Abstract
The success of Machine Learning (ML) techniques in security applications, such as malware detection, is highly criticized for their vulnerability to Adversarial Examples (AE): perturbed input samples (e.g. malware) can mislead ML to produce an adversary's desired output (e.g. benign class label). AEs against ML models are broadly studied in the computer vision domain where the adversary perturbs the pixel values of an image such that the change is not perceptible, but the resulting image is misclassified by the model. We investigate the effectiveness of attack techniques proposed in the image domain to attack ML classifiers in the context of mobile malware detection. Since the feature vector representation of samples is often used in ML, a simplified evaluation of ML classifiers' robustness to AEs is to study feature-based attack models, where the adversary perturbs the input features. We compare the methods, trade-offs, and gaps for such attack models and show that generative models (e.g. GANs) outperform a selection of existing attacks in terms of attack success rate but apply large distortion to the original sample. We also describe how we use the generated samples for increasing a classifier's robustness through adversarial training.
Original language | English |
---|---|
Title of host publication | 2020 30th International Telecommunication Networks and Applications Conference, ITNAC 2020 |
Place of Publication | Piscataway, NJ |
Publisher | Institute of Electrical and Electronics Engineers (IEEE) |
Number of pages | 8 |
ISBN (Electronic) | 9781728188270 |
DOIs | |
Publication status | Published - 2020 |
Event | 30th International Telecommunication Networks and Applications Conference, ITNAC 2020 - Melbourne, Australia Duration: 25 Nov 2020 → 27 Nov 2020 |
Conference
Conference | 30th International Telecommunication Networks and Applications Conference, ITNAC 2020 |
---|---|
Country/Territory | Australia |
City | Melbourne |
Period | 25/11/20 → 27/11/20 |
Keywords
- Adversarial Examples
- Generative Models
- Machine Learning
- Robust Classification