Robustness Evaluation of Deep Unsupervised Learning Algorithms for Intrusion Detection Systems
Recently, advances in deep learning have been observed in various fields, including computer vision, natural language processing, and cybersecurity. Machine learning (ML) has demonstrated its ability as a potential tool for anomaly detection-based intrusion detection systems to build secure computer networks. Increasingly, ML approaches are widely adopted than heuristic approaches for cybersecurity because they learn directly from data. Data is critical for the development of ML systems, and becomes potential targets for attackers. Basically, data poisoning or contamination is one of the most common techniques used to fool ML models through data. This paper evaluates the robustness of six recent deep learning algorithms for intrusion detection on contaminated data. Our experiments suggest that the state-of-the-art algorithms used in this study are sensitive to data contamination and reveal the importance of self-defense against data perturbation when developing novel models, especially for intrusion detection systems.
Code (1)
Tasks
Anomaly DetectionData PoisoningIntrusion DetectionSimilar Papers 제목 키워드 기반
A Hybrid Deep Learning Anomaly Detection Framework for Intrusion Detection
Cyber intrusion attacks that compromise the users' critical and sensitive data are escalating in volume and intensity, especially with the growing connections between our daily life and the Internet. The large volume and…
Anomaly DetectionDeep LearningIntrusion DetectionUnsupervised Anomaly DetectionUnsupervised Network Intrusion Detection System for AVTP in Automotive Ethernet Networks
Network Intrusion Detection Systems (NIDSs) are widely regarded as efficient tools for securing in-vehicle networks against diverse cyberattacks. However, since cyberattacks are always evolving, signature-based intrusion…
Anomaly DetectionBIG-bench Machine LearningDeep LearningIntrusion Detection+1Unsupervised Anomaly Detectors to Detect Intrusions in the Current Threat Landscape
Anomaly detection aims at identifying unexpected fluctuations in the expected behavior of a given system. It is acknowledged as a reliable answer to the identification of zero-day attacks to such extent, several ML algor…
Anomaly DetectionBinary ClassificationClusteringIntrusion Detection+1Prepare for Trouble and Make it Double. Supervised and Unsupervised Stacking for AnomalyBased Intrusion Detection
In the last decades, researchers, practitioners and companies struggled in devising mechanisms to detect malicious activities originating security threats. Amongst the many solutions, network intrusion detection emerged …
BenchmarkingIntrusion DetectionMeta-LearningNetwork Intrusion DetectionHybrid Quantum-Classical Autoencoders for Unsupervised Network Intrusion Detection
Unsupervised anomaly-based intrusion detection requires models that can generalize to attack patterns not observed during training. This work presents the first large-scale evaluation of hybrid quantum-classical (HQC) au…
Network Intrusion Detection