Subverting Network Intrusion Detection: Crafting Adversarial Examples Accounting for Domain-Specific Constraints - HAL-SHS - Sciences de l'Homme et de la Société Accéder directement au contenu
Communication Dans Un Congrès Année : 2020

Subverting Network Intrusion Detection: Crafting Adversarial Examples Accounting for Domain-Specific Constraints

Martin Teuffenbach
  • Fonction : Auteur
  • PersonId : 1115840
Ewa Piatkowska
  • Fonction : Auteur
  • PersonId : 1115841
Paul Smith
  • Fonction : Auteur
  • PersonId : 995414

Résumé

Deep Learning (DL) algorithms are being applied to network intrusion detection, as they can outperform other methods in terms of computational efficiency and accuracy. However, these algorithms have recently been found to be vulnerable to adversarial examples – inputs that are crafted with the intent of causing a Deep Neural Network (DNN) to misclassify with high confidence. Although a significant amount of work has been done to find robust defence techniques against adversarial examples, they still pose a potential risk. The majority of the proposed attack and defence strategies are tailored to the computer vision domain, in which adversarial examples were first found. In this paper, we consider this issue in the Network Intrusion Detection System (NIDS) domain and extend existing adversarial example crafting algorithms to account for the domain-specific constraints in the feature space. We propose to incorporate information about the difficulty of feature manipulation directly in the optimization function. Additionally, we define a novel measure for attack cost and include it in the assessment of the robustness of DL algorithms. We validate our approach on two benchmark datasets and demonstrate successful attacks against state-of-the-art DL network intrusion detection algorithms.
Fichier principal
Vignette du fichier
497121_1_En_17_Chapter.pdf (518.52 Ko) Télécharger le fichier
Origine : Fichiers produits par l'(les) auteur(s)

Dates et versions

hal-03414751 , version 1 (04-11-2021)

Licence

Paternité

Identifiants

Citer

Martin Teuffenbach, Ewa Piatkowska, Paul Smith. Subverting Network Intrusion Detection: Crafting Adversarial Examples Accounting for Domain-Specific Constraints. 4th International Cross-Domain Conference for Machine Learning and Knowledge Extraction (CD-MAKE), Aug 2020, Dublin, Ireland. pp.301-320, ⟨10.1007/978-3-030-57321-8_17⟩. ⟨hal-03414751⟩
63 Consultations
72 Téléchargements

Altmetric

Partager

Gmail Facebook X LinkedIn More