{"created":"2025-01-19T01:33:18.631220+00:00","updated":"2025-01-19T10:22:34.396924+00:00","metadata":{"_oai":{"id":"oai:ipsj.ixsq.nii.ac.jp:00232441","sets":["581:11492:11494"]},"path":["11494"],"owner":"44499","recid":"232441","title":["Androidマルウェア検知器に対するSHAP値を用いた学習による回避攻撃"],"pubdate":{"attribute_name":"公開日","attribute_value":"2024-02-15"},"_buckets":{"deposit":"85accac8-ba17-4915-bcf6-0b78874997c6"},"_deposit":{"id":"232441","pid":{"type":"depid","value":"232441","revision_id":0},"owners":[44499],"status":"published","created_by":44499},"item_title":"Androidマルウェア検知器に対するSHAP値を用いた学習による回避攻撃","author_link":["629154","629152","629153","629150","629149","629151","629147","629148"],"item_titles":{"attribute_name":"タイトル","attribute_value_mlt":[{"subitem_title":"Androidマルウェア検知器に対するSHAP値を用いた学習による回避攻撃"},{"subitem_title":"Evasion Attacks against Android Malware Detectors Using SHAP Values","subitem_title_language":"en"}]},"item_keyword":{"attribute_name":"キーワード","attribute_value_mlt":[{"subitem_subject":"[一般論文（推薦論文）] MalGAN，回避攻撃，SHAP値，Adversarial Example，転移性","subitem_subject_scheme":"Other"}]},"item_type_id":"2","publish_date":"2024-02-15","item_2_text_3":{"attribute_name":"著者所属","attribute_value_mlt":[{"subitem_text_value":"電気通信大学"},{"subitem_text_value":"NTTコミュニケーションズ株式会社"},{"subitem_text_value":"電気通信大学"},{"subitem_text_value":"電気通信大学"}]},"item_2_text_4":{"attribute_name":"著者所属(英)","attribute_value_mlt":[{"subitem_text_value":"The University of Electro-Communications","subitem_text_language":"en"},{"subitem_text_value":"NTT Communications Corporation","subitem_text_language":"en"},{"subitem_text_value":"The University of Electro-Communications","subitem_text_language":"en"},{"subitem_text_value":"The University of Electro-Communications","subitem_text_language":"en"}]},"item_language":{"attribute_name":"言語","attribute_value_mlt":[{"subitem_language":"jpn"}]},"publish_status":"0","weko_shared_id":-1,"item_file_price":{"attribute_name":"Billing file","attribute_type":"file","attribute_value_mlt":[{"url":{"url":"https://ipsj.ixsq.nii.ac.jp/record/232441/files/IPSJ-JNL6502055.pdf","label":"IPSJ-JNL6502055.pdf"},"date":[{"dateType":"Available","dateValue":"2026-02-15"}],"format":"application/pdf","billing":["billing_file"],"filename":"IPSJ-JNL6502055.pdf","filesize":[{"value":"3.0 MB"}],"mimetype":"application/pdf","priceinfo":[{"tax":["include_tax"],"price":"660","billingrole":"5"},{"tax":["include_tax"],"price":"330","billingrole":"6"},{"tax":["include_tax"],"price":"0","billingrole":"8"},{"tax":["include_tax"],"price":"0","billingrole":"44"}],"accessrole":"open_date","version_id":"4040f357-fc6f-46e5-9fa9-e71469a21684","displaytype":"detail","licensetype":"license_note","license_note":"Copyright (c) 2024 by the Information Processing Society of Japan"}]},"item_2_creator_5":{"attribute_name":"著者名","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"嶋田, 康太"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"畑田, 充弘"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"吉浦, 裕"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"市野, 