Abstract:The complexity of the Industrial Internet of Things (IIoT) presents higher requirements for intrusion detection systems (IDSs). An adversarial attack is a threat to the security of machine learning-based IDSs. For such a complex situation, this paper analyses adversarial attackers' ability to deceive IDSs used in the IIoT and proposes the evaluation of an IDS with function-discarding adversarial attacks in the IIoT (EIFDAA), a framework that can evaluate the defence performance of machine learning-based IDSs against various adversarial attack algorithms. This framework is composed of two main processes: adversarial evaluation and adversarial training. Adversarial evaluation can diagnose IDS that is unfitting in adversarial environments. Then, adversarial training is used to treat the weak IDS. In this framework, five well-known adversarial attacks, the fast-gradient sign method (FGSM), basic iterative method (BIM), projected gradient descent (PGD), DeepFool and Wasserstein generative adversarial network with gradient penalty (WGAN-GP) are used to convert attack samples into adversarial samples to simulate the adversarial environment. This study evaluates the capability of mainstream machine learning techniques as intrusion detection models to defend against adversarial attacks, and retrains these detectors to improve the robustness of IDSs through adversarial training. In addition, the framework includes an adversarial attack model that discards the attack function of the attack samples in the IIoT. Through the experimental results on the X-IIoTID dataset, the dropped adversarial detection rate of these detectors to nearly zero demonstrates that an adversarial attack has black-box attack capabilities for these IDSs. Additionally, the improved IDSs retrained with adversarial samples can effectively defend against adversarial attackers while maintaining the original detection rate for the attack samples. EIFDAA is expected to be a solution that can be applied to IDS for improving the robustness in the IIoT.

A C-IFGSM Based Adversarial Approach for Deep Learning Based Intrusion Detection.

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

FCGSM: Fast Conjugate Gradient Sign Method for Adversarial Attack on Image Classification

Generating Adversarial Examples Against Machine Learning-Based Intrusion Detector in Industrial Control Systems

Deep Adversarial Learning in Intrusion Detection: A Data Augmentation Enhanced Framework

A Novel Deep Learning based Model to Defend Network Intrusion Detection System against Adversarial Attacks

Adversarial machine learning in Network Intrusion Detection Systems

NIDS-FGPA: A federated learning network intrusion detection algorithm based on secure aggregation of gradient similarity models

A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System

Trans-IFFT-FGSM: a novel fast gradient sign method for adversarial attacks

EIFDAA: Evaluation of an IDS with function-discarding adversarial attacks in the IIoT

Adversarial Attacks against Deep-Learning-Based Automatic Dependent Surveillance-Broadcast Unsupervised Anomaly Detection Models in the Context of Air Traffic Management

AIDTF: Adversarial training framework for network intrusion detection

Development of a Machine-Learning Intrusion Detection System and Testing of Its Performance Using a Generative Adversarial Network

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

Generative adversarial attacks against intrusion detection systems using active learning

A Fast Adversarial Sample Detection Approach for Industrial Internet-of-Things Applications.

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Adversarial Machine Learning for Network Intrusion Detection Systems: A Comprehensive Survey

IGAN-IDS: an Imbalanced Generative Adversarial Network Towards Intrusion Detection System in Ad-Hoc Networks

Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks