Metrics
9 Record Views
Journal article
IIoT Deep Malware Threat Hunting: From Adversarial Example Detection to Adversarial Scenario Detection
IEEE transactions on industrial informatics, Vol.18(12), pp.8477-8486
12/2022
Web of Science ID: WOS:000862429800014
Abstract
Protecting widely used deep classifiers against black-box adversarial attacks is a recent research challenge in many security-related areas, including malware classification. This class of attacks relies on optimizing a sequence of highly similar queries to bypass given classifiers. In this article, we leverage this property and propose a history-based method named, stateful query analysis (SQA) , which analyzes sequences of queries received by a malware classifier to detect black-box adversarial attacks on an industrial Internet of Things (IIoT). In the SQA pipeline, there are two components, namely the similarity encoder and the classifier, both based on convolutional neural networks. Unlike the state-of-the-art methods, which aim to identify individual adversarial examples, tracking the history of queries allows our method to identify adversarial scenarios and abort attacks before their completion. We optimize SQA using different combinations of hyperparameters on an advanced risc machine (ARM)-based IIoT malware dataset, widely adopted for malware threat hunting in industry 4.0. The use of a novel distance metric in calculating the loss function of the similarity encoder results in more disentangled representations and improves the performance of our method. Our evaluations demonstrate the validity of SQA via a detection rate of 93.1% over a wide range of adversarial examples.
Related links
Details
- Title
- IIoT Deep Malware Threat Hunting
- Publication Details
- IEEE transactions on industrial informatics, Vol.18(12), pp.8477-8486
- Resource Type
- Journal article
- Publisher
- IEEE
- Number of pages
- 10
- Copyright
- © 2022, IEEE
- Identifiers
- WOS:000862429800014; 99381494054306600
- Academic Unit
- Cybersecurity and Information Technology; Hal Marcus College of Science and Engineering
- Language
- English