Rallying Adversarial Techniques against Deep Learning for Network Security
Not on the map. Why?
Abstract (arXiv)
Recent advances in artificial intelligence and the increasing need for powerful defensive measures in the domain of network security, have led to the adoption of deep learning approaches for use in network intrusion detection systems. These methods have achieved superior performance against conventional network attacks, which enable the deployment of practical security systems to unique and dynamic sectors. Adversarial machine learning, unfortunately, has recently shown that deep learning models are inherently vulnerable to adversarial modifications on their input data. Because of this susceptibility, the deep learning models deployed to power a network defense could in fact be the weakest entry point for compromising a network system. In this paper, we show that by modifying on average as little as 1.38 of the input features, an adversary can generate malicious inputs which effectively fool a deep learning based NIDS. Therefore, when designing such systems, it is crucial to consider the performance from not only the conventional network security perspective but also the adversarial machine learning domain.
Key facts. Cited by 11 papers in the map (data through 14 Oct 2026). First posted on arXiv 27 Mar 2019.
Builds on
No reference list yet.
Built on by
Citing papers per year: 2021: 2; 2022: 1; 2023: 3; 2024: 2; 2025: 2; 2026: 1.
11 papers.
- 2021TANTRA: Timing-Based Adversarial Network Traffic Reshaping Attackcited by 12
- 2021Adversarial Machine Learning In Network Intrusion Detection Domain: A Systematic Reviewcited by 8
- 2023Untargeted White-box Adversarial Attack with Heuristic Defence Methods in Real-time Deep Learning based Network Intrusion Detection Systemcited by 8
- 2022TAD: Transfer Learning-based Multi-Adversarial Detection of Evasion Attacks against Network Intrusion Detection Systemscited by 7
- 2023A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection Systemcited by 6
- 2023Review on the Feasibility of Adversarial Evasion Attacks and Defenses for Network Intrusion Detection Systemscited by 3
- 2024Black-box Adversarial Transferability: An Empirical Study in Cybersecurity Perspectivecited by 3
- 2025L-XAIDS: A LIME-based eXplainable AI framework for Intrusion Detection Systemscited by 1
- 2026NetDiffuser: Deceiving DNN-Based Network Attack Detection Systems with Diffusion-Generated Adversarial Trafficcited by 1
- 2024TEAM: Temporal Adversarial Examples Attack Model against Network Intrusion Detection System Applied to RNNcited by 0
- 2025Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summariescited by 0
- 2026NetDiffuser: Deceiving DNN-Based Network Attack Detection Systems with Diffusion-Generated Adversarial Traffic9 Mar 2026
- 2025L-XAIDS: A LIME-based eXplainable AI framework for Intrusion Detection Systems24 Aug 2025
- 2025Detecting APT Malware Command and Control over HTTP(S) Using Contextual Summaries7 Feb 2025
- 2024TEAM: Temporal Adversarial Examples Attack Model against Network Intrusion Detection System Applied to RNN19 Sep 2024
- 2024Black-box Adversarial Transferability: An Empirical Study in Cybersecurity Perspective15 Apr 2024
- 2023A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System6 Dec 2023
- 2023Untargeted White-box Adversarial Attack with Heuristic Defence Methods in Real-time Deep Learning based Network Intrusion Detection System5 Oct 2023
- 2023Review on the Feasibility of Adversarial Evasion Attacks and Defenses for Network Intrusion Detection Systems13 Mar 2023
- 2022TAD: Transfer Learning-based Multi-Adversarial Detection of Evasion Attacks against Network Intrusion Detection Systems27 Oct 2022
- 2021Adversarial Machine Learning In Network Intrusion Detection Domain: A Systematic Review6 Dec 2021
- 2021TANTRA: Timing-Based Adversarial Network Traffic Reshaping Attack10 Mar 2021