检索结果-内蒙古大学图书馆

A Wolf in Sheep's Clothing: Practical Black-box Adversarial Attacks for Evading Learning-based Windows Malware Detection in the Wild

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Ling, Xiang Wu, Zhiyu Wang, Bin Deng, Wei Wu, Jingzheng Ji, Shouling Luo, Tianyue Wu, Yanjun Intelligent Software Research Center Institute of Software Chinese Academy of Sciences China China State Key Laboratory of Computer Science Institute of Software Chinese Academy of Sciences China Network and Data Security China Hangzhou Research Institute Xidian University China Zhejiang University China

Given the remarkable achievements of existing learning-based malware detection in both academia and industry, this paper presents MalGuise, a practical black-box adversarial attack framework that evaluates the security risks of existing learning-based Windows malware detection systems under the black-box setting. MalGuise first employs a novel semantics-preserving transformation of call-based redividing to concurrently manipulate both nodes and edges of malware's control-flow graph, making it less noticeable. By employing a Monte-Carlo-tree-search-based optimization, MalGuise then searches for an optimized sequence of call-based redividing transformations to apply to the input Windows malware for evasions. Finally, it reconstructs the adversarial malware file based on the optimized transformation sequence while adhering to Windows executable format constraints, thereby maintaining the same semantics as the original. MalGuise is systematically evaluated against three state-of-the-art learning-based Windows malware detection systems under the black-box setting. Evaluation results demonstrate that MalGuise achieves a remarkably high attack success rate, mostly exceeding 95%, with over 91% of the generated adversarial malware files maintaining the same semantics. Furthermore, MalGuise achieves up to a 74.97% attack success rate against five anti-virus products, highlighting potential tangible security concerns to real-world users. Copyright © 2024, The Authors. All rights reserved.

关键词： Semantics

XTQA: Span-Level Explanations for Textbook Question Answering

学校读者我要写书评

暂无评论

arXiv 2020年

作者： Ma, Jie Chai, Qi Liu, Jun Yin, Qingyu Wang, Pinghui Zheng, Qinghua Ministry of Education of Key Lab for Intelligent Networks and Network Security School of Cyber Science and Engineering Xi’an Jiaotong University Shaanxi Xi’an710049 China Shaanxi Provincial Key Laboratory of Big Data Knowledge Engineering The School of Computer Science and Technology Xi’an Jiaotong University Shaanxi Xi’an710049 China Amazon United States

Textbook Question Answering (TQA) is the task of correctly answering diagram or non-diagram questions given large multi-modal contexts consisting of abundant essays and diagrams. In real-world scenarios, an explainable TQA system plays a key role in deepening humans’ understanding of learned knowledge. However, there is no work to investigate how to provide explanations currently. To address this issue, we devise a novel architecture towards span-level eXplanations for TQA (XTQA). In this paper, spans are the combinations of sentences within a paragraph. The key idea is to consider the entire textual context of a lesson as candidate evidence, and then use our proposed coarse-to-fine grained Explanation Extracting (EE) algorithm to narrow down the evidence scope and extract the span-level explanations with varying lengths for answering different questions. The EE algorithm can also be integrated into other TQA methods to make them explainable and improve the TQA performance. Experimental results show that XTQA obtains the best overall explanation result (mIoU) of 52.38% on the first 300 questions of CK12-QA test splits, demonstrating the explainability of our method (non-diagram: 150 and diagram: 150). The results also show that XTQA achieves the best TQA performance of 36.46% and 36.95% on the aforementioned splits respectively. We have released our code in https://***/dr-majie/*** Codes 68T07 Copyright © 2020, The Authors. All rights reserved.

关键词： Textbooks

Robin: A Novel Method to Produce Robust Interpreters for Deep Learning-Based Code Classifiers

学校读者我要写书评

暂无评论

arXiv 2023年

作者： Li, Zhen Zhang, Ruqian Zou, Deqing Wang, Ning Li, Yating Xu, Shouhuai Chen, Chen Jin, Hai National Engineering Research Center for Big Data Technology and System Services Computing Technology and System Lab Hubei Key Laboratory of Distributed System Security Hubei Engineering Research Center on Big Data Security Cluster and Grid Computing Lab China School of Cyber Science and Engineering Huazhong University of Science and Technology Wuhan430074 China Department of Computer Science University of Colorado Colorado Springs United States Center for Research in Computer Vision University of Central Florida United States School of Computer Science and Technology Huazhong University of Science and Technology Wuhan430074 China

