"How Does It Detect A Malicious App?" Explaining the Predictions of AI-based Android Malware Detector
AI methods have been proven to yield impressive performance on Android malware detection. However, most AI-based methods make predictions of suspicious samples in a black-box manner without transparency on models' inference. The expectation on models' explainability and transparency by cyber security and AI practitioners to assure the trustworthiness increases. In this article, we present a novel model-agnostic explanation method for AI models applied for Android malware detection. Our proposed method identifies and quantifies the data features relevance to the predictions by two steps: i) data perturbation that generates the synthetic data by manipulating features' values; and ii) optimization of features attribution values to seek significant changes of prediction scores on the perturbed data with minimal feature values changes. The proposed method is validated by three experiments. We firstly demonstrate that our proposed model explanation method can aid in discovering how AI models are evaded by adversarial samples quantitatively. In the following experiments, we compare the explainability and fidelity of our proposed method with state-of-the-arts, respectively.
Code (0)
등록된 구현이 없습니다.
Tasks
Android Malware DetectionMalware DetectionSimilar Papers 제목 키워드 기반
Context-aware, Adaptive and Scalable Android Malware Detection through Online Learning (extended version)
It is well-known that Android malware constantly evolves so as to evade detection. This causes the entire malware population to be non-stationary. Contrary to this fact, most of the prior works on Machine Learning based …
Android Malware DetectionMalware DetectionExplaining Black-box Android Malware Detection
Machine-learning models have been recently used for detecting malicious Android applications, reporting impressive performances on benchmark datasets, even when trained only on features statically extracted from the appl…
Android Malware DetectionBIG-bench Machine LearningMalware DetectionMachine Learning-based Android Intrusion Detection System
The android operating system is being installed in most of the smart devices. The introduction of intrusions in such operating systems is rising at a tremendous rate. With the introduction of such malicious data streams,…
Intrusion DetectionUnraveling the Key of Machine Learning Solutions for Android Malware Detection
Android malware detection serves as the front line against malicious apps. With the rapid advancement of machine learning (ML), ML-based Android malware detection has attracted increasing attention due to its capability …
Android Malware DetectionFeature EngineeringMalware DetectionDetection of Malicious Android Applications: Classical Machine Learning vs. Deep Neural Network Integrated with Clustering
Today anti-malware community is facing challenges due to the ever-increasing sophistication and volume of malware attacks developed by adversaries. Traditional malware detection mechanisms are not able to cope-up with ne…
Android Malware DetectionBIG-bench Machine LearningClusteringMalware Detection