Robustness of ML-Enhanced IDS to Stealthy Adversaries
Intrusion Detection Systems (IDS) enhanced with Machine Learning (ML) have demonstrated the capacity to efficiently build a prototype of "normal" cyber behaviors in order to detect cyber threats' activity with greater accuracy than traditional rule-based IDS. Because these are largely black boxes, their acceptance requires proof of robustness to stealthy adversaries. Since it is impossible to build a baseline from activity completely clean of that of malicious cyber actors (outside of controlled experiments), the training data for deployed models will be poisoned with examples of activity that analysts would want to be alerted about. We train an autoencoder-based anomaly detection system on network activity with various proportions of malicious activity mixed in and demonstrate that they are robust to this sort of poisoning.
Code (0)
등록된 구현이 없습니다.
Tasks
Anomaly DetectionIntrusion DetectionSimilar Papers 제목 키워드 기반
Regret-Optimal Defense Against Stealthy Adversaries: A System Level Approach
Modern control designs in robotics, aerospace, and cyber-physical systems rely heavily on real-world data obtained through system outputs. However, these outputs can be compromised by system faults and malicious attacks,…
Stealthy Backdoors as Compression Artifacts
In a backdoor attack on a machine learning model, an adversary produces a model that performs well on normal inputs but outputs targeted misclassifications on inputs containing a small trigger pattern. Model compression …
Backdoor AttackModel CompressionQuantizationDetection of Stealthy Adversaries for Networked Unmanned Aerial Vehicles*
A network of unmanned aerial vehicles (UAVs) provides distributed coverage, reconfigurability, and maneuverability in performing complex cooperative tasks. However, it relies on wireless communications that can be suscep…
DROP: Poison Dilution via Knowledge Distillation for Federated Learning
Federated Learning is vulnerable to adversarial manipulation, where malicious clients can inject poisoned updates to influence the global model's behavior. While existing defense mechanisms have made notable progress, th…
Data PoisoningFederated LearningKnowledge DistillationAdversarial Robustness of Deep State Space Models for Forecasting
State-space model (SSM) for time-series forecasting have demonstrated strong empirical performance on benchmark datasets, yet their robustness under adversarial perturbations is poorly understood. We address this gap thr…
Adversarial Robustness