東華大學圖書館 |

Language: English

Help

回圖書館首頁

手機版館藏查詢

Back

Switch To: Labeled | MARC Mode | ISBD

Evasion-Aware Botnet Detection Using...

Randhawa, Rizwan Hamid.

Linked to FindBook

Google Book

Amazon

博客來

Evasion-Aware Botnet Detection Using Artificial Intelligence.

Record Type:	Electronic resources : Monograph/item
Title/Author:	Evasion-Aware Botnet Detection Using Artificial Intelligence./
Author:	Randhawa, Rizwan Hamid.
Published:	Ann Arbor : ProQuest Dissertations & Theses, : 2023,
Description:	151 p.
Notes:	Source: Dissertations Abstracts International, Volume: 85-03, Section: B.
Contained By:	Dissertations Abstracts International85-03B.
Subject:	Computer security. -
Online resource:	https://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=30558011
ISBN:	9798380259750

Evasion-Aware Botnet Detection Using Artificial Intelligence.
Randhawa, Rizwan Hamid.

Evasion-Aware Botnet Detection Using Artificial Intelligence. - Ann Arbor : ProQuest Dissertations & Theses, 2023 - 151 p.

Source: Dissertations Abstracts International, Volume: 85-03, Section: B.

Thesis (Ph.D.)--University of Northumbria at Newcastle (United Kingdom), 2023.

Adversarial evasions are modern threats to Machine Learning (ML) based applications. Due to the vulnerabilities in the classic ML inference systems, botnet detectors are equally likely to be attacked using adversarial examples. The evasions can be generated using sophisticated attack strategies using complex AI models. Generative AI models are one of the candidates to spawn evasion attacks. The other significant concern is the data scarcity due to which ML classifiers become biased toward the majority class samples during training. This research proposes novel techniques to improve the detection accuracy of botnet classifiers to mitigate the effects of adversarial evasion and data scarcity. The ultimate goal is to design a sophisticated botnet detector that is adversarially aware in low data regimes. First, the technical background of the research is mentioned to help understand the problem and the potential solutions. Second, a Generative Adversarial Network (GAN) based model called Botshot is proposed to address the dataset imbalance issues using Adversarial Training (AT). Botshot gives promising results in contrast to the most voguish ML classifiers that can be fooled by adversarial samples by 100%. Botshotimproves the detection accuracy up to 99.74% after AT as the best case scenario in one of the botnet datasets used. Third, an evasion-aware model called Evasion Generative Adversarial Network (EVAGAN) for botnet detection in low data regimes is presented. EVAGAN outperforms the state-of-the-art Auxiliary Classifier Generative Adversarial Network (ACGAN) in detection performance, stability, and time complexity. Last, an improved version of EVAGAN called deep Reinforcement Learning based Generative Adversarial Network (RELEVAGAN) is bid to make the EVAGAN further hardened against evasion attacks and preserve the attack sample semantics. The rationale is proactively attacking the detection model with a Deep Reinforcement Learning (DRL) agent to know the possible unseen functionality-preserving adversarial evasions. The attacks are conducted during the EVAGAN training to adjust the network weights for learning perturbations crafted by the agent. RELEVAGAN, like its parent model, does not require AT for the ML classifiers since it can act as an adversarial-aware botnet detection model. The experimental results show the RELEVAGAN's supremacy over EVAGAN in terms of early conver gence. RELEVAGAN is one step further toward designing an evasion-aware and functionalitypreserving botnet detection model that tends to be sustainable with evolving botnets with the help of DRL.

ISBN: 9798380259750Subjects--Topical Terms:

540555
Computer security.

Evasion-Aware Botnet Detection Using Artificial Intelligence.
LDR:03629nmm a2200313 4500 001 2403743
005 20241125080205.5
006 m o d
007 cr#unu||||||||
008 251215s2023 ||||||||||||||||| ||eng d
020 $a 9798380259750
035 $a (MiAaPQ)AAI30558011
035 $a (MiAaPQ)Northumbria_51569
035 $a AAI30558011
040 $a MiAaPQ $c MiAaPQ
100 1 $a Randhawa, Rizwan Hamid. $3 3774023
245 1 0 $a Evasion-Aware Botnet Detection Using Artificial Intelligence.
260 1 $a Ann Arbor : $b ProQuest Dissertations & Theses, $c 2023
300 $a 151 p.
500 $a Source: Dissertations Abstracts International, Volume: 85-03, Section: B.
500 $a Advisor: Aslam, Nauman;Shum, Hubert.
502 $a Thesis (Ph.D.)--University of Northumbria at Newcastle (United Kingdom), 2023.
520 $a Adversarial evasions are modern threats to Machine Learning (ML) based applications. Due to the vulnerabilities in the classic ML inference systems, botnet detectors are equally likely to be attacked using adversarial examples. The evasions can be generated using sophisticated attack strategies using complex AI models. Generative AI models are one of the candidates to spawn evasion attacks. The other significant concern is the data scarcity due to which ML classifiers become biased toward the majority class samples during training. This research proposes novel techniques to improve the detection accuracy of botnet classifiers to mitigate the effects of adversarial evasion and data scarcity. The ultimate goal is to design a sophisticated botnet detector that is adversarially aware in low data regimes. First, the technical background of the research is mentioned to help understand the problem and the potential solutions. Second, a Generative Adversarial Network (GAN) based model called Botshot is proposed to address the dataset imbalance issues using Adversarial Training (AT). Botshot gives promising results in contrast to the most voguish ML classifiers that can be fooled by adversarial samples by 100%. Botshotimproves the detection accuracy up to 99.74% after AT as the best case scenario in one of the botnet datasets used. Third, an evasion-aware model called Evasion Generative Adversarial Network (EVAGAN) for botnet detection in low data regimes is presented. EVAGAN outperforms the state-of-the-art Auxiliary Classifier Generative Adversarial Network (ACGAN) in detection performance, stability, and time complexity. Last, an improved version of EVAGAN called deep Reinforcement Learning based Generative Adversarial Network (RELEVAGAN) is bid to make the EVAGAN further hardened against evasion attacks and preserve the attack sample semantics. The rationale is proactively attacking the detection model with a Deep Reinforcement Learning (DRL) agent to know the possible unseen functionality-preserving adversarial evasions. The attacks are conducted during the EVAGAN training to adjust the network weights for learning perturbations crafted by the agent. RELEVAGAN, like its parent model, does not require AT for the ML classifiers since it can act as an adversarial-aware botnet detection model. The experimental results show the RELEVAGAN's supremacy over EVAGAN in terms of early conver gence. RELEVAGAN is one step further toward designing an evasion-aware and functionalitypreserving botnet detection model that tends to be sustainable with evolving botnets with the help of DRL.
590 $a School code: 5060.
650 4 $a Computer security. $3 540555
650 4 $a Sensors. $3 3549539
650 4 $a Computer science. $3 523869
690 $a 0984
710 2 $a University of Northumbria at Newcastle (United Kingdom). $3 3545556
773 0 $t Dissertations Abstracts International $g 85-03B.
790 $a 5060
791 $a Ph.D.
792 $a 2023
793 $a English
856 4 0 $u https://pqdd.sinica.edu.tw/twdaoapp/servlet/advanced?query=30558011