Black-box Adversarial Machine Learning Attack on Network Traffic Classification
Muhammad Usamaa, Adnan Qayyuma, Junaid Qadira, Ala Al‐Fuqahab
- aInformation Technology University, Punjab, Pakistan
- bHamad Bin Khalifa University, Doha, Qatar
Papers open inside SciRah from the original publisher or repository; SciRah never hosts them.
Abstract
Deep machine learning techniques have shown promising results in network traffic classification, however, the robustness of these techniques under adversarial threats is still in question. Deep machine learning models are found vulnerable to small carefully crafted adversarial perturbations posing a major question on the performance of deep machine learning techniques. In this paper, we propose a black-box adversarial attack on network traffic classification. The proposed attack successfully evades deep machine learning-based classifiers which highlights the potential security threat of using deep machine learning techniques to realize autonomous networks.

