结合注意力与双线性网络的Android恶意软件检测  

Combining attention and bilinear networks for Android malware detection

作　　者：秦海雪 王勇 QIN Hai-xue;WANG Yong(College of Computer Science and Technology,Shanghai University of Electric Power,Shanghai 201306,China)

机构地区：[1]上海电力大学计算机科学与技术学院,上海201306

出　　处：《计算机工程与设计》2023年第11期3290-3297,共8页Computer Engineering and Design

基　　金：上海市自然科学基金面上基金项目(20ZR1455900);大数据协同安全技术国家工程实验室开放式基金项目(QAX-20180)。

摘　　要：为解决基于字节码图像的Android恶意软件检测方法中存在多分类准确率不高、易被噪音数据干扰等问题,提出一种结合注意力与双线性网络的恶意软件检测方法。从软件样本中提取字节码文件并将其映射为彩色图像,将注意力机制加入双线性网络的一条分支中减小噪音数据的影响,使用结合注意力的双线性网络模型完成对字节码图像的分类。实验结果表明,该方法在恶意软件二分类与多分类中均具有良好的性能,总体检测性能优于其它同类方法与模型。To solve the problems of multi-classification accuracy and interference by noisy data in bytecode images based Android malware detection method,a malware detection method combining attention and bilinear network was proposed.Bytecode files were extracted from software samples and they were mapped to color images,the attention mechanism was added to one branch of the bilinear network to reduce the influence of noisy data,and the bilinear network model combined with attention was used to complete the classification of bytecode images.Experimental results show that the method has good performance in both malware binary classification and multi-classification,and the overall detection performance is better than other similar methods.

关 键 词：安卓 恶意软件检测 双线性网络 注意力机制 字节码图像 深度学习 信息安全 

分 类 号：TP309.5[自动化与计算机技术—计算机系统结构]