Min-max Training: Adversarially Robust Learning Models for Network Intrusion Detection Systems

Grierson, Sam; Thomson, Craig; Papadopoulos, Pavlos; Buchanan, Bill

Abstract

Intrusion detection systems are integral to the security of networked systems for detecting malicious or anomalous network traffic. As traditional approaches are becoming less effective, machine learning and deep learning-based intrusion detection systems are vital research areas for improved detection systems. Past research into computer vision using deep learning revealed that the deep learning-based classifiers themselves are vulnerable to adversarial attacks, and these attacks have been investigated extensively. However, adversarial attacks are restricted not only to the domain of image recognition. As indicated by previous research, various domains employing machine learning/deep learning classifiers are vulnerable to attack. Our work evaluates the effectiveness of adversarial robustness training when applied to intrusion detection systems based on deep learning classification models. We propose a novel, simple adversarial retraining method to build models robust to adversarial evasion attacks.

• Presentation Conference Type: Conference Paper (Published)
• Conference Name: 2021 14th International Conference on Security of Information and Networks (SIN)
• Start Date: Dec 15, 2021
• End Date: Dec 17, 2021
• Online Publication Date: Feb 10, 2022
• Publication Date: 2022
• Deposit Date: Feb 13, 2022
• Publisher: Institute of Electrical and Electronics Engineers
• Book Title: 2021 14th International Conference on Security of Information and Networks (SIN)
• DOI: https://doi.org/10.1109/sin54109.2021.9699157
• Public URL: http://researchrepository.napier.ac.uk/Output/2844836