论文标题

采用深层合奏学习来改善计算机网络的安全性,以防止对抗性攻击

Employing Deep Ensemble Learning for Improving the Security of Computer Networks against Adversarial Attacks

论文作者

Nowroozi, Ehsan, Mohammadi, Mohammadreza, Savas, Erkay, Conti, Mauro, Mekdad, Yassine

论文摘要

在过去的几年中,卷积神经网络(CNN)在各种现实世界的网络安全应用程序(例如网络和多媒体安全)中表现出了有希望的性能。但是,CNN结构的潜在脆弱性构成了主要的安全问题,因此不适合用于以安全为导向的应用程序,包括此类计算机网络。保护这些体系结构免受对抗性攻击,需要使用挑战性攻击的安全体系结构。 在这项研究中,我们提出了一种基于合奏分类器的新颖体系结构,将1级分类(称为1C)的增强安全性与传统的2级分类(称为2C)的高性能在没有攻击的情况下相结合。您的体系结构被称为1.5级级别(Spritz-1.5c)的分类和最终构造的分类(I. sprifier classifier,I。classifier,I.并行1C分类器(即自动编码器)。在我们的实验中,我们通过在各种情况下考虑八次可能的对抗性攻击来评估我们提出的架构的鲁棒性。我们分别对2C和Spritz-1.5c体系结构进行了这些攻击。我们研究的实验结果表明,I-FGSM的攻击成功率(ASR)针对用N-Baiot数据集训练的2C分类器的攻击率为0.9900。相反,Spritz-1.5C分类器的ASR为0.0000。

In the past few years, Convolutional Neural Networks (CNN) have demonstrated promising performance in various real-world cybersecurity applications, such as network and multimedia security. However, the underlying fragility of CNN structures poses major security problems, making them inappropriate for use in security-oriented applications including such computer networks. Protecting these architectures from adversarial attacks necessitates using security-wise architectures that are challenging to attack. In this study, we present a novel architecture based on an ensemble classifier that combines the enhanced security of 1-Class classification (known as 1C) with the high performance of conventional 2-Class classification (known as 2C) in the absence of attacks.Our architecture is referred to as the 1.5-Class (SPRITZ-1.5C) classifier and constructed using a final dense classifier, one 2C classifier (i.e., CNNs), and two parallel 1C classifiers (i.e., auto-encoders). In our experiments, we evaluated the robustness of our proposed architecture by considering eight possible adversarial attacks in various scenarios. We performed these attacks on the 2C and SPRITZ-1.5C architectures separately. The experimental results of our study showed that the Attack Success Rate (ASR) of the I-FGSM attack against a 2C classifier trained with the N-BaIoT dataset is 0.9900. In contrast, the ASR is 0.0000 for the SPRITZ-1.5C classifier.

扫码加入交流群

加入微信交流群

微信交流群二维码

扫码加入学术交流群,获取更多资源