{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,7,7]],"date-time":"2026-07-07T15:46:08Z","timestamp":1783439168467,"version":"3.54.6"},"publisher-location":"Cham","reference-count":44,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031965890","type":"print"},{"value":"9783031965906","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-96590-6_19","type":"book-chapter","created":{"date-parts":[[2025,6,23]],"date-time":"2025-06-23T04:58:28Z","timestamp":1750654708000},"page":"351-370","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":4,"title":["Diffusion-Based Adversarial Purification for\u00a0Intrusion Detection"],"prefix":"10.1007","author":[{"given":"Mohamed Amine","family":"Merzouk","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Erwan","family":"Beurier","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Reda","family":"Yaich","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Nora","family":"Boulahia-Cuppens","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Fr\u00e9d\u00e9ric","family":"Cuppens","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Foutse","family":"Khomh","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2025,6,24]]},"reference":[{"key":"19_CR1","doi-asserted-by":"crossref","unstructured":"Abdelaty, M., Scott-Hayward, S., Doriguzzi-Corin, R., Siracusa, D.: GADoT: GAN-based adversarial training for robust DDoS attack detection. In: IEEE Conference on Communications and Network Security (CNS) (2021)","DOI":"10.1109\/CNS53000.2021.9705040"},{"key":"19_CR2","doi-asserted-by":"crossref","unstructured":"Aldahdooh, A., Hamidouche, W., Fezza, S.A., D\u00e9forges, O.: Adversarial example detection for DNN models: A review and experimental comparison. Artif. Intell. Rev. (2022)","DOI":"10.1007\/s10462-021-10125-w"},{"key":"19_CR3","doi-asserted-by":"crossref","unstructured":"Apruzzese, G., Andreolini, M., Ferretti, L., Marchetti, M., Colajanni, M.: Modeling realistic adversarial attacks against network intrusion detection systems. Digital Threats (2022)","DOI":"10.1145\/3469659"},{"key":"19_CR4","doi-asserted-by":"crossref","unstructured":"Buczak, A.L., Guven, E.: A survey of data mining and machine learning methods for cyber security intrusion detection. IEEE Commun. Surv. Tutorials (2016)","DOI":"10.1109\/COMST.2015.2494502"},{"key":"19_CR5","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Adversarial examples are not easily detected: bypassing ten detection methods. In: ACM Workshop on Artificial Intelligence and Security (2017)","DOI":"10.1145\/3128572.3140444"},{"key":"19_CR6","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: IEEE Symposium on Security and Privacy (SP) (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"19_CR7","unstructured":"Goodfellow, I.J., et al.: Generative Adversarial Nets. In: Advances in Neural Information Processing Systems (2014)"},{"key":"19_CR8","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: International Conference on Learning Representations (2015)"},{"key":"19_CR9","doi-asserted-by":"crossref","unstructured":"Han, F., Ye, P., She, C., Duan, S., Wang, L., Liu, D.: Mmid-bench: a comprehensive benchmark for multi-domain multi-category intrusion detection. IEEE Trans. Intell. Veh. (2024)","DOI":"10.1109\/TIV.2024.3367895"},{"key":"19_CR10","doi-asserted-by":"crossref","unstructured":"He, K., Kim, D.D., Asghar, M.R.: Adversarial machine learning for network intrusion detection systems: a comprehensive survey. IEEE Commun. Surv. Tutorials (2023)","DOI":"10.1109\/COMST.2022.3233793"},{"key":"19_CR11","unstructured":"Ho, J., Jain, A., Abbeel, P.: Denoising diffusion probabilistic models. In: Advances in Neural Information Processing Systems (2020)"},{"key":"19_CR12","doi-asserted-by":"crossref","unstructured":"Javaid, A., Niyaz, Q., Sun, W., Alam, M.: A deep learning approach for network intrusion detection system. EAI Endorsed Trans. Secur. Saf. (2016)","DOI":"10.4108\/eai.3-12-2015.2262516"},{"key":"19_CR13","doi-asserted-by":"crossref","unstructured":"Kang, M., Song, D., Li, B.: Diffattack: evasion attacks against diffusion-based adversarial purification. In: Advances in Neural Information Processing Systems (2023)","DOI":"10.52202\/075280-3234"},{"key":"19_CR14","unstructured":"Kingma, D.P., Welling, M.: Auto-encoding variational bayes (2022). arXiv:1312.6114"},{"key":"19_CR15","doi-asserted-by":"crossref","unstructured":"Kurakin, A., Goodfellow, I.J., Bengio, S.: Adversarial examples in the physical world. In: International Conference on Learning Representations (2017)","DOI":"10.1201\/9781351251389-8"},{"key":"19_CR16","doi-asserted-by":"crossref","unstructured":"Lin, G., Tao, Z., Zhang, J., Tanaka, T., Zhao, Q.: Robust diffusion models for adversarial purification (2024). arXiv:2403.16067","DOI":"10.1016\/j.neunet.2025.107705"},{"key":"19_CR17","doi-asserted-by":"crossref","unstructured":"Liu, H., Lang, B.: Machine learning and deep learning methods for intrusion detection systems: a survey. Appl. Sci. (2019)","DOI":"10.3390\/app9204396"},{"key":"19_CR18","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations (2018)"},{"key":"19_CR19","doi-asserted-by":"publisher","unstructured":"Merzouk, M.A., Cuppens, F., Boulahia-Cuppens, N., Yaich, R.: Investigating the practicality of adversarial evasion attacks on network intrusion detection. Ann. Telecommun. 1\u201313 (2022). https:\/\/doi.org\/10.1007\/s12243-022-00910-1","DOI":"10.1007\/s12243-022-00910-1"},{"key":"19_CR20","doi-asserted-by":"crossref","unstructured":"Moosavi-Dezfooli, S.M., Fawzi, A., Frossard, P.: Deepfool: a simple and accurate method to fool deep neural networks. In: IEEE Conference on Computer Vision and Pattern Recognition (2016)","DOI":"10.1109\/CVPR.2016.282"},{"key":"19_CR21","doi-asserted-by":"crossref","unstructured":"Moustafa, N., Slay, J.: Unsw-nb15: a comprehensive data set for network intrusion detection systems (unsw-nb15 network data set). In: 2015 Military Communications and Information Systems Conference (MilCIS) (2015)","DOI":"10.1109\/MilCIS.2015.7348942"},{"key":"19_CR22","unstructured":"Nie, W., Guo, B., Huang, Y., Xiao, C., Vahdat, A., Anandkumar, A.: Diffusion models for adversarial purification. In: International Conference on Machine Learning (2022)"},{"key":"19_CR23","doi-asserted-by":"crossref","unstructured":"Papernot, N., McDaniel, P., Jha, S., Fredrikson, M., Celik, Z.B., Swami, A.: The limitations of deep learning in adversarial settings. In: IEEE European Symposium on Security and Privacy (EuroS P) (2016)","DOI":"10.1109\/EuroSP.2016.36"},{"key":"19_CR24","doi-asserted-by":"crossref","unstructured":"Ring, M., Wunderlich, S., Scheuring, D., Landes, D., Hotho, A.: A survey of network-based intrusion detection data sets. Comput. Secur. (2019)","DOI":"10.1016\/j.cose.2019.06.005"},{"key":"19_CR25","doi-asserted-by":"crossref","unstructured":"Sharafaldin, I., Lashkari, A.H., Ghorbani, A.A.: Toward generating a new intrusion detection dataset and intrusion traffic characterization. In: 4th International Conference on Information Systems Security and Privacy (2018)","DOI":"10.5220\/0006639801080116"},{"key":"19_CR26","unstructured":"Shi, Y., Du, M., Wu, X., Guan, Z., Sun, J., Liu, N.: Black-box backdoor defense via zero-shot image purification. In: Advances in Neural Information Processing Systems (2023)"},{"key":"19_CR27","unstructured":"Sohl-Dickstein, J., Weiss, E., Maheswaranathan, N., Ganguli, S.: Deep unsupervised learning using nonequilibrium thermodynamics. In: International Conference on Machine Learning (2015)"},{"key":"19_CR28","doi-asserted-by":"crossref","unstructured":"Sohn, I.: Deep belief network based intrusion detection techniques: a survey. Expert Syst. Appl. (2021)","DOI":"10.1016\/j.eswa.2020.114170"},{"key":"19_CR29","unstructured":"Song, Y., Kim, T., Nowozin, S., Ermon, S., Kushman, N.: Pixeldefend: leveraging generative models to understand and defend against adversarial examples (2017). arXiv:1710.10766"},{"key":"19_CR30","unstructured":"Song, Y., Sohl-Dickstein, J., Kingma, D.P., Kumar, A., Ermon, S., Poole, B.: Score-based generative modeling through stochastic differential equations. In: International Conference on Learning Representations (2021)"},{"key":"19_CR31","doi-asserted-by":"crossref","unstructured":"Srinivasan, V., Rohrer, C., Marban, A., M\u00fcller, K.R., Samek, W., Nakajima, S.: Robustifying models against adversarial attacks by langevin dynamics. Neural Netw. (2021)","DOI":"10.1016\/j.neunet.2020.12.024"},{"key":"19_CR32","unstructured":"Szegedy, C., et al.: Intriguing properties of neural networks. In: International Conference on Learning Representations (2014)"},{"key":"19_CR33","doi-asserted-by":"crossref","unstructured":"Tang, B., Lu, Y., Li, Q., Bai, Y., Yu, J., Yu, X.: