Machine learning (ML) and deep learning (DL)-based Intrusion Detection Systems (IDS) have shown promise but remain highly vulnerable to adversarial examples (AEs) – specially crafted inputs designed to evade detection – posing serious security risks. Moreover, their black-box nature limits explainability, undermining trust and hindering defense development. To address these challenges, we propose X-AdvIDS, a novel framework combining adversarial robustness and IDS explainability. Specifically, X-AdvIDS consists of two key modules: Adv-Sword, which leverages explainable Artificial Intelligence (XAI) to generate high-evasion AEs for assessing IDS weaknesses, and Adv-Shield, which utilizes explainable AI to construct a whitelist of trusted features for adversarial sample detection. Experiments on the InSDN and CICIDS2018 demonstrate that Adv-Sword significantly reduces IDS detection performance, revealing vulnerabilities, while Adv-Shield detects over 90% of adversarial inputs with low false positives. Compared to existing methods, X-AdvIDS enhances both robustness and interpretability, making IDS more resilient and transparent.

错误:搜索内容不能为空,请输入英文关键词
错误:关键词超出字数限制,请精简
高级检索

X-AdvIDS: A Framework for Assessing and Improving the Adversarial Robustness of Intrusion Detection Systems with Explainability-Guided Mutation and Analysis

  • Phan The Duy,
  • Truong Thi Hoang Hao,
  • Nguyen Viet Hoang,
  • Nguyen Duc Trung,
  • Le Duc Thinh,
  • Doan Minh Trung,
  • Van-Hau Pham

摘要

Machine learning (ML) and deep learning (DL)-based Intrusion Detection Systems (IDS) have shown promise but remain highly vulnerable to adversarial examples (AEs) – specially crafted inputs designed to evade detection – posing serious security risks. Moreover, their black-box nature limits explainability, undermining trust and hindering defense development. To address these challenges, we propose X-AdvIDS, a novel framework combining adversarial robustness and IDS explainability. Specifically, X-AdvIDS consists of two key modules: Adv-Sword, which leverages explainable Artificial Intelligence (XAI) to generate high-evasion AEs for assessing IDS weaknesses, and Adv-Shield, which utilizes explainable AI to construct a whitelist of trusted features for adversarial sample detection. Experiments on the InSDN and CICIDS2018 demonstrate that Adv-Sword significantly reduces IDS detection performance, revealing vulnerabilities, while Adv-Shield detects over 90% of adversarial inputs with low false positives. Compared to existing methods, X-AdvIDS enhances both robustness and interpretability, making IDS more resilient and transparent.