Abstract:The complexity of the Industrial Internet of Things (IIoT) presents higher requirements for intrusion detection systems (IDSs). An adversarial attack is a threat to the security of machine learning-based IDSs. For such a complex situation, this paper analyses adversarial attackers' ability to deceive IDSs used in the IIoT and proposes the evaluation of an IDS with function-discarding adversarial attacks in the IIoT (EIFDAA), a framework that can evaluate the defence performance of machine learning-based IDSs against various adversarial attack algorithms. This framework is composed of two main processes: adversarial evaluation and adversarial training. Adversarial evaluation can diagnose IDS that is unfitting in adversarial environments. Then, adversarial training is used to treat the weak IDS. In this framework, five well-known adversarial attacks, the fast-gradient sign method (FGSM), basic iterative method (BIM), projected gradient descent (PGD), DeepFool and Wasserstein generative adversarial network with gradient penalty (WGAN-GP) are used to convert attack samples into adversarial samples to simulate the adversarial environment. This study evaluates the capability of mainstream machine learning techniques as intrusion detection models to defend against adversarial attacks, and retrains these detectors to improve the robustness of IDSs through adversarial training. In addition, the framework includes an adversarial attack model that discards the attack function of the attack samples in the IIoT. Through the experimental results on the X-IIoTID dataset, the dropped adversarial detection rate of these detectors to nearly zero demonstrates that an adversarial attack has black-box attack capabilities for these IDSs. Additionally, the improved IDSs retrained with adversarial samples can effectively defend against adversarial attackers while maintaining the original detection rate for the attack samples. EIFDAA is expected to be a solution that can be applied to IDS for improving the robustness in the IIoT.

Cross-Domain Industrial Intrusion Detection Deep Model Trained With Imbalanced Data

Cross-domain Anomaly Detection for Power Industrial Control System

Causal Inference-Based Adversarial Domain Adaptation for Cross-Domain Industrial Intrusion Detection

A Network Traffic Intrusion Detection Method for Industrial Control Systems Based on Deep Learning

Intrusion Detection System for Industrial Control Systems Based on Imbalanced Data

Unknown Security Attack Detection of Industrial Control System by Deep Learning

Data-Driven Intrusion Detection for Intelligent Internet of Vehicles: A Deep Convolutional Neural Network-Based Method

One-Dimensional Convolutional Wasserstein Generative Adversarial Network Based Intrusion Detection Method for Industrial Control Systems

Transfer Adversarial Attacks Across Industrial Intelligent Systems.

A Deep Learning Model for Network Intrusion Detection with Imbalanced Data

An Ensemble Deep Learning-based Cyber-Attack Detection in Industrial Control System

DEIDS: a Novel Intrusion Detection System for Industrial Control Systems

Efficient Privacy-Preserving Federated Deep Learning for Network Intrusion of Industrial IoT

A New Industrial Intrusion Detection Method Based on CNN-BiLSTM

Deep Adversarial Learning in Intrusion Detection: A Data Augmentation Enhanced Framework

DAICS: A Deep Learning Solution for Anomaly Detection in Industrial Control Systems

EIFDAA: Evaluation of an IDS with function-discarding adversarial attacks in the IIoT

A Hierarchical Hybrid Intrusion Detection Model for Industrial Internet of Things

Intrusion Detection System After Data Augmentation Schemes Based on the VAE and CVAE

A Cross-Domain Intrusion Detection Method Based on Nonlinear Augmented Explicit Features

A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System