Deep learning has been widely used in source code classification tasks, such as code classification according to their functionalities, code authorship attribution, and vulnerability detection. Unfortunately, the black-box nature of deep learning makes it hard to interpret and understand why a classifier (i.e., classification model) makes a particular prediction on a given example. This lack of interpretability (or explainability) might have hindered their adoption by practitioners because it is not clear when they should or should not trust a classifier's prediction. The lack of interpretability has motivated a number of studies in recent years. However, existing methods are neither robust nor able to cope with out-of-distribution examples. In this paper, we propose a novel method to produce Robust interpreters for a given deep learning-based code classifier;the method is dubbed Robin. The key idea behind Robin is a novel hybrid structure combining an interpreter and two approximators, while leveraging the ideas of adversarial training and data augmentation. Experimental results show that on average the interpreter produced by Robin achieves a 6.11% higher fidelity (evaluated on the classifier), 67.22% higher fidelity (evaluated on the approximator), and 15.87x higher robustness than that of the three existing interpreters we evaluated. Moreover, the interpreter is 47.31% less affected by out-of-distribution examples than that of LEMNA. Copyright © 2023, The Authors. All rights reserved.

关键词： Deep learning

A hybrid-integrated external cavity laser with ultra-wide wavelength tuning range and high side-mode suppression

学校读者我要写书评

暂无评论

A hybrid-integrated external cavity laser with ultra-wide wa...

Optical Fiber Communication Conference, OFC 2016

作者： Guo, Yuyao Li, Xinhang Xu, Weihan Liu, Chuxin Jin, Minhui Lu, Liangjun Xie, Jingya Stroganov, Anton Chen, Jianping Zhou, Linjie State Key Laboratory of Advanced Optical Communication Systems and Networks Shanghai Institute for Advanced Communication and Data Science Department of Electronic Engineering Shanghai Jiao Tong University Shanghai200240 China SJTU-Pinghu Institute of Intelligent Optoelectronics Pinghu314200 China Terahertz Technology Innovation Research Institute Terahertz Spectrum and Imaging Technology Cooperative Innovation Center Shanghai Key Lab of Modern Optical System University of Shanghai for Science and Technology Shanghai200093 China LIGENTEC SA EPFL Innovation Park Bâtiment L Ecublens1024 Switzerland

We present a III-V/Si3N4 hybrid-integrated tunable laser. The laser shows a record of ~170-nm tuning range with a side mode suppression ratio above 64 dB and an intrinsic linewidth below 2.8 kHz. © 2022 The Autho...

ISBN: (纸本)9781943580071

关键词：

Securely Fine-tuning Pre-trained Encoders Against Adversarial Examples

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Zhou, Ziqi Li, Minghui Liu, Wei Hu, Shengshan Zhang, Yechao Wan, Wei Xue, Lulu Zhang, Leo Yu Yao, Dezhong Jin, Hai National Engineering Research Center for Big Data Technology and System China Services Computing Technology and System Lab. China Cluster and Grid Computing Lab. China Hubei Engineering Research Center on Big Data Security China Hubei Key Laboratory of Distributed System Security China School of Computer Science and Technology Huazhong University of Science and Technology China School of Software Engineering Huazhong University of Science and Technology China School of Cyber Science and Engineering Huazhong University of Science and Technology China School of Information and Communication Technology Griffith University Australia

With the evolution of self-supervised learning, the pre-training paradigm has emerged as a predominant solution within the deep learning landscape. Model providers furnish pre-trained encoders designed to function as versatile feature extractors, enabling downstream users to harness the benefits of expansive models with minimal effort through fine-tuning. Nevertheless, recent works have exposed a vulnerability in pre-trained encoders, highlighting their susceptibility to downstream-agnostic adversarial examples (DAEs) meticulously crafted by attackers. The lingering question pertains to the feasibility of fortifying the robustness of downstream models against DAEs, particularly in scenarios where the pre-trained encoders are publicly accessible to the attackers. In this paper, we initially delve into existing defensive mechanisms against adversarial examples within the pre-training paradigm. Our findings reveal that the failure of current defenses stems from the domain shift between pre-training data and downstream tasks, as well as the sensitivity of encoder parameters. In response to these challenges, we propose Genetic Evolution-Nurtured Adversarial Fine-tuning (Gen-AF), a two-stage adversarial fine-tuning approach aimed at enhancing the robustness of downstream models. Gen-AF employs a genetic-directed dual-track adversarial fine-tuning strategy in its first stage to effectively inherit the pre-trained encoder. This involves optimizing the pre-trained encoder and classifier separately while incorporating genetic regularization to preserve the model’s topology. In the second stage, Gen-AF assesses the robust sensitivity of each layer and creates a dictionary, based on which the top-k robust redundant layers are selected with the remaining layers held fixed. Upon this foundation, we conduct evolutionary adaptability fine-tuning to further enhance the model’s generalizability. Our extensive experiments, conducted across ten self-supervised training methods and six

