{"id":"https://openalex.org/W4391248612","doi":"https://doi.org/10.1109/tai.2024.3357791","title":"A Membership Inference and Adversarial Attack Defense Framework for Network Traffic Classifiers","display_name":"A Membership Inference and Adversarial Attack Defense Framework for Network Traffic Classifiers","publication_year":2024,"publication_date":"2024-01-26","ids":{"openalex":"https://openalex.org/W4391248612","doi":"https://doi.org/10.1109/tai.2024.3357791"},"language":"en","primary_location":{"id":"doi:10.1109/tai.2024.3357791","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2024.3357791","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":null,"display_name":"Guangrui Liu","orcid":"https://orcid.org/0000-0002-2890-3776"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Guangrui Liu","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China"],"raw_orcid":"https://orcid.org/0000-0002-2890-3776","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085221201","display_name":"Weizhe Zhang","orcid":"https://orcid.org/0000-0003-4783-876X"},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]},{"id":"https://openalex.org/I4210136793","display_name":"Peng Cheng Laboratory","ror":"https://ror.org/03qdqbt06","country_code":"CN","type":"facility","lineage":["https://openalex.org/I4210136793"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Weizhe Zhang","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","Peng Cheng Laboratory, Shenzhen, Guangdong, China"],"raw_orcid":"https://orcid.org/0000-0003-4783-876X","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213"]},{"raw_affiliation_string":"Peng Cheng Laboratory, Shenzhen, Guangdong, China","institution_ids":["https://openalex.org/I4210136793"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5111118829","display_name":"Xurun Wang","orcid":null},"institutions":[{"id":"https://openalex.org/I204983213","display_name":"Harbin Institute of Technology","ror":"https://ror.org/01yqg2h08","country_code":"CN","type":"education","lineage":["https://openalex.org/I204983213"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Xurun Wang","raw_affiliation_strings":["School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China"],"raw_orcid":"https://orcid.org/0009-0009-7325-6115","affiliations":[{"raw_affiliation_string":"School of Cyberspace Science, Harbin Institute of Technology, Harbin, Heilongjiang, China","institution_ids":["https://openalex.org/I204983213"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5113691183","display_name":"Stephen King","orcid":null},"institutions":[{"id":"https://openalex.org/I21439516","display_name":"Highland Community College - Kansas","ror":"https://ror.org/03nwf3f39","country_code":"US","type":"education","lineage":["https://openalex.org/I21439516"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Stephen King","raw_affiliation_strings":["Leland High school, San Jose, CA, USA","Leland High school, San Jose, CA"],"raw_orcid":"https://orcid.org/0009-0007-3261-9317","affiliations":[{"raw_affiliation_string":"Leland High school, San Jose, CA, USA","institution_ids":["https://openalex.org/I21439516"]},{"raw_affiliation_string":"Leland High school, San Jose, CA","institution_ids":[]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5005228053","display_name":"Shui Yu","orcid":"https://orcid.org/0000-0003-4485-6743"},"institutions":[{"id":"https://openalex.org/I114017466","display_name":"University of Technology Sydney","ror":"https://ror.org/03f0f6041","country_code":"AU","type":"education","lineage":["https://openalex.org/I114017466"]}],"countries":["AU"],"is_corresponding":false,"raw_author_name":"Shui Yu","raw_affiliation_strings":["School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","School of Computer Science, University of Technology Sydney, Ultimo, Australia"],"raw_orcid":"https://orcid.org/0000-0003-4485-6743","affiliations":[{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, NSW, Australia","institution_ids":["https://openalex.org/I114017466"]},{"raw_affiliation_string":"School of Computer Science, University of Technology Sydney, Ultimo, Australia","institution_ids":["https://openalex.org/I114017466"]}]}],"institutions":[],"countries_distinct_count":3,"institutions_distinct_count":4,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.8698,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.71741008,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":94,"max":98},"biblio":{"volume":"6","issue":"2","first_page":"317","last_page":"332"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11598","display_name":"Internet Traffic Analysis and Secure E-voting","score":0.9883000254631042,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.965399980545044,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.868383526802063},{"id":"https://openalex.org/keywords/inference","display_name":"Inference","score":0.6804493069648743},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5765878558158875},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.5469037890434265},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.4250754117965698}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.868383526802063},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.6804493069648743},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5765878558158875},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.5469037890434265},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.4250754117965698}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tai.2024.3357791","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tai.2024.3357791","pdf_url":null,"source":{"id":"https://openalex.org/S4210169448","display_name":"IEEE