower systems can interpret novel attacks. The authors present VX-One, a small AI model that quickly makes clear yes/no decisions, picks from known attack types plus an unknown option, and scores threats on a scale. Tested against various datasets, VX-One performs better in detecting attacks over time and under changing conditions, though other methods still better identify specific attack categories. The study also reveals challenges like decreased confidence calibration as network conditions change.
What this means in practice
- •For network security teams: Use VX-One’s fast, calibrated decision outputs to improve real-time detection of novel and evolving network attacks in perimeter defense systems.
- •For cyber threat analysts: Employ VX-One’s explicit unknown category to flag and triage previously unseen attack types for deeper analysis.
Abstract
Perimeter triage faces a latency/semantics trade-off: signature engines are fast and format-safe but blind to unseen attacks, while generative models are semantic but slow and produce unparseable output. In late 2026 a class of commercial System One decision models (TypeSafe Jev; Microsoft-Decision-1) began selling typed decision primitives - binary gates, closed-set choices, ordinal scores - as product APIs, with no academic treatment. We present VX-One: a small multi-head network (100K-10M parameters) whose outputs are these primitives - a calibrated gate, a choice over a closed candidate set that always includes an explicit unknown option, and an ordinal score, trained multi-task, temperature-calibrated per head (~0.7-1.7 ms p50 on CPU). We evaluate it on UNSW-NB15, CIC-IDS2017, EMBER2024 against calibrated XGBoost, Random-Forest, MLP, Kitsune, and measure a two-phase cascade (Suricata with 52,674 Emerging-Threats rules -> VX-One) over five days of CIC-IDS2017. Findings: (i) VX-One wins detection (AUROC/FPR@95%TPR) on UNSW-NB15 and under temporal drift on CIC-IDS2017 (0.711 vs 0.637), but XGBoost wins multi-class attribution on all three benchmarks; (ii) leave-one-family-out gate detects never-seen families on 9/9 UNSW folds yet drops below chance on CIC recon family, and abstention threshold transfers poorly across benchmarks; (iii) on payload-less reconstructions signature engines resolve ~0.1% of flows - gray zone ~99.9% of traffic, recovered by Phase 2 (combined recall >=0.978); (iv) calibration collapses under temporal drift (ECE 0.04->0.40) for every method while ranking partially survives. We provide a measured account of where typed calibrated decisions help perimeter triage, and where they fail.