<?xml version="1.0" encoding="utf-8"?>
<!DOCTYPE article PUBLIC "-//NLM//DTD JATS (Z39.96) Journal Publishing DTD v1.3 20210610//EN" "https://jats.nlm.nih.gov/publishing/1.3/JATS-journalpublishing1-3.dtd">
<article article-type="research-article" dtd-version="1.3" xml:lang="ru">
  <front xmlns:xlink="http://www.w3.org/1999/xlink">
    <journal-meta>
      <journal-id journal-id-type="elibrary">9004</journal-id>
      <journal-title-group>
        <journal-title>Problems of information security. Computer systems</journal-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Проблемы информационной безопасности. Компьютерные системы</trans-title>
        </trans-title-group>
      </journal-title-group>
      <issn pub-type="epub">2071-8217</issn>
    </journal-meta>
    <article-meta xmlns:xlink="http://www.w3.org/1999/xlink">
      <article-id pub-id-type="publisher-id">12</article-id>
      <article-id pub-id-type="doi">10.48612/jisp/xerr-dfhh-2zak</article-id>
      <title-group>
        <article-title>Research of adversarial attacks on classical machine learning models in the context of network threat detection</article-title>
        <trans-title-group xml:lang="ru">
          <trans-title>Исследование состязательных атак на классические модели машинного обучения в контексте обнаружения сетевых угроз</trans-title>
        </trans-title-group>
      </title-group>
      <contrib-group>
        <contrib contrib-type="author">
          <contrib-id contrib-id-type="orcid">0000-0002-3830-1840</contrib-id>
          <name>
            <surname>Yugai</surname>
            <given-names>Pavel</given-names>
          </name>
          <xref ref-type="aff" rid="aff1"/>
          <email>yugaj_pe@spbstu.ru</email>
        </contrib>
      </contrib-group>
      <aff id="aff1">Peter the Great St. Petersburg Polytechnic University</aff>
      <pub-date publication-format="electronic" date-type="pub" iso-8601-date="2025-09-30">
        <day>30</day>
        <month>09</month>
        <year>2025</year>
      </pub-date>
      <issue>3</issue>
      <fpage>147</fpage>
      <lpage>164</lpage>
      <self-uri xmlns:xlink="http://www.w3.org/1999/xlink" content-type="pdf" xlink:href="https://jisp.spbstu.ru/userfiles/files/soderzhaniya/pib_3_5-6.pdf"/>
      <abstract xml:lang="en">
        <p>This study presents an investigation of adversarial attacks on classical machine learning algorithms within the context of network threat detection. It offers an overview of the machine learning models employed for various tasks in the realm of computer network security. A formal description of the threat model is provided, along with a classification of adversarial attacks. The classification of network traffic within the WEB-IDS23 dataset is carried out using classical machine learning models, including k-nearest neighbors, random forest, and support vector machine. Implemented adversarial attacks include the Fast Gradient Sign Method, Projected Gradient Descent, the Carlini and Wagner attack, and DeepFool, applied to these machine learning algorithms. An analysis of the impact of the deployed adversarial attacks on the aforementioned classical machine learning algorithms is conducted.</p>
      </abstract>
      <kwd-group xml:lang="en">
        <kwd>Adversarial attacks</kwd>
        <kwd>machine learning</kwd>
        <kwd>network threats</kwd>
        <kwd>Fast Gradient Sign Method</kwd>
        <kwd>Projected Gradient Descent</kwd>
        <kwd>Carlini and Wagner attack</kwd>
        <kwd>k-nearest neighbors</kwd>
        <kwd>support vector machine</kwd>
        <kwd>random forest</kwd>
      </kwd-group>
    </article-meta>
  </front>
</article>
