Abstract:Adversarial attacks have been extensively studied in the domain of deep image classification, but their impacts on other domains such as Machine and Deep Learning-based Network Intrusion Detection Systems (NIDSs) have received limited attention. While adversarial attacks on images are generally more straightforward due to fewer constraints in the input domain, generating adversarial examples in the network domain poses greater challenges due to the diverse types of network traffic and the need to maintain its validity. Prior research has introduced constraints to generate adversarial examples against NIDSs, but their effectiveness across different attack settings, including transferability, targetability, defenses, and the overall attack success have not been thoroughly examined. In this paper, we proposed a novel set of domain constraints for network traffic that preserve the statistical and semantic relationships between traffic features while ensuring the validity of the perturbed adversarial traffic. Our constraints are categorized into four types: feature mutability constraints, feature value constraints, feature dependency constraints and distribution preserving constraints. We evaluated the impacts of these constraints on white box and black box attacks using two intrusion detection datasets. Our results demonstrated that the introduced constraints have a significant impact on the success of white box attacks. Our research revealed that transferability of adversarial examples depends on the similarity between the targeted models and the models to which the examples are transferred, regardless of the attack type or the presence of constraints. We also observed that adversarial training enhanced the robustness of the majority of machine learning and deep learning-based NIDSs against unconstrained attacks, while providing some resilience against constrained attacks. In practice, this suggests the potential use of pre-existing signatures of constrained attacks to combat new variations or zero-day adversarial attacks in real-world NIDSs.

Adversarial Machine Learning for Network Intrusion Detection Systems: A Comprehensive Survey

Adversarial Challenges in Network Intrusion Detection Systems: Research Insights and Future Prospects

Adversarial Examples Against the Deep Learning Based Network Intrusion Detection Systems

Adversarial Attacks Against Deep Learning-Based Network Intrusion Detection Systems and Defense Mechanisms

Adversarial machine learning in Network Intrusion Detection Systems

Evaluating Deep Learning Based Network Intrusion Detection System in Adversarial Environment

Untargeted White-box Adversarial Attack with Heuristic Defence Methods in Real-time Deep Learning based Network Intrusion Detection System

Adversarial Machine Learning Attacks against Intrusion Detection Systems: A Survey on Strategies and Defense

A Novel Deep Learning based Model to Defend Network Intrusion Detection System against Adversarial Attacks

Network intrusion detection system: A systematic study of machine learning and deep learning approaches

Adversarial Training for Deep Learning-based Intrusion Detection Systems

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

Evaluating and Improving Adversarial Robustness of Machine Learning-Based Network Intrusion Detectors

The Threat of Adversarial Attacks on Machine Learning in Network Security -- A Survey

A survey of intrusion detection from the perspective of intrusion datasets and machine learning techniques

A Review of the Duality of Adversarial Learning in Network Intrusion: Attacks and Countermeasures

Adversarial Attacks and Defenses Against Deep Neural Networks: A Survey

Adversarial example detection for DNN models: a review and experimental comparison

Adversarial Examples: Attacks and Defenses for Deep Learning

Constraining Adversarial Attacks On Network Intrusion Detection Systems: Transferability and Defense Analysis