Checking Robustness of Neural Network Models for the Classification of Malware
Authors:
Open Access
- 25 September 2024
- book chapter
- Published by IOS Press
- p. 101-108
Abstract
In the recent years, there has been a strong concern over the robustness of machine learning systems, specially when working in critical systems. One of such critical domains is cybersecurity, and a particular example is malware detection. This works aims to provide a formal technique to check the robustness of neural networks applied to the detection of malware. The technique is based on the automatic translation of the neural network to an equivalent set of equations that can be subsequently rigorously analyzed with respect to certain conditions for its input and output. That is, given a particular input for the neural network, check if there exist slight variations of such an input that can modify the output of the neural network. As a case study, we present preliminary results of a robustness analysis for a neural network that detects Windows PE malware. The results of the robustness analysis can be used to certify the robustness of the classifier or for improving such a classifier by fixing the flaws detected.Keywords
This publication has 4 references indexed in Scilit:
- Machine Learning for Windows Malware Detection and Classification: Methods, Challenges, and Ongoing Research2024
- A Review on Generative Adversarial Networks: Algorithms, Theory, and ApplicationsIEEE Transactions on Knowledge and Data Engineering, 2021
- The rise of machine learning for detection and classification of malware: Research developments, trends and challengesJournal of Network and Computer Applications, 2020
- Challenging SMT solvers to verify neural networksAI Communications, 2012