arrow
返回

Semantics-Preserving Node Injection Attacks Against GNN-Based ACFG Malware Classifiers

delete2025-01-01
delete0
PRE
AI
D
Dylan Zapzalka
S
Saeed Salem
M
Mohaisen, David *
DOI:10.1109/TDSC.2024.3409410delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
To increase security for devices connected to the internet, research has gone into using Graph Neural Networks (GNNs) to inhibit the spread of malware through detection. GNN classifiers that use Attributed Control Flow Graphs (ACFGs) have demonstrated favorable results in classifying software binaries as malicious or benign. In this work, we show that such classifiers are vulnerable to Adversarial Examples (AEs) by proposing several grey-box adversarial attacks that perform node injection and preserve the semantics of a program. We demonstrate that adversaries can take advantage of the aggregation properties of GNNs to apply effective perturbation outside of the original ACFG nodes of a software binary through node injection. We conducted experiments on our methods and compared them against two similar semantics-preserving adversarial attacks. Our results have shown that our methods of applying perturbation through node injection can result in higher evasion rates while decreasing the amount of perturbation needed to fool detectors. Namely, we deliver an evasion rate of up to 94.83% with only 2.49% of total perturbation, in comparison with a maximum evasion of 79.50% at 2.78% perturbation by a state-of-the-art approach and only 27.44% at 2.95% perturbation by the baseline attack. Our results highlight the need for creating more robust GNN malware detectors.
Keyword:
Adversarial examples
detection
graph neural networks
machine learning
malware
Adversarial examples
detection
graph neural networks
machine learning
malware

期刊

IEEE Transactions on Dependable and Secure Computing 封面图
IEEE Transactions on Dependable and Secure Computing
IF:
7.5
论文数:
2.6K
被引数:
9.6K

机构

U
University of Michigan
学者数:
6.4W
论文数: 5.3W
被引数: 124
Q
Qatar University
学者数:
8.9K
论文数: 9.0K
被引数: 16
U
university of michigan system
学者数:
9.1W
论文数: 8.6W
被引数: 133
学者 查看更多机构
引用论文

引用论文

An improved system for catheter loading during embryo transfer
err1987-12-01
err0
PREAI
errLinda K. Vaught; Clifford J. Stratton; Patricia Julian; William G. Vaught; Geoffrey Sher; Victor Knutzen; Virginia Marriage
err分享
err收藏
DL-FHMC: Deep Learning-Based Fine-Grained Hierarchical Learning Approach for Robust Malware Classification
err2022-09-01
err20
PREAI
errAbusnaina, Ahmed; Abuhamad, Mohammed; Alasmary, Hisham; Anwar, Afsah; Jang, Rhongho; Salem, Saeed; Nyang, Daehun; Mohaisen, David
err分享
err收藏
Analyzing and Detecting Emerging Internet of Things Malware: A Graph-Based Approach
err2019-10-01
err103
PREAI
errAlasmary, Hisham; Khormali, Aminollah; Anwar, Afsah; Park, Jeman; Choi, Jinchun; Abusnaina, Ahmed; Awad, Amro; Nyang, Daehun; Mohaisen, Aziz
err分享
err收藏
学者 查看更多内容