Abstract:Recently, Machine Learning (ML)-based solutions have been widely adopted to tackle the wide range of security challenges that have affected the progress of the Internet of Things (IoT) in various domains. Despite the reported promising results, the ML-based Intrusion Detection System (IDS) proved to be vulnerable to adversarial examples, which pose an increasing threat. In fact, attackers employ Adversarial Machine Learning (AML) to cause severe performance degradation and thereby evade detection systems. This promoted the need for reliable defense strategies to handle performance and ensure secure networks. This work introduces RobEns, a robust ensemble framework that aims at: (i) exploiting state-of-the-art ML-based models alongside ensemble models for IDSs in the IoT network; (ii) investigating the impact of evasion AML attacks against the provided models within a black-box scenario; and (iii) evaluating the robustness of the considered models after deploying relevant defense methods. In particular, four typical AML attacks are considered to investigate six ML-based IDSs using three benchmarking datasets. Moreover, multi-class classification scenarios are designed to assess the performance of each attack type. The experiments indicated a drastic drop in detection accuracy for some attempts. To harden the IDS even further, two defense mechanisms were derived from both data-based and model-based methods. Specifically, these methods relied on feature squeezing as well as adversarial training defense strategies. They yielded promising results, enhanced robustness, and maintained standard accuracy in the presence or absence of adversaries. The obtained results proved the efficiency of the proposed framework in robustifying IDS performance within the IoT context. In particular, the accuracy reached 100% for black-box attack scenarios while preserving the accuracy in the absence of attacks as well.

Adversarial Explainability: Utilizing Explainable Machine Learning in Bypassing IoT Botnet Detection Systems

Adversarial Example Attacks in Internet of Things (IoT)

Improving IoT Security With Explainable AI: Quantitative Evaluation of Explainability for IoT Botnet Detection

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

Explainable and Transferable Adversarial Attack for ML-Based Network Intrusion Detectors

Explainable AI and Deep Autoencoders Based Security Framework for IoT Network Attack Certainty (Extended Abstract)

Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries

Explanation-Guided Adversarial Example Attacks

An Adaptive End-to-End IoT Security Framework Using Explainable AI and LLMs

RobEns: Robust Ensemble Adversarial Machine Learning Framework for Securing IoT Traffic

Adversarial machine learning in Network Intrusion Detection Systems

When and How to Fool Explainable Models (and Humans) with Adversarial Examples

Explainability Guided Adversarial Evasion Attacks on Malware Detectors

Comprehensive Botnet Detection by Mitigating Adversarial Attacks, Navigating the Subtleties of Perturbation Distances and Fortifying Predictions with Conformal Layers

Towards Adversarial Realism and Robust Learning for IoT Intrusion Detection and Classification

Automated Sensor Node Malicious Activity Detection with Explainability Analysis

Explaining Network Intrusion Detection System Using Explainable AI Framework

IoT Security: Botnet detection in IoT using Machine learning

Practical Black-Box Attacks against Deep Learning Systems using Adversarial Examples

Automatic Evasion of Machine Learning-Based Network Intrusion Detection Systems

Botnet Attack Detection in IoT Using Machine Learning