用生成对抗网络增强表格模型,提升入侵检测的准确率与抗攻击能力。
Boundary-Seeking GAN-Augmented TabTransformer for Adversarially Robust Intrusion Detection
- 引入边界寻址生成器同时生成少数类样本和对抗样本。
- 宏平均F1得分从82.96%提升至86.50%,网页攻击类提升最显著。
- 对抗测试下模型性能不降反升,且误报率始终低于3%。
基于机器学习的入侵检测系统常面临类别不平衡与对抗攻击脆弱性问题,导致检测性能下降。本文提出一种由边界寻址生成对抗网络(BGAN)增强的TabTransformer框架,用于基于流量的入侵检测,使用CICIDS2017数据集。BGAN兼具双重功能:生成合成少数类样本以缓解数据不平衡,同时生成对抗样本评估模型鲁棒性。实验表明,经BGAN增强后,TabTransformer的宏平均F1分数从82.96%提升至86.50%,其中Web_Attack类的F1分数从0.29提升至0.61。鲁棒性评估显示,所有未增强模型在对抗测试下性能下降率(PDR)达100%,而所有BGAN增强模型均获得负PDR值,表明其抗干扰能力增强。此外,增强后的TabTransformer在各类噪声水平下保持稳定低误报率(1.51%-2.92%),而对比的BGAN增强决策树在良性扰动下误报率达49.09%。结果表明,BGAN持续提升类别平衡与对抗鲁棒性,所提出的BGAN-TabTransformer框架为对抗网络环境提供了高效自适应的入侵检测方案。
原文摘要 · Abstract (English)
Machine learning-based intrusion detection systems (IDSs) often suffer from class imbalance and vulnerability to adversarial attacks, leading to degraded detection performance and reduced robustness. This study proposes a TabTransformer framework augmented by the Boundary-Seeking Generative Adversarial Network (BGAN) for flow-based intrusion detection using the CICIDS2017 dataset. BGAN serves a dual purpose by generating synthetic minority-class samples to mitigate data imbalance and producing adversarial samples to evaluate model robustness. Experimental results demonstrate that BGAN augmentation improves TabTransformer's Macro-F1 score from 82.96% to 86.50%, with the largest class-wise improvement observed for Web_Attack (F1 score: 0.29 to 0.61). Robustness evaluation shows that all non-augmented models experienced a 100% Performance Drop Rate (PDR) under adversarial testing, whereas all BGAN-augmented models achieved negative PDR values, indicating improved resilience. Furthermore, the augmented TabTransformer maintained stable and low False Triggered Rate (FTR) values (1.51%-2.92%) across all noise levels, compared with the BGAN-augmented Decision Tree, which reached 49.09% under benign perturbations. These findings demonstrate that BGAN consistently enhances both class balance and adversarial robustness, while the proposed BGAN-TabTransformer framework provides an effective and adaptive intrusion detection solution for adversarial network environments.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。