Search papers, labs, and topics across Lattice.
This paper introduces a hybrid defense mechanism combining Adversarial Training (AT) and Gaussian Data Augmentation (GDA) to enhance the resilience of Network Intrusion Detection Systems (NIDS) against white-box adversarial attacks, specifically the Fast Gradient Sign Method (FGSM) and Carlini & Wagner (C&W) attacks. The proposed approach significantly improves NIDS performance, achieving post-defense accuracies of 96.57% and 89.20% against FGSM and C&W attacks, respectively, despite a notable accuracy drop in pre-attack scenarios. This work addresses critical vulnerabilities in NIDS, providing a robust framework for defending against evolving cyber threats.
Hybrid defenses can restore NIDS accuracy to over 96% against adversarial attacks that typically cripple detection systems.
It is crucial to safeguard computer networks from evolving network security threats and unknown cyberattacks. An essential tool for protecting computer networks against unknown cyber threats is Network Intrusion Detection System (NIDS). However, NIDS faces a major security concern due to its susceptibility to adversarial attacks. Adversarial attacks aim to deceive NIDS by crafting and injecting adversarial examples into the system. These adversarial inputs can deceive the NIDS into misclassifying benign network traffic as malicious. We developed a resilient hybrid defense mechanism aimed to mitigate the impact of two potent adversarial attacks: Fast Gradient Sign Method (FGSM) and Carlini & Wagner (C&W) attack. Our hybrid defense approach leverages the combined strength of two heuristic defense methods: Adversarial Training (AT) and Gaussian Data Augmentation (GDA). GDA provides multi-directional defense, while AT enhances NIDS robustness against specific adversarial vectors. Under pre-attack scenarios, NIDS demonstrated good accuracy and f1-score. However, in the post-attack scenario, its accuracy significantly dropped under FGSM and C&W attacks (0.2649 and 0.4961, respectively). Our proposed hybrid defense method effectively mitigated these adversarial threats, with post-defense accuracy of 96.57% and 89.20% for FGSM and C&W attacks. We evaluated the defense strategy across a range of epsilon and confidence noise factor values (ranging from 0.0001 to 0.0009). This research provides a good direction for future researchers in the emerging area of adversarial machine learning from a security perspective.
