A GAN-Based Framework for Robust DDoS Attack Detection

2026-09-16

AI Summary

本文针对DDoS攻击检测问题，提出了一种结合生成对抗网络和高级机器学习模型的鲁棒框架，通过生成合成对抗流量来增强模型对未知攻击的防御能力。

Abstract

The availability and consistency of online services remain vulnerable due to Distributed Denial of Service (DDoS) attacks. These attacks are evolving by adopting more complex strategies to evade traditional network security systems. Despite the effectiveness of machine learning models in detecting DDoS traffic, targeted adversarial attacks can degrade their classification accuracy. This work proposes a robust detection framework that integrates generative adversarial modelling with advanced machine learning models. We trained Random Forests, Deep Neural Ensembles, and Transformer-based models using the CICDDoS2019 dataset to establish the frameworks baseline performance. To enhance the models defensive capacity, we generated synthetic adversarial flows that simulate potential evasion attempts and adversarial traffic using a Wasserstein Generative Adversarial Network with Gradient Penalty (WGAN-GP). Then, we combined the generated traffic with benign and malicious traffic to construct hybrid datasets to train the models to learn more generalizable decision boundaries. The experimental results indicate that the proposed methodology significantly enhances detection accuracy and resilience, especially against unseen adversarial traffic. We also tested the designed framework using real-world generated traffic, which demonstrates its capability in practical settings. The scalable and efficient solution against adversarial DDoS attacks, introduced in this work, paves the way towards more resilient and adaptive network defense systems that combine generative adversarial augmentation with recent advances in learning models.

Problem

• Distributed Denial of Service (DDoS) attacks
• adversarial attacks
• machine learning models
• classification accuracy
• network security

Innovation

• Generative Adversarial Network (GAN)
• Wasserstein GAN-GP
• Adversarial Traffic
• Robust DDoS Detection
• Hybrid Dataset