ACI Journal Articles

Title

Evaluating Model Robustness to Adversarial Samples in Network Intrusion Detection

Document Type

Conference Proceeding

USMA Research Unit Affiliation

Army Cyber Institute

Publication Date

12-2021

Abstract

Adversarial machine learning, a technique which seeks to deceive machine learning (ML) models, threatens the utility and reliability of ML systems. This is particularly relevant in critical ML implementations such as those found in Network Intrusion Detection Systems (NIDS). This paper considers the impact of adversarial influence on NIDS and proposes ways to improve ML based systems. Specifically, we consider five feature robustness metrics to determine which features in a model are most vulnerable, and four defense methods. These methods are tested on six ML models with four adversarial sample generation techniques. Our results show that across different models and adversarial generation techniques, there is limited consistency in vulnerable features or in effectiveness of defense method.

Peer Reviewed

1

Record links to items hosted by external providers may require fee for full-text.

Share

COinS