领域知识驱动的安卓软件对抗样本生成方法

DOMAIN KNOWLEDGE-DRIVEN ADVERSARIAL EXAMPLE GENERATION METHOD FOR ANDROID SOFTWARE

  • 摘要: 安卓软件对抗样本是移动恶意软件检测领域的研究热点。现有生成方法仅从梯度、算法等模型角度出发,而忽略了安卓软件内在特质,导致样本生成效率低、样本质量不可靠等问题。该文提出一种领域知识驱动的安卓对抗样本生成DK-JSMA方法,使用文本分析、代码分析和专家知识等方法提取并量化安卓领域知识,优化扰动过程的选择策略和选择结果。在大规模数据集上的实验结果表明,该方法比经典的JSMA方法生成效率更高,在深度神经网络、支持向量机和随机森林等主流模型上降低20%、23%和44%以上的特征失真度。

     

    Abstract: Android software adversarial example is a research hotspot in the field of mobile malware detection. The existing generation methods only consider adversarial example generation from the perspective of gradient and algorithm, while ignoring the inherent characteristics of Android software, resulting in problems such as low example generation efficiency and unreliable example quality. This paper proposes a domain knowledge-driven adversarial example generation method named DK-JSMA for Android software. It used text analysis, code analysis, and expert knowledge to extract and quantify Android domain knowledge. It used the above domain knowledge to optimize the selection strategy and selection result of the feature perturbation process. The experimental results on large-scale data sets show that the DK-JSMA method has higher generation efficiency, and compared with the classic JSMA method, it reduces the feature distortion by over 20%, 23% and 44% than DNN, SVM, and RF.

     

/

返回文章
返回