将嗣"}],"nameIdentifiers":[{}]}]},"item_2_creator_6":{"attribute_name":"著者名(英)","attribute_type":"creator","attribute_value_mlt":[{"creatorNames":[{"creatorName":"Kota, Shimada","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Mitsuhiro, Hatada","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Hiroshi, Yoshiura","creatorNameLang":"en"}],"nameIdentifiers":[{}]},{"creatorNames":[{"creatorName":"Masatsugu, Ichino","creatorNameLang":"en"}],"nameIdentifiers":[{}]}]},"item_2_source_id_9":{"attribute_name":"書誌レコードID","attribute_value_mlt":[{"subitem_source_identifier":"AN00116647","subitem_source_identifier_type":"NCID"}]},"item_resource_type":{"attribute_name":"資源タイプ","attribute_value_mlt":[{"resourceuri":"http://purl.org/coar/resource_type/c_6501","resourcetype":"journal article"}]},"item_2_publisher_15":{"attribute_name":"公開者","attribute_value_mlt":[{"subitem_publisher":"情報処理学会","subitem_publisher_language":"ja"}]},"item_2_source_id_11":{"attribute_name":"ISSN","attribute_value_mlt":[{"subitem_source_identifier":"1882-7764","subitem_source_identifier_type":"ISSN"}]},"item_2_description_7":{"attribute_name":"論文抄録","attribute_value_mlt":[{"subitem_description":"現在，未知のマルウェアを検知することができる利点から，機械学習型のマルウェア検知手法が数多く提案されている．一方で，機械学習に対する回避攻撃手法も提案されはじめている．回避攻撃とは，あるクラスに分類される入力データに対して特徴量に変更を加えて，異なるクラスに分類されるようにする手法である．マルウェアに対して回避攻撃が行われた場合，マルウェアの検知が困難となる脅威が生じる．本論文では，代表的な攻撃手法であるMalGANに対して，SHAP値を用いた学習を追加したMalGAN-SHAPを提案する．提案手法は，MalGANに対して回避に有効な特徴量のみを生成するように学習を加えることで，変更される特徴量数を減少させたうえで転移性の維持を目指した．Androidマルウェア検知器に対してMalGAN，MEGAN-RP，Mal-LSGAN，MalGAN-SHAPを用いて回避攻撃の実験を行い，提案手法が追加特徴量の数の削減と転移性の維持の両方を実現したことを確認できた．","subitem_description_type":"Other"}]},"item_2_description_8":{"attribute_name":"論文抄録(英)","attribute_value_mlt":[{"subitem_description":"Machine-learning-based malware detection methods have been proposed due to the advantage of detecting unknown malware. On the other hand, evasion attacks against machine learning have also been proposed. Evasion attack is a method that modifies the features of input data classified into other class so that the data is classified into a different class. Evasion attacks against malware cause a threat that makes malware detection difficult. In this paper, we propose MalGAN-SHAP, which adds a learning process using SHAP values to MalGAN, one of the evasion attack methods. The proposed method identifies effective features for evasion attacks using SHAP values, and reduces the number of additional features and keeps transferability by adding a learning process. We conducted experiments of evasion attacks against Android malware detectors with MalGAN,MEGAN-RP,Mal-LSGAN and MalGAN-SHAP, and confirmed that the proposed method achieves both reducing the number of additional features and keeping transferability.","subitem_description_type":"Other"}]},"item_2_biblio_info_10":{"attribute_name":"書誌情報","attribute_value_mlt":[{"bibliographicPageEnd":"601","bibliographic_titles":[{"bibliographic_title":"情報処理学会論文誌"}],"bibliographicPageStart":"588","bibliographicIssueDates":{"bibliographicIssueDate":"2024-02-15","bibliographicIssueDateType":"Issued"},"bibliographicIssueNumber":"2","bibliographicVolumeNumber":"65"}]},"relation_version_is_last":true,"item_2_identifier_registration":{"attribute_name":"ID登録","attribute_value_mlt":[{"subitem_identifier_reg_text":"10.20729/00232327","subitem_identifier_reg_type":"JaLC"}]},"weko_creator_id":"44499"},"id":232441,"links":{}}