Study of Adversarial Attacks on Classical Machine Learning Models in the Context of Network Threat Detection

Abstract

A study of adversarial attacks on classical machine learning (ML) algorithms in the context of network threat detection is presented. An overview of ML models that are used to perform various tasks in computer network security systems is presented. A formal description of the threat model is provided, as well as a classification of adversarial attacks. The network traffic of the WEB-IDS23 dataset was classified using classical machine learning models: k-nearest neighbors (KNN), Random Forest (RF), and Support Vector Machine (SVM). Adversarial attacks such as the fast gradient sign method (FGSM), projected gradient descent, Carlini & Wagner (C & W), and DeepFool are implemented on these ML algorithms. The impact of the adversarial attacks implemented on listed classical machine learning algorithms is analyzed.