Abstract:Network Intrusion Detection Systems (IDS) have achieved high accuracy by widely applying Machine Learning (ML) models. However, most current ML-based IDSs can not cope with targeted attacks from adversaries because they are commonly trained and tested using fixed data sets. In this paper, we propose an Adversarial Intrusion Detection Training Framework (AIDTF) to improve the robustness of IDSs, which consists of an attacker model a-model, a defender model d-model, and a black-box trainer t-module. Both the a-model and d-model are multilayer perceptrons, and the t-module is the module used to train IDSs. AIDTF improves the accuracy of IDS by using an adversarial training method, which is different from traditional training methods. Taking the distribution of normal samples in the dataset as the distribution that the a-model and d-model need to learn, the goal of the a-model is to generate samples that deceive the d-model, while the goal of the d-model is to determine whether the input samples are real samples, so there is an adversarial relationship between a-model and d-model. Different types of IDSs can be trained by the t-module using the samples generated from the confrontation between the a-model and the d-model, and we call this kind of IDS the Adversarial Training Intrusion Detection System (ATIDS). The main contribution of this paper is to propose a training method that is used to obtain an IDS with high accuracy not only for known test sets but also to identify unknown disguised attack samples. We tested different types of ATIDSs using the current mainstream attack methods, which include the Fast Gradient Method, Fast Gradient Sign Method, Projected Gradient Descent, and Jacobs Saliency Map Algorithm. The experimental results prove that AIDTF outperforms other adversarial training methods with not only higher accuracy for the test set but also up to a 99% recognition rate for the attack samples.

A C-IFGSM Based Adversarial Approach for Deep Learning Based Intrusion Detection.

A Mixed Intrusion Detection System Utilizing K-means and Extreme Gradient Boosting

FCGSM: Fast Conjugate Gradient Sign Method for Adversarial Attack on Image Classification

Generating Adversarial Examples Against Machine Learning-Based Intrusion Detector in Industrial Control Systems

Deep Adversarial Learning in Intrusion Detection: A Data Augmentation Enhanced Framework

A Novel Deep Learning based Model to Defend Network Intrusion Detection System against Adversarial Attacks

Adversarial machine learning in Network Intrusion Detection Systems

NIDS-FGPA: A federated learning network intrusion detection algorithm based on secure aggregation of gradient similarity models

A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System

Trans-IFFT-FGSM: a novel fast gradient sign method for adversarial attacks

ABO Blood Groups and Abortion

Adversarial Attacks against Deep-Learning-Based Automatic Dependent Surveillance-Broadcast Unsupervised Anomaly Detection Models in the Context of Air Traffic Management

AIDTF: Adversarial training framework for network intrusion detection

Development of a Machine-Learning Intrusion Detection System and Testing of Its Performance Using a Generative Adversarial Network

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

Generative adversarial attacks against intrusion detection systems using active learning

A Fast Adversarial Sample Detection Approach for Industrial Internet-of-Things Applications.

Network Anomaly Intrusion Detection Based on Deep Learning Approach

Adversarial Machine Learning for Network Intrusion Detection Systems: A Comprehensive Survey

IGAN-IDS: an Imbalanced Generative Adversarial Network Towards Intrusion Detection System in Ad-Hoc Networks

Nesterov Accelerated Gradient and Scale Invariance for Adversarial Attacks