Anti-dynamic malicious API sequence generation method based on multiple generators AugGAN

Abstract

The invention provides an anti-dynamic malicious API sequence generation method based on multiple generators AugGAN. According to the invention, a black box detector is inserted between a generator and a discriminator to carry out unsupervised learning on sample labeling; an interference-free API is selected from the corresponding interference-free API database by utilizing a plurality of generators; the selected non-interference API is randomly inserted into a malicious API sequence to generate an anti-dynamic malicious API sample; the adversarial samples and the benign samples are input intoa black box detector for classification and labeling; the adversarial samples, the benign samples and the corresponding labels are input into a discriminator for training, and gradient information isreturned; the generator and the discriminator update own parameters according to the returned gradient information; the continuous game of the generator and the discriminator improves the generationcapability and discrimination capability, and finally achieves a Nash equilibrium state. After the system is balanced, the generated anti-dynamic malicious API sequence can bypass the detection of a black box detector.

Description

technical field [0001] The invention relates to a method for generating an anti-dynamic API sequence, in particular to a method for generating an anti-dynamic malicious API sequence based on a multi-generator AugGAN. Background technique [0002] With the continuous in-depth integration and development of the new generation of information technology and work, life, and study, the Internet is penetrating into all aspects of human social activities and has become an indispensable part of people all over the world. According to incomplete statistics from the International Telecommunication Organization, by 2016, there were 3.5 billion Internet users worldwide, accounting for half of the world's total population. It is estimated that by 2020, there will be 12 billion Internet terminal devices. With the continuous emergence of new changes and characteristics of global network threats, especially some new types of network attacks emerging one after another and showing a trend of ...

AI Technical Summary

Problems solved by technology

[0006] The purpose of the present invention is to solve the problem of how to ensure deceptiveness, maliciousness and executableness of adversarial examples generated in the field of information security

Images