Cited by 117Adversarial Robustness in Machine LearningNetwork Security and Intrusion DetectionSpam and Phishing Detection

Deep Reinforcement Adversarial Learning Against Botnet Evasion Attacks

Open access
Apruzzese, Giovanni, Andreolini, Mauro, Marchetti, Mirco, Venturi, Andrea, Colajanni, Michele·2020·IEEE Transactions on Network and Service Management

Abstract

As cybersecurity detectors increasingly rely on machine learning mechanisms, attacks to these defenses escalate as well. Supervised classifiers are prone to adversarial evasion, and existing countermeasures suffer from many limitations. Most solutions degrade performance in the absence of adversarial perturbations; they are unable to face novel attack variants; they are applicable only to specific machine learning algorithms. We propose the first framework that can protect botnet detectors from adversarial attacks through deep reinforcement learning mechanisms. It automatically generates realistic attack samples that can evade detection, and it uses these samples to produce an augmented training set for producing hardened detectors. In such a way, we obtain more resilient detectors that can work even against unforeseen evasion attacks with the great merit of not penalizing their performance in the absence of specific attacks. We validate our proposal through an extensive experimental campaign that considers multiple machine learning algorithms and public datasets. The results highlight the improvements of the proposed solution over the state-of-the-art. Our method paves the way to novel and more robust cybersecurity detectors based on machine learning applied to network traffic analytics.

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Integrity signals

Registry

Crossref · 10.1109/tnsm.2020.3031843

Cites

77 of 77 references verified0 citation errors · 0 not checkable

Statistics

Claims the paper makes

The claims and statistics of this paper haven’t been checked yet.

Run the check — free, no account needed. It reads the open-access text and checks the sources it cites.

A few free checks a day · papers already verified open instantly · results are public

Claims other papers make about this one

Each is checked against this paper’s own text: does it say what the citing paper says it does?

Self-check

Percentages, sums and reported differences re-computed from the paper’s own numbers.

The self-check needs the paper’s full text.

Cites

Flagged first, then by citations

Research works printed but not linked: 2

  1. P.-Y. Chen, H. Zhang, Y. Sharma, J. Yi, and C.-J. Hsieh, "ZOO: Zeroth order optimization based black-box attacks to deep neural networks without training substitute models," in Proc. 10th ACM Workshop Artif. Intell. Security, 2017, pp. 15-26.
  2. H. S. Anderson, J. Woodbridge, and B. Filar, "DeepDGA: Adversarially- tuned domain generation and detection," in Proc. ACM Workshop Artif. Intell. Security, Oct. 2016, pp. 13-21.

Cited by

Sorted by citations

Authors
Apruzzese, G., Andreolini, M., Marchetti, M., Venturi, A., & Colajanni, M.
Affiliations
  • University of Liechtenstein (LI)
  • University of Modena and Reggio Emilia (IT)
  • University of Bologna (IT)
Venue
IEEE Transactions on Network and Service Management
Published
2020-12
Volume
17
Issue
4
Pages
1975-1987
ISSN
  • 1932-4537 (ISSN-L)
  • 2373-7379
OpenAlex
W3111563271
Cited by
117
References
77
Citations by year
2026: 12 · 2025: 19 · 2024: 28 · 2023: 21 · 2022: 23 · 2021: 12 · 2020: 1
FWCI
5.60
Type
journal article
Language
en
Open access
Locations
  • IEEE Transactions on Network and Service Management (publishedVersion)
  • Archivio istituzionale della ricerca (Alma Mater Studiorum Università di Bologna) (submittedVersion, other-oa)
  • Opin vísindi (Opin vísindi) (submittedVersion, cc-by-nc-sa)
  • IRIS UNIMORE (University of Modena and Reggio Emilia) (submittedVersion, cc-by)
Topics
  • Physical Sciences › Computer Science › Artificial Intelligence › Adversarial Robustness in Machine Learning
  • Physical Sciences › Computer Science › Computer Networks and Communications › Network Security and Intrusion Detection
  • Physical Sciences › Computer Science › Information Systems › Spam and Phishing Detection
Keywords
botnet detection, evasion attacks, deep reinforcement learning, adversarial attack generation, data augmentation, network traffic analysis

About these checks

Registry, retraction, Cites and statistics results are computed, not judged, with one exception: a printed reference that no index lists is read once by a model before it counts as a citation error. Claims are extracted by a model and kept only when their quote appears verbatim in the text; each cited source is then checked, with a model’s help, for whether it says what the claim relies on. Those verdicts can be wrong — read the claim’s quote and the cited source before relying on one.

Statistics and arithmetic are recomputed, not judged.

Confidence bands are shown only for fields calibrated on our annotated test set. None is calibrated yet, so no band is shown.

What counts as a claim ›How we measure confidence ›How we check this ›

Are you an author, or do you see a problem with this page? Request a review