The DOI matches its Crossref record; 20 of the 22 references it cites were found in a registry or an index.
Analyzing Adversarial Attacks against Deep Learning for Intrusion Detection in IoT Networks
Open accessAbstract
Adversarial attacks have been widely studied in the field of computer vision but their impact on network security applications remains an area of open research. As IoT, 5G and AI continue to converge to realize the promise of the fourth industrial revolution (Industry 4.0), security incidents and events on IoT networks have increased. Deep learning techniques are being applied to detect and mitigate many of such security threats against IoT networks. Feed- forward Neural Networks (FNN) have been widely used for classifying intrusion attacks in IoT networks. In this paper, we consider a variant of the FNN known as the Self-normalizing Neural Network (SNN) and compare its performance with the FNN for classifying intrusion attacks in an IoT network. Our analysis is performed using the BoT- IoT dataset from the Cyber Range Lab of the center of UNSW Canberra Cyber. In our experimental results, the FNN outperforms the SNN for intrusion detection in IoT networks based on multiple performance metrics such as accuracy, precision, and recall as well as multi-classification metrics such as Cohen Cappa’s score. However, when tested for adversarial robustness, the SNN demonstrates better resilience against the adversarial samples from the IoT dataset, presenting a promising future in the quest for safer and more secure deep learning in IoT networks.
Overview
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Integrity signals
Registry
Cites
Statistics
Verification
Claims the paper makes
The claims and statistics of this paper haven’t been checked yet.
Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.
Claims other papers make about this one
Each is checked against this paper’s own text: does it say what the citing paper says it does?
In the citing paper
“The performance results on the BoT-IoT dataset show that an intrusion detection system based on an FNN performs better than with SNN.”
From Federated Deep Learning for Cyber Security in the Internet of Things: Concepts, Applications, and Experimental Analysis (2021) · cites this paper as [121]
Self-check
Percentages, sums and reported differences re-computed from the paper’s own numbers.
The self-check needs the paper’s full text.
Citations
Cites
(2010) · Cited by 14,134
Explaining and Harnessing Adversarial Examples
Goodfellow, I. J., Shlens, J., & Szegedy, C. (2014) · arXiv · doi:10.48550/arxiv.1412.6572 · Cited by 10,381
Intriguing properties of neural networks
Szegedy, C., Zaremba, W., Sutskever, I., Bruna, J., Erhan, D., Goodfellow, I., & Fergus, R. (2013) · arXiv · doi:10.48550/arxiv.1312.6199 · Cited by 8,143
Towards Deep Learning Models Resistant to Adversarial Attacks
Madry, A., Makelov, A., Schmidt, L., Tsipras, D., & Vladu, A. (2017) · arXiv · doi:10.48550/arxiv.1706.06083 · Cited by 6,602
The Limitations of Deep Learning in Adversarial Settings
Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z. B., & Swami, A. (2016) · 2016 IEEE European Symposium on Security and Privacy (EuroS&P) · doi:10.1109/eurosp.2016.36 · Cited by 3,993
Adversarial machine learning at scale
Kurakin, A., Goodfellow, I., & Bengio, S. (2016) · arXiv · doi:10.48550/arxiv.1611.01236 · Cited by 2,325
Self-Normalizing Neural Networks
Klambauer, G., Unterthiner, T., Mayr, A., & Hochreiter, S. (2017) · arXiv · doi:10.48550/arxiv.1706.02515 · Cited by 2,267
Koroniotis, N., Moustafa, N., Sitnikova, E., & Turnbull, B. (2019) · Future Generation Computer Systems · doi:10.1016/j.future.2019.05.041 · Cited by 1,983
LeCun, Y., Bottou, L., Orr, G., & Müller, K. (1998) · neural information processing systems · Cited by 1,333
A Deep Learning Approach for Network Intrusion Detection System
Javaid, A. Y., Niyaz, Q., Sun, W., & Alam, M. (2016) · International Conference on Bio-Inspired Models of Network, Information and Computing Systems (BIONETICS) · doi:10.4108/eai.3-12-2015.2262516 · Cited by 1,304
Flagged first, then by citations
2 of the 22 references couldn’t be matched to a known paper.
