Labaca-Castro, R;
Muñoz-González, L;
Pendlebury, F;
Dreo Rodosek, G;
Pierazzi, F;
Cavallaro, L;
(2021)
Realizable Universal Adversarial Perturbations for Malware.
ArXiv
Preview |
Text
Cavallaro_2102.06747.pdf Download (2MB) | Preview |
Abstract
Machine learning classifiers are vulnerable to adversarial examples -- input-specific perturbations that manipulate models' output. Universal Adversarial Perturbations (UAPs), which identify noisy patterns that generalize across the input space, allow the attacker to greatly scale up the generation of such examples. Although UAPs have been explored in application domains beyond computer vision, little is known about their properties and implications in the specific context of realizable attacks, such as malware, where attackers must satisfy challenging problem-space constraints. In this paper we explore the challenges and strengths of UAPs in the context of malware classification. We generate sequences of problem-space transformations that induce UAPs in the corresponding feature-space embedding and evaluate their effectiveness across different malware domains. Additionally, we propose adversarial training-based mitigations using knowledge derived from the problem-space transformations, and compare against alternative feature-space defenses. Our experiments limit the effectiveness of a white box Android evasion attack to ~20% at the cost of ~3% TPR at 1% FPR. We additionally show how our method can be adapted to more restrictive domains such as Windows malware. We observe that while adversarial training in the feature space must deal with large and often unconstrained regions, UAPs in the problem space identify specific vulnerabilities that allow us to harden a classifier more effectively, shifting the challenges and associated cost of identifying new universal adversarial transformations back to the attacker.
| Type: | Working / discussion paper |
|---|---|
| Title: | Realizable Universal Adversarial Perturbations for Malware |
| Open access status: | An open access version is available from UCL Discovery |
| Publisher version: | https://doi.org/10.48550/arXiv.2102.06747 |
| Language: | English |
| Additional information: | This work is licensed under an Attribution 4.0 International License (CC BY 4.0). |
| UCL classification: | UCL UCL > Provost and Vice Provost Offices UCL > Provost and Vice Provost Offices > UCL BEAMS UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science UCL > Provost and Vice Provost Offices > UCL BEAMS > Faculty of Engineering Science > Dept of Computer Science |
| URI: | https://discovery-pp.ucl.ac.uk/id/eprint/10133171 |
Archive Staff Only
 |
View Item |
