对抗攻击下提升恶意软件检测鲁棒性,用自适应方法增强模型抗干扰能力。
Comprehensive Botnet Detection by Mitigating Adversarial Attacks, Navigating the Subtleties of Perturbation Distances and Fortifying Predictions with Conformal Layers
- 基于流量数据,结合优化算法与深度学习构建检测模型。
- 在ISCX和ISOT数据集上实现58.20%和98.94%的错误预测拒识率。
- 通过置信度校准层显著提升模型安全性,适合安全系统开发者使用。
僵尸网络是由恶意行为者控制的计算机网络,对网络安全构成重大威胁。它们可自主感染、传播并协同实施网络犯罪,亟需可靠的检测手段。本文针对攻击者设计的复杂对抗性操纵,旨在破坏基于机器学习的僵尸网检测系统。提出一种基于流量的检测方法,利用机器学习与深度学习算法在ISCX和ISOT数据集上进行训练。通过遗传算法与粒子群优化对检测算法进行调优,获得基准检测方案。采用Carlini & Wagner攻击和生成对抗网络(GAN)生成带有微小扰动的欺骗性数据,精准修改分类特征,同时保持语义与语法一致性,确保对抗样本具有真实性和意义。深入分析不同迭代阶段下,恶意样本需达到的L2距离才能被误分类,揭示了不同扰动距离下的误判水平。研究评估了多种模型的脆弱性,并检验了对抗样本从神经网络代理模型向树基算法的迁移能力。随后对初始误判样本的模型重新训练,提升其鲁棒性与检测性能。最后引入置信度校准层,显著拒绝错误预测:在ISCX数据集上达58.20%,在ISOT数据集上达98.94%。
原文摘要 · Abstract (English)
Botnets are computer networks controlled by malicious actors that present significant cybersecurity challenges. They autonomously infect, propagate, and coordinate to conduct cybercrimes, necessitating robust detection methods. This research addresses the sophisticated adversarial manipulations posed by attackers, aiming to undermine machine learning-based botnet detection systems. We introduce a flow-based detection approach, leveraging machine learning and deep learning algorithms trained on the ISCX and ISOT datasets. The detection algorithms are optimized using the Genetic Algorithm and Particle Swarm Optimization to obtain a baseline detection method. The Carlini & Wagner (C&W) attack and Generative Adversarial Network (GAN) generate deceptive data with subtle perturbations, targeting each feature used for classification while preserving their semantic and syntactic relationships, which ensures that the adversarial samples retain meaningfulness and realism. An in-depth analysis of the required L2 distance from the original sample for the malware sample to misclassify is performed across various iteration checkpoints, showing different levels of misclassification at different L2 distances of the Pertrub sample from the original sample. Our work delves into the vulnerability of various models, examining the transferability of adversarial examples from a Neural Network surrogate model to Tree-based algorithms. Subsequently, models that initially misclassified the perturbed samples are retrained, enhancing their resilience and detection capabilities. In the final phase, a conformal prediction layer is integrated, significantly rejecting incorrect predictions, of 58.20 % in the ISCX dataset and 98.94 % in the ISOT dataset.
Thank you to arXiv for use of its open access interoperability. PaperDance 不是 arXiv 官方产品;中文卡片由大模型生成,请以原文为准。