Research works printed but not linked: 2
- 2018, Colaboratory Frequently Asked Questions
- nicolae, 2018, Adversarial robustness toolbox v0 2 2
Cited by
Sorted by citations
Items 201–282 of 282
Mohammed Gaffoor, K., & Nirmala, K. (2025) · International Conference on Data Intelligence and Cognitive Informatics (ICDICI) · doi:10.1109/icdici66477.2025.11135232 · Cited by 2
cao, R., Wang, Y., Zhao, L., Wang, Z., & Mei, N. (2025) · ACS Applied Materials & Interfaces · doi:10.1021/acsami.5c21795 · Cited by 2
Evaluation the Robustness of IoT Intrusion Detection Models in Adversarial Attack Environments
Che, X., Li, H., Chi, L., Wang, F., & Hu, J. (2025) · International Conference on Big Data, Artificial Intelligence and Internet of Things Engineering (ICBAIE) · doi:10.1109/icbaie66852.2025.11326574 · Cited by 2
Intrusion Detection Approaches in Healthcare Systems: An Overview
Hazman, C., Douiba, M., Guezzaz, A., Ravi, V., Azrour, M., & Benkirane, S. (2026) · Springer series in reliability engineering · doi:10.1007/978-3-032-09917-4_9 · Cited by 2
Dash, P. B., Priyadarshani, P. P., & Pehli̇vanoğlu, M. K. (2024) · Intelligent systems reference library · doi:10.1007/978-3-031-54038-7_13 · Cited by 2
Adedayo, A. U., Maruf, A. O., OYELAKIN, A. M., & Abdullahi, S. M. (2024) · FUDMA Journal of Sciences · doi:10.33003/fjs-2024-0803-2448 · Cited by 2
Hussain, B., & Elmedany, W. M. (2024) · Arab ICT Conference (AICTC) · doi:10.1109/aictc58357.2024.10735004 · Cited by 2
Poisoning Online Learning Filters by Shifting on the Move
Tann, W. J.-W., & Chang, E. (2023) · International Conference on Dependable Systems & Networks/Proceedings · doi:10.1109/dsn58367.2023.00033 · Cited by 2
Evading IoT Intrusion Detection Systems with GAN
Mbow, M., Román, R., Takahashi, T., & Sakurai, K. (2024) · Asia Joint Conference on Information Security (AsiaJCIS) · doi:10.1109/asiajcis64263.2024.00018 · Cited by 2
TE-PADN: A poisoning attack defense model based on temporal margin samples
He, H., Liu, K., Zhang, L., Xu, K., Li, J., & Ren, J. (2025) · Big Data Research · doi:10.1016/j.bdr.2025.100528 · Cited by 2
Lightweight intrusion detection methods based on artificial intelligence for IoT networks
Gui, G., Xue, Z., Zhao, R., Deng, X., & Zhan, M. (2025) · Elsevier eBooks · doi:10.1016/b978-0-44-329032-9.00013-0 · Cited by 2
On The Detection Of Adversarial Attacks Through Reliable AI
Vaccari, I., Carlevaro, A., Narteni, S., Cambiaso, E., & Mongelli, M. (2022) · IEEE Conference on Computer Communications Workshops (INFOCOM WKSHPS) · doi:10.1109/infocomwkshps54753.2022.9797955 · Cited by 2
Cyber Attacks Detection using Machine Learning
(2023) · NeuroQuantology · doi:10.48047/nq.2022.20.19.nq99404 · Cited by 2
Wahab, O. A. (2021) · doi:10.36227/techrxiv.13669199.v1 · Cited by 2
Optimizing Deep Learning Model Hyperparameters for Botnet Attack Detection in IoT NetworksPreprint
Popoola, S. I., Adebisi, B., Gui, G., Hammoudeh, M. A. A., Gacanin, H., & Dancey, D. (2022) · doi:10.36227/techrxiv.19501885 · Cited by 2
On Optimality of Deterministic Rules in Adversarial Bayesian Detection
Kim, J. (2022) · IEEE Signal Processing Letters · doi:10.1109/lsp.2022.3140694 · Cited by 1
