.png){kind=icon}
返回
Adversarial malware sample generation method based on the prototype of deep learning detector
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2022.102762.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
The deep learning methods had been proved to be effective for malware detection in the past. However, the recent studies show that deep learning models are vulnerable to adversarial attacks. Thus, the malware detection models based on deep learning face the threat of adversarial examples. As a popular case of adversarial examples, adversarial images are usually generated by adding unrecognizable perturbations to original pictures. When applying the same method to the windows PE (Portable Executable) malware, the original structure cannot be destroyed and the original functions of PE malware need to be preserved. Most existing windows adversarial malware generation works are derived from adversarial image methods with some adaptive modifications such as inserting perturbations in the slack space of the PE file. The both generation methods have some similarities but also many differences. Thus, directly using the methods of adversarial images to create malware effects the efficiency and fooling rate. In this paper, we overcome these issues by proposing a method for generating windows adversarial malware in PE format based on prototype samples of deep learning models. The prototype samples are the most typical ones of a certain category of the classification models. With the characteristic of the prototype samples, the bytes of the prototype samples are added as perturbations to the malware samples. This way can fast generate adversarial malware that could fool the target model. The proposed method is evaluated on a real world dataset of malware. Promising results show that the method can fool the deep learning based malware detection models with a high rate.(c) 2022 Elsevier Ltd. All rights reserved.
Keyword:
Adversarial example
Deep learning
Model interpretability
Malware detection
Prototype
期刊
C
IF:
5.4
论文数:
4.6K
被引数:
1.4W
机构
引用论文
Image-Based malware classification using ensemble of CNN architectures (IMCEC).png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏An IRL-based malware adversarial generation method to evade anti-malware enginesCOMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
分享收藏Static malware detection and attribution in android byte-code through an end-to-end deep system
PREAI
分享收藏The response of rectangular piezoelectric sensors to Rayleigh and Lamb ultrasonic waves矩形压电传感器对瑞利和兰姆超声波的响应
OAAI
OAAI分享收藏Enhanced Reactivity of Dinuclear Copper(I) Acetylides in Dipolar Cycloadditions偶极环加成反应中双核乙炔铜 (I) 的反应性增强
PREAI
分享收藏
查看更多内容