A diffusion model based on network intrusion detection method for industrial cyber-physical systems. Sensors (2023)","DOI":"10.3390\/s23031141"},{"key":"19_CR34","doi-asserted-by":"crossref","unstructured":"Tavallaee, M., Bagheri, E., Lu, W., Ghorbani, A.A.: A detailed analysis of the KDD cup 99 data set. In: IEEE Symposium on Computational Intelligence for Security and Defense Applications (2009)","DOI":"10.1109\/CISDA.2009.5356528"},{"key":"19_CR35","doi-asserted-by":"crossref","unstructured":"Usama, M., Asim, M., Latif, S., Qadir, J., Al-Fuqaha, A.: Generative adversarial networks for launching and thwarting adversarial attacks on network intrusion detection systems. In: 15th International Wireless Communications & Mobile Computing Conference (IWCMC) (2019)","DOI":"10.1109\/IWCMC.2019.8766353"},{"key":"19_CR36","doi-asserted-by":"crossref","unstructured":"Wang, J., Pan, J., AlQerm, I., Liu, Y.: Def-ids: An ensemble defense mechanism against adversarial attacks for deep learning-based network intrusion detection. In: 2021 International Conference on Computer Communications and Networks (ICCCN) (2021)","DOI":"10.1109\/ICCCN52240.2021.9522215"},{"key":"19_CR37","unstructured":"Wang, J., Lyu, Z., Lin, D., Dai, B., Fu, H.: Guided diffusion model for adversarial purification (2022). arXiv:2205.14969"},{"key":"19_CR38","doi-asserted-by":"crossref","unstructured":"Wang, Y., Ding, J., He, X., Wei, Q., Yuan, S., Zhang, J.: Intrusion detection method based on denoising diffusion probabilistic models for UAV networks. Mob. Netw. Appl. (2023)","DOI":"10.1007\/s11036-023-02222-7"},{"key":"19_CR39","unstructured":"Wu, Q., Ye, H., Gu, Y.: Guided diffusion model for adversarial purification from random noise (2022). arXiv:2206.10875"},{"key":"19_CR40","unstructured":"Yang, C., Wang, T., Yan, X.: Ddmt: denoising diffusion mask transformer models for multivariate time series anomaly detection (2023). arXiv:2310.08800"},{"key":"19_CR41","doi-asserted-by":"crossref","unstructured":"Yuan, X., He, P., Zhu, Q., Li, X.: Adversarial examples: attacks and defenses for deep learning. IEEE Trans. Neural Netw. Learn. Syst. (2019)","DOI":"10.1109\/TNNLS.2018.2886017"},{"key":"19_CR42","doi-asserted-by":"crossref","unstructured":"Zhang, C., Costa-P\u00e9rez, X., Patras, P.: Adversarial attacks against deep learning-based network intrusion detection systems and defense mechanisms. IEEE\/ACM Trans. Netw. (2022)","DOI":"10.1109\/TNET.2021.3137084"},{"key":"19_CR43","doi-asserted-by":"crossref","unstructured":"Zhang, K., Zhou, H., Zhang, J., Huang, Q., Zhang, W., Yu, N.: Ada3diff: defending against 3d adversarial point clouds via adaptive diffusion. In: ACM International Conference on Multimedia (2023)","DOI":"10.1145\/3581783.3612018"},{"key":"19_CR44","doi-asserted-by":"crossref","unstructured":"Zhang, W., Chen, Z., Chen, D., Li, J., Pan, Y.: Did-ids: a novel diffusion-based imbalanced data intrusion detection system. In: IEEE International Conference on Information, Communication and Networks (ICICN) (2023)","DOI":"10.1109\/ICICN59530.2023.10392308"}],"container-title":["Lecture Notes in Computer Science","Data and Applications Security and Privacy XXXIX"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-96590-6_19","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,5,9]],"date-time":"2026-05-09T16:22:26Z","timestamp":1778343746000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-96590-6_19"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031965890","9783031965906"],"references-count":44,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-96590-6_19","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"24 June 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"DBSec","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"IFIP Annual Conference on Data and Applications Security and Privacy","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Gj\u00f8vik","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Norway","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"23 June 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"24 June 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"39","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"dbsec2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.ntnu.edu\/web\/dbsec2025\/dbsec2025","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}