{"id":"https://openalex.org/W4409473631","doi":"https://doi.org/10.1109/tdsc.2025.3560486","title":"Explainable and Transferable Adversarial Attack for ML-Based Network Intrusion Detectors","display_name":"Explainable and Transferable Adversarial Attack for ML-Based Network Intrusion Detectors","publication_year":2025,"publication_date":"2025-04-15","ids":{"openalex":"https://openalex.org/W4409473631","doi":"https://doi.org/10.1109/tdsc.2025.3560486"},"language":"en","primary_location":{"id":"doi:10.1109/tdsc.2025.3560486","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3560486","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5028936740","display_name":"Hangsheng Zhang","orcid":"https://orcid.org/0000-0002-6501-840X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hangsheng Zhang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-6501-840X","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5016545058","display_name":"Dongqi Han","orcid":"https://orcid.org/0000-0002-0807-5934"},"institutions":[{"id":"https://openalex.org/I139759216","display_name":"Beijing University of Posts and Telecommunications","ror":"https://ror.org/04w9fbh59","country_code":"CN","type":"education","lineage":["https://openalex.org/I139759216"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Dongqi Han","raw_affiliation_strings":["Faculty of Beijing University of Posts and Telecommunications, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-0807-5934","affiliations":[{"raw_affiliation_string":"Faculty of Beijing University of Posts and Telecommunications, Beijing, China","institution_ids":["https://openalex.org/I139759216"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085138795","display_name":"Shangyuan Zhuang","orcid":"https://orcid.org/0000-0003-4978-9172"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shangyuan Zhuang","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-4978-9172","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5100343127","display_name":"Zhiliang Wang","orcid":"https://orcid.org/0000-0001-6587-820X"},"institutions":[{"id":"https://openalex.org/I99065089","display_name":"Tsinghua University","ror":"https://ror.org/03cve4549","country_code":"CN","type":"education","lineage":["https://openalex.org/I99065089"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiliang Wang","raw_affiliation_strings":["Department of Network Sciences and Cyberspace, Tsinghua University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0001-6587-820X","affiliations":[{"raw_affiliation_string":"Department of Network Sciences and Cyberspace, Tsinghua University, Beijing, China","institution_ids":["https://openalex.org/I99065089"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5089769533","display_name":"Jiyan Sun","orcid":"https://orcid.org/0000-0002-8479-333X"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiyan Sun","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":null,"affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5102790878","display_name":"Yinlong Liu","orcid":"https://orcid.org/0000-0002-5984-1299"},"institutions":[{"id":"https://openalex.org/I19820366","display_name":"Chinese Academy of Sciences","ror":"https://ror.org/034t30j35","country_code":"CN","type":"government","lineage":["https://openalex.org/I19820366"]},{"id":"https://openalex.org/I4210156404","display_name":"Institute of Information Engineering","ror":"https://ror.org/04r53se39","country_code":"CN","type":"facility","lineage":["https://openalex.org/I19820366","https://openalex.org/I4210156404"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yinlong Liu","raw_affiliation_strings":["Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0002-5984-1299","affiliations":[{"raw_affiliation_string":"Institute of Information Engineering, Chinese Academy of Sciences, Beijing, China","institution_ids":["https://openalex.org/I4210156404","https://openalex.org/I19820366"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5070828650","display_name":"Jiqiang Liu","orcid":"https://orcid.org/0000-0003-1147-4327"},"institutions":[{"id":"https://openalex.org/I21193070","display_name":"Beijing Jiaotong University","ror":"https://ror.org/01yj56c84","country_code":"CN","type":"education","lineage":["https://openalex.org/I21193070"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jiqiang Liu","raw_affiliation_strings":["Faculty of Beijing Jiaotong University, Beijing, China"],"raw_orcid":"https://orcid.org/0000-0003-1147-4327","affiliations":[{"raw_affiliation_string":"Faculty of Beijing Jiaotong