Backdoor Adversarial Machine Learning Attack on Graph Convolutional Networks for IoMT Traffic Misclassification
摘要
Graph Convolutional Networks (GCNs) are increasingly used in security-sensitive applications. This study investigates the vulnerability of GCNs increasingly employed in IoT traffic classification, to backdoor adversarial attacks, focusing on simulated Malaria DoS and Slowite attacks. Subtle manipulations of edge features, constituting less than 0.5% perturbation, result in significant misclassifications of malicious traffic while causing less than a 1% change in overall metrics. Using a proprietary IoT dataset and validated on the CICIoMT2024 dataset, the study demonstrates consistent adversarial efficacy while preserving performance on clean data. The findings highlight the need for robust defenses to protect GCNs in critical IoT contexts, where undetected attacks could cause severe real-world impacts.