Transactions on Artificial Intelligence","issn_l":"2691-4581","issn":["2691-4581"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310319808","host_organization_name":"Institute of Electrical and Electronics Engineers","host_organization_lineage":["https://openalex.org/P4310319808"],"host_organization_lineage_names":["Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Artificial Intelligence","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[{"id":"https://openalex.org/G5934369497","display_name":null,"funder_award_id":"2021YFB3101102","funder_id":"https://openalex.org/F4320335777","funder_display_name":"National Key Research and Development Program of China"},{"id":"https://openalex.org/G752701465","display_name":null,"funder_award_id":"U22A2036","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"},{"id":"https://openalex.org/F4320335777","display_name":"National Key Research and Development Program of China","ror":null}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":37,"referenced_works":["https://openalex.org/W1658920975","https://openalex.org/W1873763122","https://openalex.org/W2105482032","https://openalex.org/W2594311007","https://openalex.org/W2606697812","https://openalex.org/W2884943453","https://openalex.org/W2963952467","https://openalex.org/W2969295985","https://openalex.org/W2973941913","https://openalex.org/W2983140679","https://openalex.org/W3043530913","https://openalex.org/W3047327820","https://openalex.org/W3089766985","https://openalex.org/W3135028703","https://openalex.org/W3135347465","https://openalex.org/W3143848010","https://openalex.org/W3165205057","https://openalex.org/W3176353699","https://openalex.org/W3200885897","https://openalex.org/W3214714397","https://openalex.org/W4206081915","https://openalex.org/W4220742835","https://openalex.org/W4283753393","https://openalex.org/W4285410772","https://openalex.org/W4308410483","https://openalex.org/W4385245566","https://openalex.org/W4386634675","https://openalex.org/W6637162671","https://openalex.org/W6640425456","https://openalex.org/W6755817764","https://openalex.org/W6764821032","https://openalex.org/W6767307205","https://openalex.org/W6768366551","https://openalex.org/W6774469542","https://openalex.org/W6775482175","https://openalex.org/W6779439017","https://openalex.org/W6783055306"],"related_works":["https://openalex.org/W2748952813","https://openalex.org/W2502115930","https://openalex.org/W4246396837","https://openalex.org/W2482350142","https://openalex.org/W3176240006","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4288019534"],"abstract_inverted_index":{"Malicious":[0],"traffic":[1,107,147],"identification":[2],"methods":[3],"in":[4,219],"intrusion":[5,34],"detection":[6,35],"systems":[7,36],"have":[8],"evolved":[9],"from":[10,169,182],"rule-based":[11],"matching":[12],"to":[13,48,68,83,111,123,171,184],"machine":[14,31,151],"learning.":[15],"However,":[16],"security":[17,112,120],"risks":[18],"such":[19],"as":[20],"membership":[21,52,63,88,129,167],"inference":[22,53,64,89,130,168,208],"and":[23,54,65,90,114,131,149,186,213],"adversarial":[24,55,66,91,132,180],"attacks":[25,67,92],"hinder":[26],"the":[27,60,77,85,98,137,141,163,176,194,202,207],"practical":[28],"deployment":[29],"of":[30,62,87,140,166,179],"learning-based":[32],"network":[33,106,146],"(ML-NIDS).":[37],"In":[38],"this":[39],"work,":[40],"we":[41,58,75,96,135],"design":[42,97],"a":[43,220],"defense":[44,156],"framework":[45,143,196],"called":[46],"HierarchicalDP":[47,142,155,195,210],"safeguard":[49],"ML-NIDS":[50,217],"against":[51,128],"attacks.":[56,133],"First,":[57],"analyse":[59],"principles":[61],"find":[69],"their":[70],"correlation.":[71],"Based":[72],"on":[73,93,118,144,159],"this,":[74],"propose":[76],"Feature":[78],"Distribution":[79],"Security":[80],"Metric":[81],"(FDSM)":[82],"measure":[84],"risk":[86],"ML-NIDS.":[94],"Then,":[95],"Hierarchical":[99],"Differential":[100],"Privacy":[101],"(HierarchicalDP)":[102],"framework,":[103,157],"which":[104],"partitions":[105],"sample":[108,198],"features":[109,199],"according":[110],"levels":[113],"introduces":[115],"distinct":[116],"noise":[117],"each":[119],"level":[121],"feature":[122],"satisfy":[124],"FDSM,":[125],"thus":[126],"defensing":[127],"Finally,":[134],"evaluate":[136],"defensive":[138],"performance":[139],"two":[145],"datasets":[148],"four":[150],"learning":[152],"models.":[153],"The":[154],"based":[158],"Laplace":[160],"noise,":[161],"reduces":[162],"success":[164],"rate":[165,178],"64.9%":[170],"54.4%":[172],"(ineffective":[173],"binary":[174],"classification),":[175],"evasion":[177],"samples":[181],"86.1%":[183],"23.2%,":[185],"maintains":[187],"model":[188],"accuracy":[189],"fluctuations":[190],"within":[191],"4.2%.":[192],"Furthermore,":[193],"adjusts":[197],"without":[200],"modifying":[201],"model,":[203],"thereby":[204],"not":[205],"affecting":[206],"speed.":[209],"offers":[211],"efficient":[212],"convenient":[214],"defenses":[215],"for":[216],"deployed":[218],"network.":[221]},"counts_by_year":[{"year":2026,"cited_by_count":2},{"year":2024,"cited_by_count":2}],"updated_date":"2026-07-20T07:56:41.581041","created_date":"2025-10-10T00:00:00"}