Visible to the public Evaluating Model Robustness to Adversarial Samples in Network Intrusion Detection

TitleEvaluating Model Robustness to Adversarial Samples in Network Intrusion Detection
Publication TypeConference Paper
Year of Publication2021
AuthorsSchneider, Madeleine, Aspinall, David, Bastian, Nathaniel D.
Conference Name2021 IEEE International Conference on Big Data (Big Data)
Date Publisheddec
Keywordsadversarial artificial intelligence, Big Data, big data security metrics, Conferences, feature extraction, machine learning, Measurement, model robustness evaluation, network intrusion detection, Network security, Perturbation methods, pubcrawl, resilience, Resiliency, Scalability, Training
AbstractAdversarial machine learning, a technique which seeks to deceive machine learning (ML) models, threatens the utility and reliability of ML systems. This is particularly relevant in critical ML implementations such as those found in Network Intrusion Detection Systems (NIDS). This paper considers the impact of adversarial influence on NIDS and proposes ways to improve ML based systems. Specifically, we consider five feature robustness metrics to determine which features in a model are most vulnerable, and four defense methods. These methods are tested on six ML models with four adversarial sample generation techniques. Our results show that across different models and adversarial generation techniques, there is limited consistency in vulnerable features or in effectiveness of defense method.
DOI10.1109/BigData52589.2021.9671580
Citation Keyschneider_evaluating_2021