Why Not Diversify Triggers? APK-Specific Backdoor Attack Against Android Malware Detection

Summary

This paper presents APK-Specific Backdoor Attack (ASBA), a poisoning method against machine learning-based Android malware detection (AMD) models. ASBA trains a generative adversarial network to create a distinct trigger for each malware sample, so that discovering one trigger via static analysis does not expose all the malware carrying it. The authors report a 94.6% average attack success rate across three datasets, five feature extraction methods and three classification models.

Topics

• Adversarial machine learning

Related items

• InfoSecuring next-generation edge intelligence: A survey from federated learning to autonomous agents in cyber-physical systemsSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoPop Goes the Verifier: Phoneme-Targeted Data Poisoning of Voice Liveness DetectionSimilar attack · Arxiv (cs.RO + cs.CV security)
• InfoCharacterizing Recoverable Expert-Utilization Signatures in Fine-Tuned Mixture-of-Experts LLMsSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)
• InfoDiscrete Unintentional Adversarial Perturbation Detection for DQN Traffic Signal ControlSimilar attack · OpenAlex (peer-reviewed AI security)
• InfoTrustworthy Distributed Machine Learning in Cloud-Edge-IoT Systems: A Heterogeneity-Aware Survey of Security, Privacy, and RobustnessSimilar attack · Arxiv (cs.CR + cs.CL + cs.LG)