Enhancing Network Intrusion Detection Systems: A Real-time Adaptive Machine Learning Approach for Adversarial Packet-Mutation Mitigation
Network Intrusion Detection Systems (NIDS) are increasingly vulnerable to sophisticated packet-mutation attacks that evade traditional detection methods. This paper presents a runtime adaptive machine-learning strategy to combat such adversarial attacks. We introduce an Adaptive Layered Mutation Algorithm (ALMA) for generating advanced adversarial examples and a runtime adaptive learning framework for real-time detection and response. Our approach integrates these components to create a robust, self-evolving NIDS. Experiments comparing various feature extractors and machine learning classifiers demonstrate that our adaptive approach achieves up to $\mathbf{9 8 \%}$ detection accuracy, significantly improving the identification of mutated packets over static models. The integrated system rapidly adapts to new attack patterns, achieving over $\mathbf{9 0 \%}$ detection accuracy for novel attacks within 2-3 update cycles. This research contributes to network security by presenting an adaptive, high-performance approach to intrusion detection that effectively addresses challenges posed by evolving packet-mutation attacks, offering promising directions for next-generation NIDS development.
Authors
- Md Zahidul Islam (ORCID: https://orcid.org/0000-0002-4868-4945)
- Junbin Gao (ORCID: https://orcid.org/0000-0001-9803-0256)
- Quazi Mamun (ORCID: https://orcid.org/0000-0003-2196-7651)
- Md Mehedi Hasan (ORCID: https://orcid.org/0000-0003-4952-0739)
- Rafiqul Islam (ORCID: https://orcid.org/0000-0003-0920-5697)
Institutions
- The University of Sydney (AU)
- Charles Sturt University (AU)
Publication Details
- Published
- 2024-10-24
- DOI
- https://doi.org/10.1109/nca61908.2024.00042
- Citations
- 2
- Primary Topic
- Network Security and Intrusion Detection
- Type
- article
- Field-Weighted Citation Impact
- 0.70