.png){kind=icon}
返回
Crystal Ball: From Innovative Attacks to Attack Effectiveness Classifier
.png){kind=icon}
OA
AI
DOI：10.1109/ACCESS.2021.3138628.png)
.png){kind=icon}
原文求助.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Android OS is one of the most popular operating systems worldwide, making it a desirable target for malware attacks. Some of the latest and most important defensive systems are based on machine learning (ML) and cybercriminals continuously search for ways to overcome the barriers posed by these systems. Thus, the focus of this work is on evasion attacks in the attempt to show the weaknesses of state of the art research and how more resilient systems can be built. Evasion attacks consist of manipulating either the actual malicious application (problem-based) or its extracted feature vector (feature-based), to avoid being detected by ML systems. This study presents a set of innovative problem-based evasion attacks against well-known Android malware detection systems, which decrease their detection rate by up to 97%. Moreover, an analysis of the effectiveness of these attacks against VirusTotal (VT) scanners was conducted, empirically showing their efficiency against well-known scanners (e.g., McAfee and Comodo) as well. The VT system proved to be a great candidate for the attacks, as in 98% of the apps, less scanners detected the manipulated apps than the original malicious apps. As not all the attacks are effective in the same manner against the VT scanners, the attack efficiency classifiers are advised. Each classifier predicts the applicability of one of the attacks. The set of classifiers creates an ensemble, which shows high success rates, allowing the attacker to decide which attack is best to use for each malicious app and defense system.
Keyword:
Malware
Feature extraction
Codes
Static analysis
Technological innovation
Viruses (medical)
Reflection
Android malware
machine learning
malware detection
期刊
IF:
3.6
论文数:
9.8W
被引数:
29.4W
机构
引用论文
A Combination Method for Android Malware Detection Based on Control Flow Graphs and Machine Learning Algorithms.png)
IEEE ACCESS
OAAI
IEEE ACCESSIF3.6
OAAI分享收藏Enhanced photocurrent response on a CdTe incorporated coordination polymer based on 3-(3-(1H-imidazol-1-yl)phenyl)-5-(4-(1H-imidazol-1-yl)phenyl)-1-methyl-1H-1,2,4-triazoleRSC Advances
RSC AdvancesIF0
PREAI
分享收藏
查看更多内容