.png){kind=icon}
Return
GenDroid: A query-efficient black-box android adversarial attack framework
.png){kind=icon}
PRE
AI
DOI：10.1016/j.cose.2023.103359.png)
.png){kind=icon}
Original request for help.png){kind=icon}
Share.png){kind=icon}
Save
Abstract
En 中文
The security problems of Android applications have been gradually exposed with the increasing popularity of the Android OS. Machine learning (ML) and deep learning (DL) based Android malware detection is still suffering from adversarial attacks, although it has better performance than traditional methods. In this paper, we propose a query-efficient black-box attack method called GenDroid, which can generate high-quality Android adversarial examples with a low number of queries. We take GenDroid as an attack framework and extend it with the attention mechanism and JSMA algorithm to improve the efficiency of adversarial example production. We evaluate the effectiveness of our attack on two state-of-the-art Android malware detection schemes, Drebin and MaMaDroid. Compared with four state-of-the-art adversarial attacks on real-world datasets, GenDroid achieves higher misclassification rates with significantly the fewest number of queries on the two datasets. In addition, we have validated the effectiveness of our attack on real-world commercial anti-virus engines. Finally, to enhance the security of Android malware detector and defend against the GenDroid attack, we use combined features consisting of the associated Android features, the spatial properties of Android adversarial examples and the uncertainty to detect adversarial examples, which can achieve a high detection rate of 95.71%.& COPY; 2023 Elsevier Ltd. All rights reserved.
Keywords:
Android
Query-efficient
Adversarial examples
Black-box attack
Journal
C
IF:
5.4
Papers:
4.6K
Citations:
1.4W
Organization
Cited Papers
FE-DaST: Fast and effective data-free substitute training for black-box adversarial attacks.png)
COMPUTERS & SECURITY
COMPUTERS & SECURITYIF5.4
PREAI
ShareSave
ShareSaveA Brute-Force Black-Box Method to Attack Machine Learning-Based Systems in CybersecurityIEEE ACCESS
OAAI
IEEE ACCESSIF3.6
OAAIShareSaveShareSaveShareSave
View more