Pujari, M., & Sun, W. (2024) · Lecture notes in networks and systems · doi:10.1007/978-981-97-3289-0_52 · Cited by 1
Polamarasetti, A., Vadisetty, R., Vangala, S. R., Bodepudi, V., Maka, S. R., Sadaram, G., Sakuru, M., & Karaka, L. M. (2022) · International Journal of Artificial Intelligence Data Science and Machine Learning · doi:10.63282/3050-9262.ijaidsml-v3i3p108 · Cited by 1
A Distributed Intrusion Detection Framework for Cloud and Edge Computing-Assisted Internet of Things
Sun, G., & Zhang, J. (2025) · Communications in computer and information science · doi:10.1007/978-3-031-95133-6_3 · Cited by 1
Benkhelifa, E., Zhukabayeva, T., & Ennaji, S. (2025) · Computing · doi:10.1007/s00607-025-01583-z · Cited by 1
PLAA: Packet-level Adversarial Attacks in Network Traffic Detection
You, J., Zhou, Z., Yang, S., Sun, Y., Zhang, L., & Xu, C. (2025) · IEEE International Conference on Trust, Security and Privacy in Computing and Communications (TrustCom) · doi:10.1109/trustcom66490.2025.00153 · Cited by 1
Dwivedi, S., Shukla, A. K., Tripathi, D., & Singh, S. K. (2026) · PLoS ONE · doi:10.1371/journal.pone.0344685 · Cited by 1
Tarawneh, M., Alrbiahat, D., Al-Eidi, S., & Alzyoud, F. Y. (2026) · Lecture notes in networks and systems · doi:10.1007/978-3-032-21147-7_6 · Cited by 1
Could Min-Max Optimization be a General Defense Against Adversarial Attacks?
Khamis, R. A., & Matrawy, A. (2024) · 2012 International Conference on Computing, Networking and Communications (ICNC) · doi:10.1109/icnc59896.2024.10556266 · Cited by 1
Self-citationIoT Intrusion Detection Enhancement: Data Preprocessing and Dolphin POD-Optimized Deep RNN
Ali, M., Choudhary, J., Srinivasa Rao, D., Jain, R., & Patil, G. (2024) · International Journal of Electronics and Communication Engineering · doi:10.14445/23488549/ijece-v11i6p112 · Cited by 1
Image-based Feature Representation for Enhanced Cyber-Attack Detection in IoHT Environments
Al-Azzani, A. M., Al-Shalabi, A. A., Ghurab, M., Alhrazi, F., Alhomdy, S. A., & Algabri, M. N. A. (2024) · International Conference on Emerging Technologies for Dependable Internet of Things (ICETI) · doi:10.1109/iceti63946.2024.10777210 · Cited by 1
Study of various AI based security model for threat analysis in communication and IoT network
Goje, S. S., Asutkar, S. M., & Asutkar, G. M. (2025) · AIP conference proceedings · doi:10.1063/5.0254197 · Cited by 1
CNN-based Security Authentication for Wireless Multimedia Devices
Gautham, S. K., & Koundinya, A. K. (2021) · International Journal of Wireless and Microwave Technologies · doi:10.5815/ijwmt.2021.04.01 · Cited by 1
Using Machine Learning in Detecting IOT Cyber Attacks
Patil, N. (2022) · International Journal for Research in Applied Science and Engineering Technology · doi:10.22214/ijraset.2022.47365 · Cited by 1
Statistical feature selection based intrusion detection system for internet of things environment
Adhao, R. B., Tayde, M. V., & Pachghare, V. (2023) · AIP conference proceedings · doi:10.1063/5.0128884 · Cited by 1
Investigando o Impacto de Amostras Adversárias na Detecção de Intrusões em um Sistema Ciberfísico
