Abstract:Network Intrusion Detection Systems (IDS) have achieved high accuracy by widely applying Machine Learning (ML) models. However, most current ML-based IDSs can not cope with targeted attacks from adversaries because they are commonly trained and tested using fixed data sets. In this paper, we propose an Adversarial Intrusion Detection Training Framework (AIDTF) to improve the robustness of IDSs, which consists of an attacker model a-model, a defender model d-model, and a black-box trainer t-module. Both the a-model and d-model are multilayer perceptrons, and the t-module is the module used to train IDSs. AIDTF improves the accuracy of IDS by using an adversarial training method, which is different from traditional training methods. Taking the distribution of normal samples in the dataset as the distribution that the a-model and d-model need to learn, the goal of the a-model is to generate samples that deceive the d-model, while the goal of the d-model is to determine whether the input samples are real samples, so there is an adversarial relationship between a-model and d-model. Different types of IDSs can be trained by the t-module using the samples generated from the confrontation between the a-model and the d-model, and we call this kind of IDS the Adversarial Training Intrusion Detection System (ATIDS). The main contribution of this paper is to propose a training method that is used to obtain an IDS with high accuracy not only for known test sets but also to identify unknown disguised attack samples. We tested different types of ATIDSs using the current mainstream attack methods, which include the Fast Gradient Method, Fast Gradient Sign Method, Projected Gradient Descent, and Jacobs Saliency Map Algorithm. The experimental results prove that AIDTF outperforms other adversarial training methods with not only higher accuracy for the test set but also up to a 99% recognition rate for the attack samples.

Ensemble adversarial training based defense against adversarial attacks for machine learning-based intrusion detection system

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Attack As Defense: Characterizing Adversarial Examples Using Robustness.

Ensemble Adversarial Training: Attacks and Defenses

A Novel Deep Learning based Model to Defend Network Intrusion Detection System against Adversarial Attacks

Untargeted White-box Adversarial Attack with Heuristic Defence Methods in Real-time Deep Learning based Network Intrusion Detection System

Adversarial Machine Learning Attacks against Intrusion Detection Systems: A Survey on Strategies and Defense

Ensemble Methods as a Defense to Adversarial Perturbations Against Deep Neural Networks

Ensemble Machine Learning Techniques for Attack Prediction in NIDS Environment

Adversarial machine learning in Network Intrusion Detection Systems

Generating Adversarial Examples Against Machine Learning-Based Intrusion Detector in Industrial Control Systems

Adversarial Machine Learning for Network Intrusion Detection Systems: A Comprehensive Survey

Adversarial Attacks Against Deep Learning-Based Network Intrusion Detection Systems and Defense Mechanisms

RobEns: Robust Ensemble Adversarial Machine Learning Framework for Securing IoT Traffic

Generative adversarial attacks against intrusion detection systems using active learning

A Framework for Robust Deep Learning Models Against Adversarial Attacks Based on a Protection Layer Approach

RAIDS: Robust Autoencoder-Based Intrusion Detection System Model Against Adversarial Attacks

Adversarial Attacks on Machine Learning Cybersecurity Defences in Industrial Control Systems

Omni: Automated Ensemble with Unexpected Models against Adversarial Evasion Attack

AIDTF: Adversarial training framework for network intrusion detection

TAD: Transfer Learning-based Multi-Adversarial Detection of Evasion Attacks against Network Intrusion Detection Systems