Analyzing the Footprint of Classifiers in Adversarial Denial of Service Contexts

• Type: Article in International Conference Proceedings Book
• Date: 2019-08-30

Authors

Nuno Martins (Author) Other; José Magalhães Cruz (Author) FEUP; Pedro Henriques Abreu (Author) Other; Tiago Cruz (Author) Other

Conference proceedings International

Title: Lecture Notes in Computer Science (including subseries Lecture Notes in Artificial Intelligence and Lecture Notes in Bioinformatics)

Pages: 256-267

19th EPIA Conference on Artificial Intelligence, EPIA 2019

3 September 2019 through 6 September 2019

Other information

DOI: 10.1007/978-3-030-30244-3_22

Abstract (EN): Adversarial machine learning is an area of study that examines both the generation and detection of adversarial examples, which are inputs specially crafted to deceive classifiers, and has been extensively researched specifically in the area of image recognition, where humanly imperceptible modifications are performed on images that cause a classifier to perform incorrect predictions. The main objective of this paper is to study the behavior of multiple state of the art machine learning algorithms in an adversarial context. To perform this study, six different classification algorithms were used on two datasets, NSL-KDD and CICIDS2017, and four adversarial attack techniques were implemented with multiple perturbation magnitudes. Furthermore, the effectiveness of training the models with adversaries to improve recognition is also tested. The results show that adversarial attacks successfully deteriorate the performance of all the classifiers between 13% and 40%, with the Denoising Autoencoder being the technique with highest resilience to attacks.

Language: English

Type (Professor's evaluation): Scientific

No. of pages: 12