Abstract:The complexity of the Industrial Internet of Things (IIoT) presents higher requirements for intrusion detection systems (IDSs). An adversarial attack is a threat to the security of machine learning-based IDSs. For such a complex situation, this paper analyses adversarial attackers' ability to deceive IDSs used in the IIoT and proposes the evaluation of an IDS with function-discarding adversarial attacks in the IIoT (EIFDAA), a framework that can evaluate the defence performance of machine learning-based IDSs against various adversarial attack algorithms. This framework is composed of two main processes: adversarial evaluation and adversarial training. Adversarial evaluation can diagnose IDS that is unfitting in adversarial environments. Then, adversarial training is used to treat the weak IDS. In this framework, five well-known adversarial attacks, the fast-gradient sign method (FGSM), basic iterative method (BIM), projected gradient descent (PGD), DeepFool and Wasserstein generative adversarial network with gradient penalty (WGAN-GP) are used to convert attack samples into adversarial samples to simulate the adversarial environment. This study evaluates the capability of mainstream machine learning techniques as intrusion detection models to defend against adversarial attacks, and retrains these detectors to improve the robustness of IDSs through adversarial training. In addition, the framework includes an adversarial attack model that discards the attack function of the attack samples in the IIoT. Through the experimental results on the X-IIoTID dataset, the dropped adversarial detection rate of these detectors to nearly zero demonstrates that an adversarial attack has black-box attack capabilities for these IDSs. Additionally, the improved IDSs retrained with adversarial samples can effectively defend against adversarial attackers while maintaining the original detection rate for the attack samples. EIFDAA is expected to be a solution that can be applied to IDS for improving the robustness in the IIoT.

DODEM: DOuble DEfense Mechanism Against Adversarial Attacks Towards Secure Industrial Internet of Things Analytics

D-DAE: Defense-Penetrating Model Extraction Attacks.

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Boosting Adversarial Training in Safety-Critical Systems Through Boundary Data Selection

Adversarial Weight Prediction Networks for Defense of Industrial FDC Systems

Defense of Advanced Persistent Threat on Industrial Internet of Things With Lateral Movement Modeling

Generating Adversarial Examples Against Machine Learning-Based Intrusion Detector in Industrial Control Systems

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

RES-HD: Resilient Intelligent Fault Diagnosis Against Adversarial Attacks Using Hyper-Dimensional Computing

A Fast Adversarial Sample Detection Approach for Industrial Internet-of-Things Applications.

Development of an Edge Resilient ML Ensemble to Tolerate ICS Adversarial Attacks

PDAAA: Progressive Defense Against Adversarial Attacks for Deep Learning-as-a-Service in Internet of Things

RobustPdM: Designing Robust Predictive Maintenance against Adversarial Attacks

Adversarial Attacks Against Deep Learning-Based Network Intrusion Detection Systems and Defense Mechanisms

Explainable and Data-Efficient Deep Learning for Enhanced Attack Detection in IIoT Ecosystem

EIFDAA: Evaluation of an IDS with function-discarding adversarial attacks in the IIoT

Innovative Machine Learning Model Design for Predictive IoT Security Attacks

SECaaS-based Partially Observable Defense Model for IIoT Against Advanced Persistent Threats

RobEns: Robust Ensemble Adversarial Machine Learning Framework for Securing IoT Traffic

Evaluating and Improving Adversarial Robustness of Machine Learning-Based Network Intrusion Detectors