Abstract:Network Intrusion Detection System (NIDS) is a key component in securing the computer network from various cyber security threats and network attacks. However, consider an unfortunate situation where the NIDS is itself attacked and vulnerable more specifically, we can say, How to defend the defender?. In Adversarial Machine Learning (AML), the malicious actors aim to fool the Machine Learning (ML) and Deep Learning (DL) models to produce incorrect predictions with intentionally crafted adversarial examples. These adversarial perturbed examples have become the biggest vulnerability of ML and DL based systems and are major obstacles to their adoption in real-time and mission-critical applications such as NIDS. AML is an emerging research domain, and it has become a necessity for the in-depth study of adversarial attacks and their defence strategies to safeguard the computer network from various cyber security threads. In this research work, we aim to cover important aspects related to NIDS, adversarial attacks and its defence mechanism to increase the robustness of the ML and DL based NIDS. We implemented four powerful adversarial attack techniques, namely, Fast Gradient Sign Method (FGSM), Jacobian Saliency Map Attack (JSMA), Projected Gradient Descent (PGD) and Carlini & Wagner (C&W) in NIDS. We analyzed its performance in terms of various performance metrics in detail. Furthermore, the three heuristics defence strategies, i.e., Adversarial Training (AT), Gaussian Data Augmentation (GDA) and High Confidence (HC), are implemented to improve the NIDS robustness under adversarial attack situations. The complete workflow is demonstrated in real-time network with data packet flow. This research work provides the overall background for the researchers interested in AML and its implementation from a computer network security point of view.

Self-Taught Black-Box Adversarial Attack to Multilayer Network Automation.

Adversarial Analysis of ML-Based Anomaly Detection in Multi-Layer Network Automation

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

B3: Backdoor Attacks Against Black-box Machine Learning Models

Evaluating and Improving Adversarial Robustness of Machine Learning-Based Network Intrusion Detectors

Practical Traffic-space Adversarial Attacks on Learning-based NIDSs.

A Black-Box Attack Method against Machine-Learning-Based Anomaly Network Flow Detection Models

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

Explainable and Transferable Adversarial Attack for ML-Based Network Intrusion Detectors

Towards Practical Deployment-Stage Backdoor Attack on Deep Neural Networks

Practical Black-Box Attacks against Deep Learning Systems using Adversarial Examples

Untargeted White-box Adversarial Attack with Heuristic Defence Methods in Real-time Deep Learning based Network Intrusion Detection System

Adversarial Attacks Against Deep Learning-Based Network Intrusion Detection Systems and Defense Mechanisms

How to Mislead AI-Assisted Network Automation in SD-IPoEONs: A Comparison Study of DRL- and GAN-Based Approaches

Generalizable Black-Box Adversarial Attack With Meta Learning

Detection Tolerant Black-Box Adversarial Attack Against Automatic Modulation Classification With Deep Learning

AdvDoor: Adversarial Backdoor Attack of Deep Learning System

Adversarial Network Traffic: Towards Evaluating the Robustness of Deep Learning-Based Network Traffic Classification

Boosting Black-Box Adversarial Attacks with Meta Learning

A P4-Based Adversarial Attack Mitigation on Machine Learning Models in Data Plane Devices

Packet-Level Adversarial Network Traffic Crafting using Sequence Generative Adversarial Networks