da Silva, G. H. N. E., Miani, R. S., & Zarpel�ão, B. B. (2023) · Simpósio Brasileiro de Redes de Computadores e Sistemas Distribuídos (SBRC) · doi:10.5753/sbrc.2023.488 · Cited by 1
Expert Knowledge Correlated Intrusion Detection System Evaluation Framework for Heterogeneous IoTPreprint
Nitish, A., Hanumanthappa, J., Prakash, S. P. S., Krinkin, K. V., & Hanumanthappa, J. (2021) · doi:10.36227/techrxiv.16722784.v2 · Cited by 1
Wahab, O. A. (2021) · doi:10.36227/techrxiv.13669199 · Cited by 1
Poisoning Online Learning Filters: DDoS Attacks and CountermeasuresPreprint
Tann, W. J.-W., & Chang, E. (2021) · arXiv (Cornell University) · doi:10.48550/arxiv.2107.12612
Expert Knowledge Correlated Intrusion Detection System Evaluation Framework for Heterogeneous IoTPreprint
Nitish, A., Hanumanthappa, J., Prakash, S. P. S., & Krinkin, K. V. (2021) · doi:10.36227/techrxiv.16722784
Emerging Security Issues in IoT
Ahad, U., Singh, Y. P., & Anand, P. (2022) · Lecture notes in electrical engineering · doi:10.1007/978-981-19-0284-0_55
A Systematic Literature Review on Cyber Security Threats of Industrial Internet of Things
Gedam, R., & Rahamatkar, S. (2022) · Wiley eBooks · doi:10.1002/9781119836636.ch1
Enhancing Quality of Service in Internet of Things
Udayakumar, K., Ramamoorthy, S., & Poorvadevi, R. (2022) · Advances in computational intelligence and robotics book series · doi:10.4018/978-1-6684-6275-1.ch007
A Deep Learning and Optimization Method for Detecting Network Intrusion in IOT
Gangula, R., Vutukuru, M. M., & Ranjeeth Kumar, M. (2022) · International Conference on Advanced Technologies in Intelligent Control, Environment, Computing & Communication Engineering (ICATIECE) · doi:10.1109/icatiece56365.2022.10047140
Federated Learning for IoT Applications, Attacks and Defense Methods
Qu, Z., Duan, R., Liu, Y., & Lu, Z. (2023) · Springer eBooks · doi:10.1007/978-3-031-42637-7_9
Block Switching: Defying Fast Gradient Sign Resistance
Mwangi, J. K., Kuria, J., & Wandeto, J. (2024) · IST-Africa Conference (IST-Africa) · doi:10.23919/ist-africa63983.2024.10569920
Security of the IoT Ecosystem: Current and Future Directions
Shukla, T., & Mishra, N. (2024) · Lecture notes in electrical engineering · doi:10.1007/978-981-97-2451-2_15
Adversarial Red Teaming for NIDS:Model-Agnostic Physical-Space AttacksPreprint
Rizvi, S. W. A., Farrukh, Y. A., & Khan, I. U. (2024) · Research Square · doi:10.21203/rs.3.rs-5374586/v1
Insights of Evolving Methods Towards Screening of AI-Enhanced Malware in IoT Environment
Shahabadkar, R., Nandeeswar, S. B., Soman, R., & Sangeetha, G. (2024) · Lecture notes in networks and systems · doi:10.1007/978-3-031-70518-2_57
Generate Adversarial Network Traffic Based on TMUAP for Reversible Transmission of Data
Sun, L., & Ding, R. (2024) · International Conference on Intelligent Computing and Human-Computer Interaction (ICHCI) · doi:10.1109/ichci63580.2024.10808101
Sankeawthong, S., Zhang, Y., & Cao, X. (2025) · SSRN Electronic Journal · doi:10.2139/ssrn.5073958
Digital Attack Identification for the Internet of Things Using Machine Learning