关键词： Topology

MISA: UNVEILING THE VULNERABILITIES IN SPLIT FEDERATED LEARNING

学校读者我要写书评

暂无评论

arXiv 2023年

作者： Wan, Wei Ning, Yuxuan Hu, Shengshan Xue, Lulu Li, Minghui Zhang, Leo Yu Jin, Hai School of Cyber Science and Engineering Huazhong University of Science and Technology China School of Computer Science and Technology Huazhong University of Science and Technology China School of Software Engineering Huazhong University of Science and Technology China School of Information and Communication Technology Griffith University Australia National Engineering Research Center for Big Data Technology and System China Services Computing Technology and System Lab China Hubei Key Laboratory of Distributed System Security China Hubei Engineering Research Center on Big Data Security China Cluster and Grid Computing Lab China

Federated learning (FL) and split learning (SL) are prevailing distributed paradigms in recent years. They both enable shared global model training while keeping data localized on users' devices. The former excels in parallel execution capabilities, while the latter enjoys low dependence on edge computing resources and strong privacy protection. Split federated learning (SFL) combines the strengths of both FL and SL, making it one of the most popular distributed architectures. Furthermore, a recent study has claimed that SFL exhibits robustness against poisoning attacks, with a fivefold improvement compared to FL in terms of robustness. In this paper, we present a novel poisoning attack known as MISA. It poisons both the top and bottom models, causing a misalignment in the global model, ultimately leading to a drastic accuracy collapse. This attack unveils the vulnerabilities in SFL, challenging the conventional belief that SFL is robust against poisoning attacks. Extensive experiments demonstrate that our proposed MISA poses a significant threat to the availability of SFL, underscoring the imperative for academia and industry to accord this matter due attention. Copyright © 2023, The Authors. All rights reserved.

关键词：

Identifying Users Transferring between Transportation Modes: A Stable Matching Approach

学校读者我要写书评

暂无评论

SSRN

SSRN 2023年

作者： Yang, Hongtai Liu, Zheng Kondor, Daniel Han, Ke He, Zhengbing School of Transportation and Logistics National Engineering Laboratory of Integrated Transportation Big Data Application Technology National United Engineering Laboratory of Integrated and Intelligent Transportation Institute of System Science and Engineering Southwest Jiaotong University Chengdu China Complexity Science Hub Vienna Austria Beijing Key Laboratory of Traffic Engineering Beijing University of Technology Beijing China

Travel data containing personal identification information needs to be anonymized before being shared and analyzed for privacy considerations. In a multi-modal transport system with different operators covering one segment of the market and collecting their own customers’ travel data, it is typically difficult to identify the trajectory of the same traveler across these different modes (e.g. shared bikes, metro, bus). This has been the main hurdle to the understanding of complete trip chains and door-to-door travel patterns. To address this challenge, this paper develops TBLink, a method to match individual travelers between different modes. The underlying idea is that if a traveler makes a transfer, the spatial-temporal signatures of the previous and next trips will be similar and must satisfy certain conditions. When this pattern happens for two travelers in the two datasets repeatedly, we can infer that the two travelers are actually the same person. Traveler matching is regarded as a stable matching problem and the Gale-Shapley algorithm is used to solve the problem. TBLink is demonstrated using metro and bus trip data from Chengdu city between January and March 2021. Results show that the precision, recall, and recovery rate of user matching are 80.81%, 92.77%, and 10.56% respectively, and the matching is more reliable as the dataset increases. Sensitivity analysis is performed to study the effect of several model parameters on the matching performance. © 2023, The Authors. All rights reserved.

