arrow
返回

Backdoor Attack on Machine Learning Based Android Malware Detectors

delete2022-09-01
delete30
PRE
AI
C
Chaoran Li
X
Xiao Chen *
D
Derui Wang
S
Sheng Wen *
M
Muhammad Ejaz Ahmed
S
Seyit Camtepe
向
向阳 (Yang Xiang)
DOI:10.1109/TDSC.2021.3094824delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
Machine learning (ML) has been widely used for malware detection on different operating systems, including Android. To keep up with malware's evolution, the detection models usually need to be retrained periodically (e.g., every month) based on the data collected in the wild. However, this leads to poisoning attacks, specifically backdoor attacks, which subvert the learning process and create evasion 'tunnels' for manipulated malware samples. To date, we have not found any prior research that explored this critical problem in Android malware detectors. Although there are already some similar works in the image classification field, most of those similar ideas cannot be borrowed to solve this problem, because the assumption that the attacker has full control of the training data collection or labelling process is not realistic in real-world malware detection scenarios. In this article, we are motivated to study the backdoor attack against Android malware detectors. The backdoor is created and injected into the model stealthily without access to the training data and activated when an app with the trigger is presented. We demonstrate the proposed attack on four typical malware detectors that have been widely discussed in academia. Our evaluation shows that the proposed backdoor attack achieves up to 99 percent evasion rate over 750 malware samples. Moreover, the above successful attack is realised by a small size of triggers (only four features) and a very low data poisoning rate (0.3 percent).
Keyword:
Malware
Detectors
Training
Feature extraction
Labeling
Computational modeling
Training data
Malware detection
backdoor attack
machine learning
computer security
data poisoning

期刊

IEEE Transactions on Dependable and Secure Computing 封面图
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
论文数:
2.6K
被引数:
9.6K

机构

M
Monash University
学者数:
5.4W
论文数: 5.4W
被引数: 79
S
Swinburne University of Technology
学者数:
9.3K
论文数: 1.2W
被引数: 2.0W
C
学者 查看更多机构
引用论文

引用论文

Surface Tension and Viscosity of Quasicrystal-Forming Ti–Zr–Ni Alloys
err2004-07-01
err0
PREAI
errR. W. Hyers; R. C. Bradshaw; J. R. Rogers; T. J. Rathz; G. W. Lee; A. K. Gangopadhyay; K. F. Kelton
err分享
err收藏
Development of a Rechargeable Zinc-Air Battery
err2010-02-05
err0
errOAAI
errGwenaëlle Toussaint; Philippe Stevens; Florian Moureau; Robert Rouget; Fabrice Fourgeot
err分享
err收藏
Monitoring of Water Transportation in Plant Stem With Microneedle Sap Flow Sensor
err2018-06-01
err0
PREAI
errSangwoong Baek; Eunyong Jeon; Kyoung Sub Park; Kyung-Hwan Yeo; Junghoon Lee
err分享
err收藏
err分享
err收藏
Spectroscopic Imaging of Quasiparticle Bound States Induced by Strong Nonmagnetic Scatterings in One-Unit-Cell FeSe/SrTiO3
err2019-07-15
err0
PREAI
errChaofei Liu; Ziqiao Wang; Yi Gao; Xiaoqiang Liu; Yi Liu; Qiang-Hua Wang; Jian Wang
err分享
err收藏
Picking on the family: Disrupting android malware triage by forcing misclassification
err2018-04-01
err40
errOAAI
errCalleja, Alejandro; Martin, Alejandro; Menendez, Hector D.; Tapiador, Juan; Clark, David
err分享
err收藏
Climate change impacts and adaptation among smallholder farmers in Central America
err2018-08-14
err0
errOAAI
errCelia A. Harvey; Milagro Saborio-Rodríguez; M. Ruth Martinez-Rodríguez; Barbara Viguera; Adina Chain-Guadarrama; Raffaele Vignola; Francisco Alpizar
err分享
err收藏
学者 查看更多内容