Search papers, labs, and topics across Lattice.
This paper addresses the vulnerability of Graph Neural Network (GNN)-based Network Intrusion Detection Systems (NIDS) to structural adversarial attacks, which manipulate the network graph topology. By employing adversarial training that generates samples through strategic node replacement, the authors enhance the robustness of GNN classifiers against these attacks. The results demonstrate that their defense framework not only improves detection performance on clean graphs but also significantly fortifies the system against structural adversarial threats, showcasing its practical applicability in cybersecurity.
GNN-based NIDS can be significantly hardened against structural adversarial attacks through a novel adversarial training approach that mimics real-world attack scenarios.
Graph Neural Networks (GNNs) represent a promising solution for Machine Learning (ML) based Network Intrusion Detection Systems (NIDS), thanks to their ability to leverage both network flow features and topological patterns. While GNN classifiers demonstrate superior robustness against feature-based adversarial attacks compared to other ML detectors, they remain vulnerable to structural adversarial attacks, where an attacker perturbs the underlying network graph topology by injecting edges or inserting nodes. Such attacks pose a realistic and severe threat, undermining the reliability of GNN-based NIDS in practical deployments. While countermeasures have been proposed in the literature, they often rely on assumptions that are unrealistic in real-world cybersecurity scenarios. In this paper, we propose a defense framework based on adversarial training to strengthen GNN-based NIDS against structural attacks. We generate adversarial samples by strategically replacing the source and destination nodes in benign network flows, thereby efficiently mimicking edge injection attacks. We evaluate our approach on two widely used datasets (CTU-13 and TON-IoT) using EGraphSAGE as the base GNN classifier. Experimental results show that our approach produces hardened detectors with superior detection performance on clean graphs and enhanced robustness against structural adversarial attacks.