University, Beijing, China","institution_ids":["https://openalex.org/I21193070"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5085067496","display_name":"Jin Song Dong","orcid":"https://orcid.org/0000-0002-6512-8326"},"institutions":[{"id":"https://openalex.org/I165932596","display_name":"National University of Singapore","ror":"https://ror.org/01tgyzw49","country_code":"SG","type":"education","lineage":["https://openalex.org/I165932596"]}],"countries":["SG"],"is_corresponding":false,"raw_author_name":"Jinsong Dong","raw_affiliation_strings":["Department of Computing, National University of Singapore (NUS), Singapore"],"raw_orcid":"https://orcid.org/0000-0002-6512-8326","affiliations":[{"raw_affiliation_string":"Department of Computing, National University of Singapore (NUS), Singapore","institution_ids":["https://openalex.org/I165932596"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":6,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":16.7163,"has_fulltext":false,"cited_by_count":13,"citation_normalized_percentile":{"value":0.98971044,"is_in_top_1_percent":false,"is_in_top_10_percent":true},"cited_by_percentile_year":{"min":98,"max":99},"biblio":{"volume":"22","issue":"5","first_page":"5090","last_page":"5107"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.995199978351593,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9894000291824341,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.9642999768257141,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.871256947517395},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.7691574096679688},{"id":"https://openalex.org/keywords/computer-security","display_name":"Computer security","score":0.5793108940124512},{"id":"https://openalex.org/keywords/detector","display_name":"Detector","score":0.48061102628707886},{"id":"https://openalex.org/keywords/intrusion-detection-system","display_name":"Intrusion detection system","score":0.4674226939678192},{"id":"https://openalex.org/keywords/computer-network","display_name":"Computer network","score":0.42852532863616943},{"id":"https://openalex.org/keywords/intrusion","display_name":"Intrusion","score":0.4149465560913086},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.2204093039035797},{"id":"https://openalex.org/keywords/telecommunications","display_name":"Telecommunications","score":0.1364532709121704},{"id":"https://openalex.org/keywords/geology","display_name":"Geology","score":0.06865823268890381}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.871256947517395},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7691574096679688},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.5793108940124512},{"id":"https://openalex.org/C94915269","wikidata":"https://www.wikidata.org/wiki/Q1834857","display_name":"Detector","level":2,"score":0.48061102628707886},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.4674226939678192},{"id":"https://openalex.org/C31258907","wikidata":"https://www.wikidata.org/wiki/Q1301371","display_name":"Computer network","level":1,"score":0.42852532863616943},{"id":"https://openalex.org/C158251709","wikidata":"https://www.wikidata.org/wiki/Q354025","display_name":"Intrusion","level":2,"score":0.4149465560913086},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.2204093039035797},{"id":"https://openalex.org/C76155785","wikidata":"https://www.wikidata.org/wiki/Q418","display_name":"Telecommunications","level":1,"score":0.1364532709121704},{"id":"https://openalex.org/C127313418","wikidata":"https://www.wikidata.org/wiki/Q1069","display_name":"Geology","level":0,"score":0.06865823268890381},{"id":"https://openalex.org/C17409809","wikidata":"https://www.wikidata.org/wiki/Q161764","display_name":"Geochemistry","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2025.3560486","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2025.3560486","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":51,"referenced_works":["https://openalex.org/W1504161274","https://openalex.org/W2026258420","https://openalex.org/W2046163812","https://openalex.org/W2543927648","https://openalex.org/W2606462007","https://openalex.org/W2746600820","https://openalex.org/W2774644650","https://openalex.org/W2783047817","https://openalex.org/W2789828921","https://openalex.org/W2853623529","https://openalex.org/W2889836475","https://openalex.org/W2902314211","https://openalex.org/W2908403421","https://openalex.org/W2915004662","https://openalex.org/W2919493784","https://openalex.org/W2923778952","https://openalex.org/W2926701059","https://openalex.org/W2945748508","https://openalex.org/W2952433728","https://openalex.org/W2959169310","https://openalex.org/W2962061624","https://openalex.org/W2963003451","https://openalex.org/W2963197901","https://openalex.org/W2963299894","https://openalex.org/W2963470657","https://openalex.org/W2984717769","https://openalex.org/W2988157455","https://openalex.org/W3005217928","https://openalex.org/W3006008420","https://openalex.org/W3009091629","https://openalex.org/W3014732532","https://openalex.org/W3015625436","https://openalex.org/W3016010691","https://openalex.org/W3036847733","https://openalex.org/W3040389479","https://openalex.org/W3111088413","https://openalex.org/W3113708632","https://openalex.org/W3115360974","https://openalex.org/W3165740926","https://openalex.org/W3173170122","https://openalex.org/W3180062783","https://openalex.org/W3198511875","https://openalex.org/W4308632271","https://openalex.org/W4309346044","https://openalex.org/W4312884727","https://openalex.org/W4313141826","https://openalex.org/W4319866759","https://openalex.org/W4385412220","https://openalex.org/W4385412351","https://openalex.org/W4396855777","https://openalex.org/W4401816847"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W4285226279","https://openalex.org/W2133389611"],"abstract_inverted_index":{"Despite":[0],"being":[1],"widely":[2],"used":[3],"in":[4,32],"network":[5],"intrusion":[6],"detection":[7],"systems":[8],"(NIDSs),":[9],"machine":[10,255],"learning":[11,256],"(ML)":[12],"has":[13],"proven":[14],"to":[15,18,62,114,125,175,193,241,257],"be":[16],"vulnerable":[17],"adversarial":[19,24,65,81,122,137,151,177,180,198],"attacks.":[20],"White-box":[21],"and":[22,72,84,129,139,172,179,203,225,238],"black-box":[23,52],"ML":[25,127,158,227],"attacks":[26,37,53],"of":[27,46,77,136],"NIDS":[28],"have":[29,43],"been":[30],"explored":[31],"several":[33,223],"studies.":[34],"However,":[35],"white-box":[36],"unrealistically":[38],"assume":[39],"that":[40,216],"the":[41,47,63,134,156,195,208,230],"attackers":[42],"full":[44],"knowledge":[45],"target":[48],"NIDSs.":[49,143],"Meanwhile,":[50,247],"existing":[51],"can":[54,87],"not":[55],"achieve":[56,115],"high":[57],"attack":[58,152],"success":[59],"rate":[60],"due":[61],"weak":[64],"transferability":[66,141,202],"between":[67],"models":[68],"(e.g.,":[69],"neural":[70],"networks":[71],"tree":[73],"models).":[74],"Additionally,":[75],"neither":[76],"them":[78],"explains":[79],"why":[80,85],"examples":[82,123,138,178],"exist":[83],"they":[86],"transfer":[88],"across":[89,155],"models.":[90],"To":[91],"address":[92],"these":[93],"challenges,":[94],"this":[95,183],"paper":[96],"introduces":[97],"ETA,":[98],"an":[99,187],"<underline":[100,103,108],"xmlns:mml=\"http://www.w3.org/1998/Math/MathML\"":[101,104,109],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">E</u>xplainable":[102],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">T</u>ransfer-based":[105],"Black-Box":[106],"Adversarial":[107],"xmlns:xlink=\"http://www.w3.org/1999/xlink\">A</u>ttack":[110],"framework.":[111],"ETA":[112],"aims":[113],"two":[116,239,250],"primary":[117],"objectives:":[118],"1)":[119],"create":[120],"transferable":[121],"applicable":[124,154],"various":[126],"detectors":[128],"2)":[130],"provide":[131,147],"insights":[132],"into":[133],"existence":[135],"their":[140],"within":[142],"Specifically,":[144],"we":[145,162,185,248],"first":[146],"a":[148,164],"general":[149],"transfer-based":[150],"method":[153,192,218],"entire":[157],"space.":[159],"Following":[160],"that,":[161],"exploit":[163],"unique":[165],"insight":[166],"based":[167],"on":[168,211],"cooperative":[169],"game":[170],"theory":[171],"perturbation":[173],"interpretations":[174],"explain":[176],"transferability.":[181],"On":[182],"basis,":[184],"propose":[186],"Important-Sensitive":[188],"Feature":[189],"Selection":[190],"(ISFS)":[191],"guide":[194],"search":[196],"for":[197],"examples,":[199],"achieving":[200],"stronger":[201],"ensuring":[204],"traffic-space":[205],"constraints.":[206],"Finally,":[207],"experimental":[209],"results":[210],"three":[212,235],"NIDSs":[213,258],"datasets":[214],"show":[215],"our":[217,243],"performs":[219],"significantly":[220],"effectively":[221],"against":[222],"classical":[224],"state-of-the-art":[226],"classifiers,":[228],"outperforming":[229],"latest":[231],"baselines.":[232],"We":[233],"conduct":[234],"interpretation":[236,244],"experiments":[237],"cases":[240],"verify":[242],"method's":[245],"correctness.":[246],"uncover":[249],"major":[251],"misconceptions":[252],"about":[253],"applying":[254],"systems.":[259]},"counts_by_year":[{"year":2026,"cited_by_count":5},{"year":2025,"cited_by_count":8}],"updated_date":"2026-07-18T07:39:51.176621","created_date":"2025-10-10T00:00:00"}