一种基于强化学习的PE恶意软件对抗样本生成方法OA
A reinforcement learning-based method for generating adversarial examples against PE malware
提出一种基于强化学习的PE恶意软件对抗样本生成方法.将PE恶意软件对抗样本生成视为序列到序列的生成任务,并对离线强化学习数据集进行序列建模,利用Transformer强大的序列生成能力,通过每次预测一个动作来逐步生成序列.此外,引入信息传输机制来实现强化学习过程中跨回合信息传输,提高数据效率.实验表明,基于所提出方法生成的PE恶意软件对抗样本的逃逸率优于对比实验,并具有可转移性.
This paper proposes a reinforcement learning-based method for generating adversarial ex-amples against PE malware.Firstly,it regards the generation of adversarial examples for PE malware as a sequence-to-sequence generation task,which models sequences on an offline reinforcement learning dataset and leverages the powerful sequence generation capability of Transformer by incrementally gen-erating sequences through predicting actions at each step.Furthermore,an information transmission mechanism is introduced to facilitate cross-episode information transfer during the reinforcement learn-ing process,enhancing data efficiency.Experimental results demonstrate that the evasion rate of PE malware adversarial examples generated using this method outperforms those in comparative experi-ments and exhibits transferability.
张朝然;马玉骐;张三峰;杨望
东南大学网络空间安全学院,江苏 南京 211189东南大学网络空间安全学院,江苏 南京 211189东南大学网络空间安全学院,江苏 南京 211189||教育部计算机网络和信息集成重点实验室(东南大学),江苏 南京 211189东南大学网络空间安全学院,江苏 南京 211189||教育部计算机网络和信息集成重点实验室(东南大学),江苏 南京 211189
信息技术与安全科学
强化学习对抗样本PE恶意软件恶意软件检测
reinforcement learningadversarial examplePE malwaremalware detection
《计算机工程与科学》 2026 (4)
617-627,11
国家重点研发计划(2022YFB3104601)
评论