Chatterjee, S., & Satpathy, S. (2025) · Information systems engineering and management · doi:10.1007/978-3-031-74885-1_26
Generating Traffic-Level Adversarial Examples from Feature-Level Specifications
Flood, R., Casadio, M., Aspinall, D., & Komendantskaya, E. (2025) · Lecture notes in computer science · doi:10.1007/978-3-031-82362-6_8
Abstract Attack Intention Inference Using Low-Rank Gated Arithmetic Interactive Attention
Yang, W., Wang, M., & Wojtczak, D. (2025) · IEEE International Conference on Cyber Security and Resilience (CSR) · doi:10.1109/csr64739.2025.11129983
MPTM: A Multiple Perturbation Training Method to Generate Adversarial Traffic in Byte Space
Xiao, K., Zhang, S., Wang, W., & Liu, X. (2025) · International Workshop on Quality of Service · doi:10.1109/iwqos65803.2025.11143321
Rebalanced Divergence-Enhanced Adversarial Training for Long-Tailed Robustness
Cheong, K. H. (2025) · IEEE Transactions on Network Science and Engineering · doi:10.1109/tnse.2025.3642330
Detection of DDOS Attacks in IoT-Based Smart Home Networks Using ML Algorithms
Suparna, N., & H, M. D. (2025) · Lecture notes in networks and systems · doi:10.1007/978-981-96-9533-1_5
Secure AI: Detecting and mitigating networks attacks by deep learning models
Soni, P., & Tandan, G. (2026) · AIP conference proceedings · doi:10.1063/5.0298710
An enhanced deep learning model for intrusion detection systems
Rahman, F., & Lalnunthari (2026) · AIP conference proceedings · doi:10.1063/5.0298655
Li, S., Du, R., & Gu, J. (2025) · IEEE International Conference on Parallel and Distributed Systems (ICPADS) · doi:10.1109/icpads67057.2025.11323207
A Multi-Layer Security Framework for Adversarial SQL Injection in Machine Learning Systems
Veigas, C. M., Mrs. Sangeetha, G., & Kulkarni, M. (2025) · International Conference on Computational Intelligence and Communication Networks (CICN) · doi:10.1109/cicn67655.2025.11368126
Rotimi, D. E., Adeogun, V. O., & Adeyemı, O. S. (2026) · IGI Global eBooks · doi:10.4018/979-8-3373-5876-5.ch006
HYBRID MACHINE LEARNING FRAMEWORK FOR BOTNET ATTACK DETECTION IN IOT NETWORKS
PRASAD, G. G., SREE, D. V. H., & SUBBALAKSHMAMMA, M. T. (2026) · ETDT · doi:10.65713/etdtv2i126
Sankeawthong, S., Cao, X., Zhao, S., & Zhang, Y. (2026) · Computer Networks · doi:10.1016/j.comnet.2026.112430
Evasão em Modelos de Detecção de Ameaças de Rede Usando Propriedades do Espaço de Decisão
Campos, R. D., Nogueira, M., & Santos, M. C. (2026) · doi:10.5753/sbrc.2026.19947
Adversarial Attacks on AI-Based Botnet Detection Systems in IoT: Key Threats and Countermeasures
Kareem, T. B. (2026) · Dijlah Journal of Engineering Sciences · doi:10.65204/djes.v3i2.490
Ding, H., Chen, L., Zhang, B., Peng, H., Li, S., Qu, Z., Zhou, P., & Bai, Y. (2026) · IEEE Transactions on Networking · doi:10.1109/ton.2026.3710207
Behavioral Game-Theoretic Resource Allocation for IoT Security under Jamming Attacks
Nan, S., & Partow, S. (2026) · International Conference on Communications · doi:10.1109/icc59461.2026.11587830
Ahlawat, A., & Goel, A. (2026) · International Conference on Secure Cyber Computing and Communications (ICSCCC) · doi:10.1109/icsccc69031.2026.11600202
