Employing Deep Ensemble Learning for Improving the Security of Computer Networks against Adversarial Attacks

Ehsan Nowroozi, Mohammadreza Mohammadi, Erkay Savas, Yassine Mekdad, Mauro Conti

Research output: Contribution to journalArticleScientificpeer-review

9 Downloads (Pure)

Abstract

In the past few years, Convolutional Neural Networks (CNN) have demonstrated promising performance in various real-world cybersecurity applications, such as network and multimedia security. However, the underlying fragility of CNN structures poses major security problems, making them inappropriate for use in security-oriented applications, including computer networks. Protecting these architectures from adversarial attacks necessitates using security-wise architectures that are challenging to attack. In this study, we present a novel architecture based on an ensemble classifier that combines the enhanced security of 1-Class classification (known as 1C) with the high performance of conventional 2-Class classification (known as 2C) in the absence of attacks. Our architecture is referred to as the 1.5-Class (cmb-classifier) classifier and is constructed using a final dense classifier, one 2C classifier (i.e., CNNs), and two parallel 1C classifiers (i.e., auto-encoders). In our experiments, we evaluated the robustness of our proposed architecture by considering eight possible adversarial attacks in various scenarios. We performed these attacks on the 2C and cmb-classifier architectures separately. The experimental results of our study showed that the Attack Success Rate (ASR) of the I-FGSM attack against a 2C classifier trained with the N-BaIoT dataset is 0.9900. In contrast, the ASR is 0.0000 for the cmb-classifier.

Original languageEnglish
Pages (from-to)2096-2105
Number of pages10
JournalIEEE Transactions on Network and Service Management
Volume20
Issue number2
DOIs
Publication statusPublished - 2023

Bibliographical note

Green Open Access added to TU Delft Institutional Repository ‘You share, we take care!’ – Taverne project https://www.openaccess.nl/en/you-share-we-take-care
Otherwise as indicated in the copyright section: the publisher is the copyright holder of this work and the author uses the Dutch legislation to make this work public.

Keywords

  • Adversarial Attacks
  • Adversarial Examples
  • Adversarial Machine Learning
  • Computer architecture
  • Computer networks
  • Computer security
  • Convolutional neural networks
  • Counter-Forensics
  • Cybersecurity
  • Deep-Learning Security
  • Ensemble Classifiers
  • Forensics
  • Secure Classification
  • Support vector machines
  • Training

Fingerprint

Dive into the research topics of 'Employing Deep Ensemble Learning for Improving the Security of Computer Networks against Adversarial Attacks'. Together they form a unique fingerprint.

Cite this