An Evasion and Counter-Evasion Study in Malicious Websites Detection

Abstract

Malicious websites are a major cyber attack vector, and effective detection of them is an important cyber defense task. The main defense paradigm in this regard is that the defender uses some kind of machine learning algorithms to train a detection model, which is then used to classify websites in question. Unlike other settings, the following issue is inherent to the problem of malicious websites detection: the attacker essentially has access to the same data that the defender uses to train its detection models. This 'symmetry' can be exploited by the attacker, at least in principle, to evade the defender's detection models. In this paper, we present a framework for characterizing the evasion and counter-evasion interactions between the attacker and the defender, where the attacker attempts to evade the defender's detection models by taking advantage of this symmetry. Within this framework, we show that an adaptive attacker can make malicious websites evade powerful detection models, but proactive training can be an effective counter-evasion defense mechanism. The framework is geared toward the popular detection model of decision tree, but can be adapted to accommodate other classifiers.

Cited by in corpus (9)

• Optimizing Top Precision Performance Measure of Content-Based Image Retrieval by Learning Similarity Function
• Data Driven Exploratory Attacks on Black Box Classifiers in Adversarial Domains
• Learning convolutional neural network to maximize Pos@Top performance measure
• PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks
• Can We Leverage Predictive Uncertainty to Detect Dataset Shift and Adversarial Examples in Android Malware Detection?
• Learning manifold to regularize nonnegative matrix factorization
• Representing data by sparse combination of contextual data points for classification
• Vector Quantization by Minimizing Kullback-Leibler Divergence
• Online classifier adaptation for cost-sensitive learning