Jaswal, R., Khullar, V., & Panda, S. N. (2026) · SN Computer Science · doi:10.1007/s42979-026-05257-1
Tochukwu, N. B., & Ezeaku-Ezeme, C. N. (2026) · International journal of research and scientific innovation · doi:10.51244/ijrsi.2026.1307000430
Robustness as a Tunable Design Objective for Lightweight IoT Intrusion Detection
Dong, X., & Yang, Z. (2026) · Applied Sciences · doi:10.3390/app16178595
Alajaji, A. S., Alharbi, R., Hassan, M. M., & Almukaynizi, M. (2026) · IEEE Access · doi:10.1109/access.2026.3732098
Khan, A., Eleyan, A., & Bejaoui, T. (2026) · International Symposium on Networks, Computers and Communications (ISNCC) · doi:10.1109/isncc70543.2026.11693831
Gong, Z., Ji, W., Liu, L., Wen, Y., Li, H., Xia, B., & Yuan, W. (2026) · IEEE Transactions on Information Forensics and Security · doi:10.1109/tifs.2026.3737644
Robust Anomaly Detection in Cyber-Physical Systems under Multi-Attack Adversarial Threats
Kumar, V., & Srivastava, S. (2026) · IEEE International Conference on Electronics, Computing and Communication Technologies (CONECCT) · doi:10.1109/conecct68978.2026.11700697
Sunitha, A., & Rose, S. G. H. (2026) · Discover Computing · doi:10.1007/s10791-026-10617-9
Baklizi, M. K., Alkhazaleh, M., Alzghoul, M. B., & Abdullah, N. (2026) · IGI Global eBooks · doi:10.4018/979-8-2600-0363-3.ch001
Protocol-Constrained Adversarial Evasion Against Transformer-Based Network Intrusion Detection
Ghosh, S. (2026) · IGI Global eBooks · doi:10.4018/979-8-2600-0363-3.ch004
Scalable and Robust User Deobfuscation Using Pattern of Life
Henderson, T., Osterweil, E., Dinesh, P., & Simon, R. (2026) · IEEE Transactions on Network and Service Management · doi:10.1109/tnsm.2026.3744089
Metadata
- Authors
- Ibitoye, O., Shafiq, O., & Matrawy, A.
- Affiliations
- Carleton University (CA)
- Venue
- 2019 IEEE Global Communications Conference (GLOBECOM)
- Publisher
- IEEE
- Published
- 2019-12
- Pages
- 1-6
- ISSN
- 1930-529X (ISSN-L)
- OpenAlex
- W2944645079
- Cited by
- 281
- References
- 22
- Citations by year
- 2026: 24 · 2025: 40 · 2024: 45 · 2023: 44 · 2022: 54 · 2021: 55 · 2020: 15 · 2019: 4
- FWCI
- 27.60
- Type
- conference paper
- Language
- en
- Open access
- green
- arxiv.org
- Licence
- Locations
- Globecom (publishedVersion)
- arXiv (Cornell University) (submittedVersion)
- arXiv (Cornell University)
- Funders
- Natural Sciences and Engineering Research Council of Canada
- Topics
- Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
- Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
- Physical Sciences › Computer Science › Information Systems › Internet of Things and AI
- Keywords
- adversarial attacks, adversarial robustness, intrusion detection, Internet of Things security, self-normalizing neural networks, feedforward neural networks, Bot-IoT dataset, deep learning security
About these checks
Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.
Statistics and arithmetic are recomputed, not judged.
Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.
What counts as a claim ›How we measure confidence ›How we check this ›
Are you an author, or do you see a problem with this page? Request a review