Adversarial attacks against intrusion detection systems: Taxonomy, solutions and open issues

摘要: Intrusion Detection Systems (IDSs) are one of the key components for securing computing infrastructures. Their objective is to protect against attempts violate defense mechanisms. Indeed, IDSs themselves part infrastructure, and thus they may be attacked by same adversaries designed detect. This a relevant aspect, especially in safety-critical environments, such as hospitals, aircrafts, nuclear power plants, etc. To best our knowledge, this survey first work present an overview on adversarial attacks IDSs. In particular, paper will provide following original contributions: (a) general taxonomy attack tactics IDSs; (b) extensive description how can implemented exploiting IDS weaknesses at different abstraction levels; (c) each implementation, critical investigation proposed solutions open points. Finally, highlight most promising research directions design adversary-aware, harder-to-defeat solutions. end, we leverage experience field intrusion detection, well thorough related works published so far.