Aasim Zafar

Defending and mitigating the impact of targeted white-box adversarial attacks in computer network security

A detailed empirical assessment of targeted adversarial vulnerability and defensive behaviour in a multi-class NIDS setting is presented and the results highlight long-standing, class-specific, robustness gaps and provide insights that could be used to design more robust intrusion detection systems.