mlsanityData to 14 Oct 2026

Uncovering and Understanding FPR Manipulation Attack in Industrial IoT Networks

arXiv 2601.14505 ↗First posted 20 Jan 2026cs.CR cs.LGcited by 0

Not on the map. Why?

Abstract (arXiv)

In the network security domain, due to practical issues -- including imbalanced data and heterogeneous legitimate network traffic -- adversarial attacks in machine learning-based NIDSs have been viewed as attack packets misclassified as benign. Due to this prevailing belief, the possibility of (maliciously) perturbed benign packets being misclassified as attack has been largely ignored. In this paper, we demonstrate that this is not only theoretically possible, but also a particular threat to NIDS. In particular, we uncover a practical cyberattack, FPR manipulation attack (FPA), especially targeting industrial IoT networks, where domain-specific knowledge of the widely used MQTT protocol is exploited and a systematic simple packet-level perturbation is performed to alter the labels of benign traffic samples without employing traditional gradient-based or non-gradient-based methods. The experimental evaluations demonstrate that this novel attack results in a success rate of 80.19% to 100%. In addition, while estimating impacts in the Security Operations Center, we observe that even a small fraction of false positive alerts, irrespective of different budget constraints and alert traffic intensities, can increase the delay of genuine alerts investigations up to 2 hr in a single day under normal operating conditions. Furthermore, a series of relevant statistical and XAI analyses is conducted to understand the key factors behind this remarkable success. Finally, we explore the effectiveness of the FPA packets to enhance models' robustness through adversarial training and investigate the changes in decision boundaries accordingly.

Key facts. No citing papers in the map yet (data through 14 Oct 2026). Builds on 35 of its 85 references that are in the map. First posted on arXiv 20 Jan 2026.

Builds on

35 of 85 references.

References · 35

  1. 2014Explaining and Harnessing Adversarial Examplescited by 7,364
  2. 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
  3. 2017Towards Deep Learning Models Resistant to Adversarial Attackscited by 6,415
  4. 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
  5. 2018UMAP: Uniform Manifold Approximation and Projection for Dimension Reductioncited by 2,898
  6. 2016A Baseline for Detecting Misclassified and Out-of-Distribution Examples in Neural Networkscited by 2,385
  7. 2018A Simple Unified Framework for Detecting Out-of-Distribution Samples and Adversarial Attackscited by 1,485
  8. 2018Robustness May Be at Odds with Accuracycited by 880
  9. 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
  10. 2020Fast is better than free: Revisiting adversarial trainingcited by 727
  11. 2017ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Modelscited by 666
  12. 2019Adversarial Training for Free!cited by 643
23 more
  1. 2016Delving into Transferable Adversarial Examples and Black-box Attackscited by 536
  2. 2017Decision-Based Adversarial Attacks: Reliable Attacks Against Black-Box Machine Learning Modelscited by 462
  3. 2021Recent Advances in Adversarial Training for Adversarial Robustnesscited by 279
  4. 2018Generating Adversarial Examples with Adversarial Networkscited by 258
  5. 2017Generating Natural Adversarial Examplescited by 183
  6. 2018Towards the Development of Realistic Botnet Dataset in the Internet of Things for Network Forensic Analytics: Bot-IoT Datasetcited by 99
  7. 2017Generating Adversarial Malware Examples for Black-Box Attacks Based on GANcited by 75
  8. 2018N-BaIoT: Network-based Detection of IoT Botnet Attacks Using Deep Autoencoderscited by 67
  9. 2021Understanding Softmax Confidence and Uncertaintycited by 63
  10. 2018Adversarial Malware Binaries: Evading Deep Learning for Malware Detection in Executablescited by 62
  11. 2018On the Geometry of Adversarial Examplescited by 43
  12. 2018IDSGAN: Generative Adversarial Networks for Attack Generation against Intrusion Detectioncited by 42
  13. 2023Exploring and Exploiting Decision Boundary Dynamics for Adversarial Robustnesscited by 36
  14. 2019Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binariescited by 31
  15. 2020Boundary thickness and robustness in learning modelscited by 26
  16. 2022The Role of Machine Learning in Cybersecuritycited by 22
  17. 2019Analyzing Adversarial Attacks Against Deep Learning for Intrusion Detection in IoT Networkscited by 16
  18. 2020Semantic-preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detectioncited by 12
  19. 2021TANTRA: Timing-Based Adversarial Network Traffic Reshaping Attackcited by 12
  20. 2024Detecting Brittle Decisions for Free: Leveraging Margin Consistency in Deep Robust Classifierscited by 10
  21. 2020A Multi-Vocal Review of Security Orchestrationcited by 9
  22. 2019Effect of Imbalanced Datasets on Security of Industrial IoT Using Machine Learningcited by 2
  23. 2025A systematic review of metaheuristics-based and machine learning-driven intrusion detection systems in IoTcited by 1

Built on by

Not cited yet.