Residual-guided hybrid framework for adversarially robust deep learning-based network ...

The growing sophistication of cyber threats and adversarial attacks poses critical challenges to the security and robustness of machine learning models deployed in real-world systems. While traditional deep learning architectures excel in clean data classification, they often fail under adversarial perturbations, exposing vulnerabilities in sensitive domains such as healthcare, finance, and industrial control. In this paper, we introduce a novel hybrid adversarially-trained deep learning framework that integrates reinforcement learning-inspired robustness adaptation with knowledge-driven regularization to achieve improved resilience against fast gradient sign method (FGSM) and projected gradient descent (PGD) attacks. Our approach simultaneously optimizes clean accuracy and adversarial robustness by balancing cross-entropy and adversarial loss components, while monitoring calibration error, gradient dynamics, and generalization gap to ensure stable convergence. Extensive experiments on reconnaissance, shellcode, and worms datasets demonstrate that the proposed model achieves up to 97.88% accuracy on clean data and maintains 84.9% accuracy under FGSM and 81.75% under PGD attacks, outperforming convolutional neural network (CNN) and long short-term memory (LSTM) baselines by more than 6-10 percentage points in adversarial robustness. Furthermore, the training curves reveal consistent improvements in convergence stability, runtime efficiency, gradient norm decay, and a 30% reduction in expected calibration error, validating the scalability of the framework. This work contributes not only a novel adversarial defense paradigm but also provides insights into the trade-offs between robustness, efficiency, and generalization.

Copyright:

Conflict of interest statement

The authors have declared that no competing interests exist.

Sanjalawe Y, Fraihat S, Al-E’mari S, Makhadmeh SN. A review of artificial intelligence-based intrusion detection in industrial internet of things. Discov Internet Things. 2026;6(1). doi: 10.1007/s43926-026-00285-y - DOI

Sanjalawe Y, Fraihat S, Al-E’mari S, Makhadmeh SN. A review of artificial intelligence-based intrusion detection in industrial internet of things. Discov Internet Things. 2026;6(1). doi: 10.1007/s43926-026-00285-y - DOI

Yerlikaya FA, Bahtiyar Ş. A survey of adversarial attacks on machine learning. Neurocomputing. 2026;670:132573. doi: 10.1016/j.neucom.2025.132573 - DOI

Yerlikaya FA, Bahtiyar Ş. A survey of adversarial attacks on machine learning. Neurocomputing. 2026;670:132573. doi: 10.1016/j.neucom.2025.132573 - DOI

Ren K, Zheng T, Qin Z, Liu X. Adversarial Attacks and Defenses in Deep Learning. Engineering. 2020;6(3):346–60. doi: 10.1016/j.eng.2019.12.012 - DOI

Ren K, Zheng T, Qin Z, Liu X. Adversarial Attacks and Defenses in Deep Learning. Engineering. 2020;6(3):346–60. doi: 10.1016/j.eng.2019.12.012 - DOI

Zhang WE, Sheng QZ, Alhazmi A, Li C. Adversarial Attacks on Deep-learning Models in Natural Language Processing. ACM Trans Intell Syst Technol. 2020;11(3):1–41. doi: 10.1145/3374217 - DOI

Zhang WE, Sheng QZ, Alhazmi A, Li C. Adversarial Attacks on Deep-learning Models in Natural Language Processing. ACM Trans Intell Syst Technol. 2020;11(3):1–41. doi: 10.1145/3374217 - DOI

Wu B, Zhu M, Zheng M, Zhu Z, Wei S, Zhang M, et al. Defenses in Adversarial Machine Learning: A Systematic Survey From the Lifecycle Perspective. IEEE Trans Pattern Anal Mach Intell. 2026;48(1):876–95. doi: 10.1109/TPAMI.2025.3611340 - DOI - PubMed

Wu B, Zhu M, Zheng M, Zhu Z, Wei S, Zhang M, et al. Defenses in Adversarial Machine Learning: A Systematic Survey From the Lifecycle Perspective. IEEE Trans Pattern Anal Mach Intell. 2026;48(1):876–95. doi: 10.1109/TPAMI.2025.3611340 - DOI - PubMed

LinkOut - more resources