Targeted Adversarial Traffic Generation : Black-box Approach to Evade Intrusion Detection Systems in IoT Networks

Abstract

The integration of machine learning (ML) algorithms into Internet of Things (IoT) applications has introduced significant advantages alongside vulnerabilities to adversarial attacks, especially within IoT-based intrusion detection systems (IDS). While theoretical adversarial attacks have been extensively studied, practical implementation constraints have often been overlooked. This research addresses this gap by evaluating the feasibility of evasion attacks on IoT network-based IDSs, employing a novel black-box adversarial attack. Our study aims to bridge theoretical vulnerabilities with real-world applicability, enhancing understanding and defense against sophisticated threats in modern IoT ecosystems. Additionally, we propose a defense scheme tailored to mitigate the impact of evasion attacks, thereby reinforcing the resilience of ML-based IDSs. Our findings demonstrate successful evasion attacks against IDSs, underscoring their susceptibility to advanced techniques. In contrast, we proposed a defense mechanism that exhibits robust performance by effectively detecting the majority of adversarial traffic, showcasing promising outcomes compared to current state-of-the-art defenses. By addressing these critical cybersecurity challenges, our research contributes to advancing IoT security and provides insights for developing more resilient IDS.

Already published in International Journal of Machine Learning and Cybernetics. Debicha, I., Kenaza, T., Charfi, I. et al. Targeted adversarial traffic generation: black-box approach to evade intrusion detection systems in IoT networks. Int. J. Mach. Learn. & Cyber. 17, 58 (2026). https://doi.org/10.1007/s13042-025-02873-w

References in corpus (9)

• Feature Extraction for Machine Learning-based Intrusion Detection in IoT Networks
• Word-level Textual Adversarial Attacking as Combinatorial Optimization
• Modeling Realistic Adversarial Attacks against Network Intrusion Detection Systems
• Random Partitioning Forest for Point-Wise and Collective Anomaly Detection -- Application to Intrusion Detection
• TAD: Transfer Learning-based Multi-Adversarial Detection of Evasion Attacks against Network Intrusion Detection Systems
• A Simple Framework to Enhance the Adversarial Robustness of Deep Learning-based Intrusion Detection System
• Adv-Bot: Realistic Adversarial Botnet Attacks against Network Intrusion Detection Systems
• SE-GSL: A General and Effective Graph Structure Learning Framework through Structural Entropy Optimization
• Detect & Reject for Transferability of Black-box Adversarial Attacks Against Network Intrusion Detection Systems