提出混合防御方法,有效应对白盒攻击对网络入侵检测系统的威胁。
A Multi-Model Hybrid Defense Approach Against White-box Adversarial Attacks in Computer Network Traffic
- 结合对抗训练与高斯数据增强,构建多模型协同防御机制。
- 在FGSM和C&W攻击下,防御后准确率分别提升至96.57%和89.20%。
- 适用于提升NIDS在真实网络环境中的抗攻击能力,适合安全研究者参考。
为应对不断演进的网络威胁与未知攻击,网络入侵检测系统(NIDS)是关键防护工具。然而,其易受对抗攻击影响,攻击者通过构造并注入对抗样本,可使正常流量被误判为恶意。本文针对两种强效攻击——快速梯度符号法(FGSM)与Carlini & Wagner(C&W)攻击,提出一种混合防御机制。该方法融合对抗训练(AT)与高斯数据增强(GDA),前者提升对特定对抗向量的鲁棒性,后者实现多方向防御。实验显示,攻击前NIDS表现良好,但攻击后准确率显著下降(分别为FGSM:0.2649,C&W:0.4961)。经本方法防御后,准确率恢复至96.57%(FGSM)与89.20%(C&W),且在ε值(0.0001–0.0009)与置信噪声因子范围内均表现稳定。研究为对抗机器学习在网络安全领域的应用提供新方向。
原文摘要 · Abstract (English)
It is crucial to safeguard computer networks from evolving network security threats and unknown cyberattacks. An essential tool for protecting computer networks against unknown cyber threats is Network Intrusion Detection System (NIDS). However, NIDS faces a major security concern due to its susceptibility to adversarial attacks. Adversarial attacks aim to deceive NIDS by crafting and injecting adversarial examples into the system. These adversarial inputs can deceive the NIDS into misclassifying benign network traffic as malicious. We developed a resilient hybrid defense mechanism aimed to mitigate the impact of two potent adversarial attacks: Fast Gradient Sign Method (FGSM) and Carlini & Wagner (C&W) attack. Our hybrid defense approach leverages the combined strength of two heuristic defense methods: Adversarial Training (AT) and Gaussian Data Augmentation (GDA). GDA provides multi-directional defense, while AT enhances NIDS robustness against specific adversarial vectors. Under pre-attack scenarios, NIDS demonstrated good accuracy and f1-score. However, in the post-attack scenario, its accuracy significantly dropped under FGSM and C&W attacks (0.2649 and 0.4961, respectively). Our proposed hybrid defense method effectively mitigated these adversarial threats, with post-defense accuracy of 96.57% and 89.20% for FGSM and C&W attacks. We evaluated the defense strategy across a range of epsilon and confidence noise factor values (ranging from 0.0001 to 0.0009). This research provides a good direction for future researchers in the emerging area of adversarial machine learning from a security perspective.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。