.png){kind=icon}
返回
Functionality-Verification Attack Framework Based on Reinforcement Learning Against Static Malware Detectors
.png){kind=icon}
PRE
AI
DOI：10.1109/TIFS.2024.3453047.png)
.png){kind=icon}
.png){kind=icon}
分享.png){kind=icon}
收藏
摘要
En 中文
Current adversarial attacks are capable of achieving effective evasion against machine learning-based static malware detectors. However, these methods have problems such as long example generation times and lack of functionality validation. To address these issues, we propose an enhanced adversarial example generation framework based on reinforcement learning. This framework improves the example generation efficiency by redesigning the state space and action space employed by the agents. Furthermore, we incorporate the functionality of adversarial example validation for the first time as a component of the example generation process within the framework, significantly enhancing the efficiency of verification. Multiple popular detectors are chosen as victim models to assess the effectiveness of the attack framework. The vulnerabilities of these detectors are elucidated through explanations of the detectors and the analysis of attack results. Finally, a policy distillation approach based on transfer learning is employed to enhance the generalizability of the framework. By learning expert knowledge from agents trained against different detectors, the framework could launch effective attacks against various detectors. The effectiveness of the proposed framework is verified through experiment results.
Keyword:
Detectors
Feature extraction
Malware
Closed box
Reinforcement learning
Manuals
Transfer learning
Adversarial example
malware detection
reinforcement learning
functionality verification
transferability attack
期刊
IF:
8
论文数:
5.4K
被引数:
2.3W
机构
引用论文
分享收藏Intercellular Adhesion Molecule 1 (ICAM-1) Gene Variant is Associated with Coronary Artery Calcification Independent of Soluble ICAM-1 Levels细胞间粘附分子1 (ICAM-1) 基因变异与冠状动脉钙化相关，与可溶性ICAM-1水平无关
PREAI
分享收藏Crassulacean acid metabolism in Lithops insularis; a non-halophytic member of the Mesembryanthemaceae.png)
Planta
PlantaIF0
PREAI
分享收藏Different responses in metallothionein gene expression and antioxidative enzyme activity lead to more ROS accumulation in rice exposed to Tl(III) than to Tl(I)Chemosphere
ChemosphereIF0
PREAI
分享收藏
查看更多内容