{"id":"https://openalex.org/W4398133954","doi":"https://doi.org/10.1145/3626205.3659146","title":"SRI: A Simple Rule Induction Method for improving resiliency of DNN based IDS against adversarial and zero-day attacks","display_name":"SRI: A Simple Rule Induction Method for improving resiliency of DNN based IDS against adversarial and zero-day attacks","publication_year":2024,"publication_date":"2024-05-20","ids":{"openalex":"https://openalex.org/W4398133954","doi":"https://doi.org/10.1145/3626205.3659146"},"language":"en","primary_location":{"id":"doi:10.1145/3626205.3659146","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3626205.3659146","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Cyber-Physical System Security Workshop","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5042259545","display_name":"Anjanee Kumar","orcid":"https://orcid.org/0000-0001-5874-3892"},"institutions":[{"id":"https://openalex.org/I38335241","display_name":"National Institute of Technology Raipur","ror":"https://ror.org/02y553197","country_code":"IN","type":"education","lineage":["https://openalex.org/I38335241"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Anjanee Kumar","raw_affiliation_strings":["National Institute of Technology, Raipur, Raipur, Chhattisgarh, India"],"raw_orcid":"https://orcid.org/0000-0001-5874-3892","affiliations":[{"raw_affiliation_string":"National Institute of Technology, Raipur, Raipur, Chhattisgarh, India","institution_ids":["https://openalex.org/I38335241"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5029544119","display_name":"Tanmoy Kanti Das","orcid":"https://orcid.org/0000-0002-0650-0247"},"institutions":[{"id":"https://openalex.org/I38335241","display_name":"National Institute of Technology Raipur","ror":"https://ror.org/02y553197","country_code":"IN","type":"education","lineage":["https://openalex.org/I38335241"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Tanmoy Kanti Das","raw_affiliation_strings":["National Institute of Technology, Raipur, Raipur, India"],"raw_orcid":"https://orcid.org/0000-0002-0650-0247","affiliations":[{"raw_affiliation_string":"National Institute of Technology, Raipur, Raipur, India","institution_ids":["https://openalex.org/I38335241"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5102000328","display_name":"Rajneesh Kumar Pandey","orcid":"https://orcid.org/0000-0003-0376-5976"},"institutions":[{"id":"https://openalex.org/I38335241","display_name":"National Institute of Technology Raipur","ror":"https://ror.org/02y553197","country_code":"IN","type":"education","lineage":["https://openalex.org/I38335241"]}],"countries":["IN"],"is_corresponding":false,"raw_author_name":"Rajneesh Kumar Pandey","raw_affiliation_strings":["National Institute of Technology, Raipur, Raipur, India"],"raw_orcid":"https://orcid.org/0000-0003-0376-5976","affiliations":[{"raw_affiliation_string":"National Institute of Technology, Raipur, Raipur, India","institution_ids":["https://openalex.org/I38335241"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":1,"corresponding_author_ids":[],"corresponding_institution_ids":["https://openalex.org/I38335241"],"apc_list":null,"apc_paid":null,"fwci":2.234,"has_fulltext":false,"cited_by_count":4,"citation_normalized_percentile":{"value":0.8668377,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":{"min":90,"max":97},"biblio":{"volume":null,"issue":null,"first_page":"24","last_page":"35"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.9994999766349792,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10917","display_name":"Smart Grid Security and Resilience","score":0.9991999864578247,"subfield":{"id":"https://openalex.org/subfields/2207","display_name":"Control and Systems Engineering"},"field":{"id":"https://openalex.org/fields/22","display_name":"Engineering"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.9944999814033508,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7244942784309387},{"id":"https://openalex.org/keywords/simple","display_name":"Simple (philosophy)","score":0.694738507270813},{"id":"https://openalex.org/keywords/zero","display_name":"Zero (linguistics)","score":0.6624416708946228},{"id":"https://openalex.org/keywords/computer-science","display_name":"Computer science","score":0.577815055847168},{"id":"https://openalex.org/keywords/rule-based-system","display_name":"Rule-based system","score":0.41805875301361084},{"id":"https://openalex.org/keywords/artificial-intelligence","display_name":"Artificial intelligence","score":0.41012075543403625},{"id":"https://openalex.org/keywords/algorithm","display_name":"Algorithm","score":0.34148108959198},{"id":"https://openalex.org/keywords/mathematical-optimization","display_name":"Mathematical optimization","score":0.3374139368534088},{"id":"https://openalex.org/keywords/mathematics","display_name":"Mathematics","score":0.3001793324947357}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7244942784309387},{"id":"https://openalex.org/C2780586882","wikidata":"https://www.wikidata.org/wiki/Q7520643","display_name":"Simple (philosophy)","level":2,"score":0.694738507270813},{"id":"https://openalex.org/C2780813799","wikidata":"https://www.wikidata.org/wiki/Q3274237","display_name":"Zero (linguistics)","level":2,"score":0.6624416708946228},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.577815055847168},{"id":"https://openalex.org/C149271511","wikidata":"https://www.wikidata.org/wiki/Q1417149","display_name":"Rule-based