Skip to content
Conference

An Adaptive Defense Framework for Enhancing Adversarial Robustness in Deep Learning-based Network Intrusion Detection Systems

Jul 2026 · 2026 4th International Conference on Sustainable Computing and Smart Systems (ICSCSS) · pp. 583-589 · 0 citations · 21 references

Abstract

This study investigated the robustness of deep learning-based Network Intrusion Detection Systems (NIDS) against adversarial attacks by proposing a confidence-aware adaptive defense framework. The proposed approach integrates a baseline feedforward neural network, an adversarially trained robust model, and an adversarial detector to dynamically select the most appropriate prediction path based on detector confidence. Experimental evaluation under single-step, multi-step, and adaptive adversarial attack scenarios demonstrated that the framework significantly improves detection robustness while maintaining high classification accuracy on clean network traffic. The adaptive fusion strategy effectively mitigates the impact of adversarial perturbations, reducing misclassification rates and enhancing the reliability of intrusion detection in dynamic cybersecurity environments. These findings confirm that confidence-guided adaptive defense mechanisms provide a practical solution for strengthening the resilience of AI-driven NIDS against evolving attack strategies. However, the proposed framework was evaluated using controlled experimental settings and specific attack models, which may not fully represent the diversity of real-world cyber threats. Future work will focus on validating the framework in large-scale operational networks, extending it to advanced zero-day and adaptive attacks, and investigating lightweight deployment strategies for real-time edge and cloud-based cybersecurity applications.

View source

Similar papers

Open access Jul 2026

Defending and mitigating the impact of targeted white-box adversarial attacks in computer network security

A detailed empirical assessment of targeted adversarial vulnerability and defensive behaviour in a multi-class NIDS setting is presented and the results highlight long-standing, class-specific, robustness gaps and provide insights that could be used to design more robust intrusion detection systems.

Khushnaseeb Roshan, Faraz Masood, A. Zafar et al. · 1 citation
Open access Jul 2026

Detecting adversarial evasion in deep learning intrusion detection systems using explainable AI

Deep learning based network intrusion detection systems (IDS) can achieve strong traffic classification performance, but their resilience to adversarial manipulation remains a critical concern. This study evaluates the adversarial robustness of Long Short-Term Memory (LSTM) and Gated Recurrent Unit (GRU) models in a mu...

Elijah M. Maseno, Yanxia Sun, Zenghui Wang · 0 citations
Open access Aug 2026

Adversarial Transferability in AI-based Network Intrusion Detection: A Comparative Study of ANN and CNN Models

Experimental results indicate that CNN-based NIDS are more vulnerable to adversarial attacks than ANN-based models, with adversarial examples successfully transferring across architectures, highlighting the critical risks associated with adversarial transferability.

Aasim Zafar, Shazra Wali, S. B. U. Haque · 0 citations
Review Open access 2026

Review of Adversarial Attack Mechanisms, Detection Techniques and Defence Strategies in Critical Network Infrastructures

An extensive literature review on the adversarial attack methods, detection and defence techniques of critical network infrastructures and suggests the creation of multi-strategic, adaptive, and real-time adversarial threat management systems that can sustain themselves in a heterogeneous network environment.

F. Okoye, Aghaizu Herman Chijioke, Shamsudeen Mohammed S.B · 0 citations
Review Open access 2026

Adversarial Evasion in Machine-Learning-Based Network Intrusion Detection: A Systematic Review, Threat Modeling, and Research Roadmap

A Kitchenham-informed systematic literature review methodology, this review synthesizes 186 studies published between 2018 and 2026 and develops a perturbation-realism taxonomy, ranging from feature-level manipulation to executable packet-level attacks, that clarifies when reported success corresponds to deployable ris...

Huda Ali Alatawi · 0 citations

We use cookies to run the site and, with your consent, for analytics and to show ads. See our Cookie Policy.