通信学报2025，Vol.46Issue(8)：53-65,13.DOI:10.11959/j.issn.1000-436x.2025140
面向主机入侵检测的多视图对抗攻击防御方法
Multi-view adversarial attack defending method for host intrusion detection
摘要
Abstract
Host-based intrusion detection(HID)aims to identify attack behaviors through the analysis of host logs.Aim-ing at the problem that the graph neural network model was vulnerable to adversarial attacks in host intrusion detecti on,a multi-view adversarial defense method was proposed.By constructing dual views of structure and behavior to integrate multi-dimensional features,screening low-transferability complementary model pairs,and designing a hierarchical vot-ing mechanism to integrate heterogeneous model decisions,the robustness of detection was enhanced.The efficacy of the proposed method was evaluated using authentic host kernel log datasets.The experimental results demonstrate that the method exhibits superior performance compared to existing adversarial attack defense methods.Specifically,a mali-cious node recall rate exceeding 80%is achieved under typical adversarial attacks,representing a 23%increase over ex-isting single-model defense methods.Additionally,the false alarm rate is maintained below 10%,substantiating the effi-cacy of the transferability analysis-based fusion strategy for robustness enhancement.关键词
对抗攻击/主机入侵检测/溯源图/多模型集成Key words
adversarial attack/host intrusion detection/provenance graph/multi-model ensemble分类
信息技术与安全科学引用本文复制引用
王飞,钱可涵,吕明琪,朱添田,陈鸿龙..面向主机入侵检测的多视图对抗攻击防御方法[J].通信学报,2025,46(8):53-65,13.基金项目
国家自然科学基金资助项目(No.62372410,No.62002324) （No.62372410,No.62002324）
浙江省自然科学基金资助项目(No.LZ23F020011) （No.LZ23F020011）
杭州市重点研发计划基金资助项目(No.2024SZD1A11) （No.2024SZD1A11）
山东省泰山学者青年专家基金资助项目(No.tsqn202312133) （No.tsqn202312133）
山东省优秀青年科学基金资助项目(No.ZR2022YQ61)The National Natural Science Foundation of China(No.62372410,No.62002324),The Natural Science Founda-tion of Zhejiang Province(No.LZ23F020011),The Key Research and Development Program of Hangzhou(No.2024SZD1A11),The Shandong Provincial Taishan Scholar Program(No.tsqn202312133),The Shandong Provincial Natural Science Foundation(No.ZR2022YQ61) （No.ZR2022YQ61）
