mlsanityData to 7 Oct 2026

Enhancing Adversarial Robustness of IoT Intrusion Detection via SHAP-Based Attribution Fingerprinting

arXiv 2511.06197 ↗First posted 9 Nov 2025cs.CR cs.AI cs.CLcited by 0

Not on the map. Why?

Abstract (arXiv)

The rapid proliferation of Internet of Things (IoT) devices has transformed numerous industries by enabling seamless connectivity and data-driven automation. However, this expansion has also exposed IoT networks to increasingly sophisticated security threats, including adversarial attacks targeting artificial intelligence (AI) and machine learning (ML)-based intrusion detection systems (IDS) to deliberately evade detection, induce misclassification, and systematically undermine the reliability and integrity of security defenses. To address these challenges, we propose a novel adversarial detection model that enhances the robustness of IoT IDS against adversarial attacks through SHapley Additive exPlanations (SHAP)-based fingerprinting. Using SHAP's DeepExplainer, we extract attribution fingerprints from network traffic features, enabling the IDS to reliably distinguish between clean and adversarially perturbed inputs. By capturing subtle attribution patterns, the model becomes more resilient to evasion attempts and adversarial manipulations. We evaluated the model on a standard IoT benchmark dataset, where it significantly outperformed a state-of-the-art method in detecting adversarial attacks. In addition to enhanced robustness, this approach improves model transparency and interpretability, thereby increasing trust in the IDS through explainable AI.

Key facts. No citing papers in the map yet (data through 7 Oct 2026). Builds on 20 of its 45 references that are in the map. First posted on arXiv 9 Nov 2025.

Builds on

20 of 45 references.

References · 20

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,287
  2. 2017A Unified Approach to Interpreting Model Predictionscited by 6,488
  3. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,326
  4. 2013Intriguing properties of neural networkscited by 5,114
  5. 2016"Why Should I Trust You?": Explaining the Predictions of Any Classifiercited by 5,040
  6. 2017Learning Important Features Through Propagating Activation Differencescited by 1,454
  7. 2015DeepFool: a simple and accurate method to fool deep neural networkscited by 1,315
  8. 2017Reluplex: An Efficient SMT Solver for Verifying Deep Neural Networkscited by 739
  9. 2015Distillation as a Defense to Adversarial Perturbations against Deep Neural Networkscited by 675
  10. 2017PixelDefend: Leveraging Generative Models to Understand and Defend against Adversarial Examplescited by 243
  11. 2018Adversarial Robustness Toolbox v1.0.0cited by 214
  12. 2014Towards Deep Neural Network Architectures Robust to Adversarial Examplescited by 146
8 more
  1. 2020ATOM: Robustifying Out-of-distribution Detection Using Outlier Miningcited by 116
  2. 2017SafetyNet: Detecting and Rejecting Adversarial Examples Robustlycited by 76
  3. 2019When Explainability Meets Adversarial Learning: Detecting Adversarial Examples using SHAP Signaturescited by 40
  4. 2020Adversarial Machine Learning in Network Intrusion Detection Systemscited by 25
  5. 2017DeepSafe: A Data-driven Approach for Checking Adversarial Robustness in Neural Networkscited by 20
  6. 2022Machine Learning-Enabled IoT Security: Open Issues and Challenges Under Advanced Persistent Threatscited by 7
  7. 2024Explainable and Transferable Adversarial Attack for ML-Based Network Intrusion Detectorscited by 6
  8. 2024Out-of-Distribution Data: An Acquaintance of Adversarial Examples -- A Surveycited by 6

Built on by

Not cited yet.