对抗攻击对基于监督机器学习的网络入侵检测系统的影响。

Adversarial attacks against supervised machine learning based network intrusion detection systems.

机构信息

Information Systems Department, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia.

Information Technology Department, Faculty of Computing and Information Technology, King Abdulaziz University, Jeddah, Saudi Arabia.

出版信息

PLoS One. 2022 Oct 14;17(10):e0275971. doi: 10.1371/journal.pone.0275971. eCollection 2022.

Abstract

Adversarial machine learning is a recent area of study that explores both adversarial attack strategy and detection systems of adversarial attacks, which are inputs specially crafted to outwit the classification of detection systems or disrupt the training process of detection systems. In this research, we performed two adversarial attack scenarios, we used a Generative Adversarial Network (GAN) to generate synthetic intrusion traffic to test the influence of these attacks on the accuracy of machine learning-based Intrusion Detection Systems(IDSs). We conducted two experiments on adversarial attacks including poisoning and evasion attacks on two different types of machine learning models: Decision Tree and Logistic Regression. The performance of implemented adversarial attack scenarios was evaluated using the CICIDS2017 dataset. Also, it was based on a comparison of the accuracy of machine learning-based IDS before and after attacks. The results show that the proposed evasion attacks reduced the testing accuracy of both network intrusion detection systems models (NIDS). That illustrates our evasion attack scenario negatively affected the accuracy of machine learning-based network intrusion detection systems, whereas the decision tree model was more affected than logistic regression. Furthermore, our poisoning attack scenario disrupted the training process of machine learning-based NIDS, whereas the logistic regression model was more affected than the decision tree.

摘要

对抗机器学习是一个最近的研究领域,它探讨了对抗攻击策略和对抗攻击的检测系统,这些攻击是专门设计的输入,旨在欺骗检测系统的分类或破坏检测系统的训练过程。在这项研究中,我们进行了两种对抗攻击场景,我们使用生成对抗网络(GAN)生成合成入侵流量,以测试这些攻击对基于机器学习的入侵检测系统(IDS)准确性的影响。我们对两种不同类型的机器学习模型(决策树和逻辑回归)进行了两种对抗攻击实验,包括中毒攻击和逃避攻击。使用 CICIDS2017 数据集评估实施的对抗攻击场景的性能。此外,它还基于攻击前后基于机器学习的 IDS 的准确性进行了比较。结果表明,所提出的逃避攻击降低了两个网络入侵检测系统模型(NIDS)的测试准确性。这表明我们的逃避攻击场景对基于机器学习的网络入侵检测系统的准确性产生了负面影响,而决策树模型比逻辑回归模型受到的影响更大。此外,我们的中毒攻击场景扰乱了基于机器学习的 NIDS 的训练过程,而逻辑回归模型比决策树模型受到的影响更大。

https://cdn.ncbi.nlm.nih.gov/pmc/blobs/eda6/9565394/56222acfb36f/pone.0275971.g001.jpg

文献AI研究员

20分钟写一篇综述,助力文献阅读效率提升50倍

立即体验

用中文搜PubMed

大模型驱动的PubMed中文搜索引擎

马上搜索