Niklas Bunzel

Detecting Adversarial Evasion Attacks Against Autoencoder-Based Network Intrusion Detection Systems

Two complementary detectors are proposed: the Residual Localisation Detector (RLD), which tracks the spatial concentration of reconstruction errors in the inter-arrival time feature region in image space; and the Feature-Space Perturbation Consistency (FPC) Detector, which operates directly on packet-level inter-arrival time features in packet-feature space.