system","level":2,"score":0.41805875301361084},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.41012075543403625},{"id":"https://openalex.org/C11413529","wikidata":"https://www.wikidata.org/wiki/Q8366","display_name":"Algorithm","level":1,"score":0.34148108959198},{"id":"https://openalex.org/C126255220","wikidata":"https://www.wikidata.org/wiki/Q141495","display_name":"Mathematical optimization","level":1,"score":0.3374139368534088},{"id":"https://openalex.org/C33923547","wikidata":"https://www.wikidata.org/wiki/Q395","display_name":"Mathematics","level":0,"score":0.3001793324947357},{"id":"https://openalex.org/C41895202","wikidata":"https://www.wikidata.org/wiki/Q8162","display_name":"Linguistics","level":1,"score":0.0},{"id":"https://openalex.org/C138885662","wikidata":"https://www.wikidata.org/wiki/Q5891","display_name":"Philosophy","level":0,"score":0.0},{"id":"https://openalex.org/C111472728","wikidata":"https://www.wikidata.org/wiki/Q9471","display_name":"Epistemology","level":1,"score":0.0}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3626205.3659146","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3626205.3659146","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 10th ACM Cyber-Physical System Security Workshop","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[{"display_name":"Climate action","score":0.7200000286102295,"id":"https://metadata.un.org/sdg/13"}],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":44,"referenced_works":["https://openalex.org/W1539670134","https://openalex.org/W1585743408","https://openalex.org/W1594031697","https://openalex.org/W1680757476","https://openalex.org/W1975635104","https://openalex.org/W2033632878","https://openalex.org/W2039148409","https://openalex.org/W2056451850","https://openalex.org/W2064111006","https://openalex.org/W2100110464","https://openalex.org/W2108906138","https://openalex.org/W2247946424","https://openalex.org/W2281798379","https://openalex.org/W2603766943","https://openalex.org/W2608911009","https://openalex.org/W2755148105","https://openalex.org/W2765683033","https://openalex.org/W2804769055","https://openalex.org/W2806797541","https://openalex.org/W2896370767","https://openalex.org/W2911200746","https://openalex.org/W2942819526","https://openalex.org/W2959364614","https://openalex.org/W2963166639","https://openalex.org/W2968405138","https://openalex.org/W2995984855","https://openalex.org/W2997719468","https://openalex.org/W2999058564","https://openalex.org/W3007679991","https://openalex.org/W3035727237","https://openalex.org/W3086579950","https://openalex.org/W3098881644","https://openalex.org/W3099971460","https://openalex.org/W3164160032","https://openalex.org/W3165880105","https://openalex.org/W3169450514","https://openalex.org/W3184127157","https://openalex.org/W3194413837","https://openalex.org/W4220716320","https://openalex.org/W4225463226","https://openalex.org/W4293801546","https://openalex.org/W4300824008","https://openalex.org/W4382119200","https://openalex.org/W4385075914"],"related_works":["https://openalex.org/W2502115930","https://openalex.org/W2482350142","https://openalex.org/W4246396837","https://openalex.org/W3126451824","https://openalex.org/W1561927205","https://openalex.org/W3191453585","https://openalex.org/W4297672492","https://openalex.org/W4310988119","https://openalex.org/W4285226279","https://openalex.org/W4288019534"],"abstract_inverted_index":{"Adversarial":[0],"machine":[1],"learning":[2],"(ML)":[3],"has":[4,153],"demonstrated":[5,164],"vulnerabilities":[6,21],"of":[7,43,68,71,95,102,184],"neural":[8,25,50,72,126],"network":[9,26,73],"methods":[10,27],"against":[11,49,135,156],"well-crafted":[12],"perturbations":[13],"when":[14,24],"added":[15],"to":[16,40,61,115,161,180,192],"perfectly":[17],"acceptable":[18],"samples.":[19,147],"These":[20],"get":[22],"exacerbated":[23],"are":[28,59],"deployed":[29],"as":[30,56,85,163],"anomaly":[31],"or":[32],"intrusion":[33,52],"detectors":[34,142],"in":[35,99,172],"cyber-physical":[36],"systems":[37,54],"(CPS).":[38],"Due":[39],"this,":[41],"mounting":[42],"zero-day":[44,62],"attacks":[45],"became":[46],"much":[47],"easier":[48],"network-based":[51,127],"detection":[53,122,188],"(IDS)":[55],"adversarial":[57,117,137,146,157,176],"samples":[58,118,158],"similar":[60],"attack":[63,187],"vectors.":[64],"To":[65,129],"alleviate":[66],"some":[67],"these":[69],"problems":[70],"(NN)":[74],"based":[75],"IDSs,":[76],"we":[77,139],"propose":[78],"a":[79,124,149],"new":[80],"rule":[81,87],"induction":[82,88],"method,":[83],"known":[84],"simple":[86],"(SRI),":[89],"for":[90],"classification.":[91],"SRI":[92],"is":[93,178],"capable":[94],"extracting":[96],"control":[97,111],"logic":[98,112],"the":[100,131,141,182],"form":[101],"threshold-based":[103],"rules":[104],"from":[105,159,190],"CPS's":[106],"historical":[107],"operational":[108],"data.":[109],"Later,":[110],"was":[113,170],"utilized":[114],"generate":[116],"that":[119,175],"could":[120],"evade":[121],"by":[123,165],"baseline":[125],"IDS.":[128],"improve":[130,181],"NN-based":[132],"detector's":[133],"resiliency":[134],"such":[136],"attacks,":[138],"retrain":[140],"with":[143],"previously":[144],"generated":[145],"In":[148],"specific":[150],"case,":[151],"retraining":[152],"improved":[154],"accuracy":[155],"9%":[160],"99%,":[162],"our":[166,173],"experiments.":[167],"Moreover,":[168],"it":[169],"found":[171],"experiments":[174],"training":[177],"able":[179],"F1_Score":[183],"zero":[185],"day":[186],"method":[189],"0.06":[191],"0.53.":[193]},"counts_by_year":[{"year":2025,"cited_by_count":3},{"year":2024,"cited_by_count":1}],"updated_date":"2026-07-29T14:22:42.915294","created_date":"2025-10-10T00:00:00"}