关键词： Sensitivity analysis

Two-Stage OD Flow Prediction for Emergency in Urban Rail Transit

学校读者我要写书评

暂无评论

IEEE Transactions on intelligent Transportation systems 2024年第1期25卷 920-928页

作者： Zhu, Guangyu Ding, Jiacun Wei, Yun Yi, Yang Xu, Sendren Sheng-Dong Wu, Edmond Q. Beijing Jiaotong University Key Lab. of Transport Industry of Big Data Application Technologies for Comprehensive Transport The Beijing Research Center of Urban Traffic Information Sensing and Service Technologies Beijing100044 China Beijing Mass Transit Railway Operation Corporation Ltd. Beijing100014 China Yangzhou University College of Information Engineering Yangzhou225127 China National Taiwan University of Science and Technology Automation and Control Center The Graduate Institute of Automation and Control Taipei106335 Taiwan Shanghai Jiao Tong University Key Laboratory of System Control and Information Processing Ministry of Education of China The Shanghai Engineering Research Center of Intelligent Control and Management Department of Automation Shanghai200240 China

Urban rail transit (URT) is vulnerable to natural disasters and social emergencies including fire, storm and epidemic (such as COVID-19), and real-time origin-destination (OD) flow prediction provides URT operators with important information to ensure the safety of URT system. However, hindered by the high dimensionality of OD flow and the lack of supportive information reflecting the real-time passenger flow changes, study in this area is at the beginning stage. A novel model consisting of two stages is proposed for OD flow prediction. The first stage predicts the inflows of all stations by Long Short-Term Memory (LSTM) in real time, where the dimension is reduced compared with predicting OD flows directly. In the second stage, the notion of separation rate, namely, the proportion of inbound passengers bounding for another station, is estimated. Finally, The OD flow is predicted by multiplying the inflow and separation rate. Experiments based on Hangzhou Metro dataset show the proposed model outperforms the contrast model in weighted mean average error (WMAE) and weighted mean square error (WMSE). Results also suggest that the proposed prediction model performs better on weekdays than on weekends, and with greater accuracy on larger OD flows. © 2000-2011 IEEE.

关键词： Forecasting

Visible-Thermal Multiple Object Tracking: Large-scale Video dataset and Progressive Fusion Approach

学校读者我要写书评

暂无评论

arXiv 2024年

作者： Zhu, Yabin Wang, Qianwu Li, Chenglong Tang, Jin Huang, Zhixiang The Key Laboratory of Intelligent Computing and Signal Processing Ministry of Education Anhui University School of Public Safety and Emergency Management Anhui University of Science and Technology Hefei231131 China School of Artificial Intelligence Anhui University Hefei230601 China Information Materials and Intelligent Sensing Laboratory of Anhui Province Anhui Provincial Key Laboratory of Security Artificial Intelligence School of Artificial Intelligence Anhui University Hefei230601 China Information Materials and Intelligent Sensing Laboratory of Anhui Province Anhui Provincial Key Laboratory of Multimodal Cognitive Computation School of Computer Science and Technology Anhui University Hefei230601 China Center for Big Data and Population Health of IHM China

The complementary benefits from visible and thermal infrared data are widely utilized in various computer vision task, such as visual tracking, semantic segmentation and object detection, but rarely explored in Multiple Object Tracking (MOT). In this work, we contribute a large-scale Visible-Thermal video benchmark for MOT, called VT-MOT. VT-MOT has the following main advantages. 1) The data is large scale and high diversity. VT-MOT includes 582 video sequence pairs, 401k frame pairs from surveillance, drone, and handheld platforms. 2) The cross-modal alignment is highly accurate. We invite several professionals to perform both spatial and temporal alignment frame by frame. 3) The annotation is dense and high-quality. VT-MOT has 3.99 million annotation boxes annotated and double-checked by professionals, including heavy occlusion and object re-acquisition (object disappear and reappear) challenges. To provide a strong baseline, we design a simple yet effective tracking framework, which effectively fuses temporal information and complementary information of two modalities in a progressive manner, for robust visible-thermal MOT. A comprehensive experiment are conducted on VT-MOT and the results prove the superiority and effectiveness of the proposed method compared with state-of-the-art methods. From the evaluation results and analysis, we specify several potential future directions for visible-thermal MOT. The project is released in https://***/wqw123wqw/PFTrack. Copyright © 2024, The Authors. All rights reserved.

关键词： Semantic Segmentation