{"data":{"id":"10.48550/arxiv.2309.01866","type":"dois","attributes":{"doi":"10.48550/arxiv.2309.01866","prefix":"10.48550","suffix":"arxiv.2309.01866","identifiers":[{"identifier":"2309.01866","identifierType":"arXiv"}],"alternateIdentifiers":[{"alternateIdentifierType":"arXiv","alternateIdentifier":"2309.01866"}],"creators":[{"name":"He, Ping","nameType":"Personal","givenName":"Ping","familyName":"He","affiliation":[],"nameIdentifiers":[]},{"name":"Xia, Yifan","nameType":"Personal","givenName":"Yifan","familyName":"Xia","affiliation":[],"nameIdentifiers":[]},{"name":"Zhang, Xuhong","nameType":"Personal","givenName":"Xuhong","familyName":"Zhang","affiliation":[],"nameIdentifiers":[]},{"name":"Ji, Shouling","nameType":"Personal","givenName":"Shouling","familyName":"Ji","affiliation":[],"nameIdentifiers":[]}],"titles":[{"title":"Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Setting"}],"publisher":"arXiv","container":{},"publicationYear":2023,"subjects":[{"lang":"en","subject":"Cryptography and Security (cs.CR)","subjectScheme":"arXiv"},{"lang":"en","subject":"Artificial Intelligence (cs.AI)","subjectScheme":"arXiv"},{"lang":"en","subject":"Machine Learning (cs.LG)","subjectScheme":"arXiv"},{"lang":"en","subject":"Software Engineering (cs.SE)","subjectScheme":"arXiv"},{"subject":"FOS: Computer and information sciences","subjectScheme":"Fields of Science and Technology (FOS)"},{"subject":"FOS: Computer and information sciences","schemeUri":"http://www.oecd.org/science/inno/38235147.pdf","subjectScheme":"Fields of Science and Technology (FOS)"}],"contributors":[],"dates":[{"date":"2023-09-05T00:14:12Z","dateType":"Submitted","dateInformation":"v1"},{"date":"2023-09-06T01:11:00Z","dateType":"Updated","dateInformation":"v1"},{"date":"2023-09-06T11:50:03Z","dateType":"Submitted","dateInformation":"v2"},{"date":"2023-09-07T00:23:03Z","dateType":"Updated","dateInformation":"v2"},{"date":"2023-09","dateType":"Available","dateInformation":"v1"},{"date":"2023","dateType":"Issued"}],"language":null,"types":{"ris":"GEN","bibtex":"misc","citeproc":"article","schemaOrg":"CreativeWork","resourceType":"Article","resourceTypeGeneral":"Preprint"},"relatedIdentifiers":[],"relatedItems":[],"sizes":[],"formats":[],"version":"2","rightsList":[{"rights":"Creative Commons Attribution Non Commercial No Derivatives 4.0 International","rightsUri":"https://creativecommons.org/licenses/by-nc-nd/4.0/legalcode","schemeUri":"https://spdx.org/licenses/","rightsIdentifier":"cc-by-nc-nd-4.0","rightsIdentifierScheme":"SPDX"}],"descriptions":[{"description":"The widespread adoption of the Android operating system has made malicious Android applications an appealing target for attackers. Machine learning-based (ML-based) Android malware detection (AMD) methods are crucial in addressing this problem; however, their vulnerability to adversarial examples raises concerns. Current attacks against ML-based AMD methods demonstrate remarkable performance but rely on strong assumptions that may not be realistic in real-world scenarios, e.g., the knowledge requirements about feature space, model parameters, and training dataset. To address this limitation, we introduce AdvDroidZero, an efficient query-based attack framework against ML-based AMD methods that operates under the zero knowledge setting. Our extensive evaluation shows that AdvDroidZero is effective against various mainstream ML-based AMD methods, in particular, state-of-the-art such methods and real-world antivirus solutions.","descriptionType":"Abstract"},{"description":"To Appear in the ACM Conference on Computer and Communications Security, November, 2023","descriptionType":"Other"}],"geoLocations":[],"fundingReferences":[],"xml":"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","url":"https://arxiv.org/abs/2309.01866","contentUrl":null,"metadataVersion":0,"schemaVersion":"http://datacite.org/schema/kernel-4","source":"mds","isActive":true,"state":"findable","reason":null,"viewCount":0,"viewsOverTime":[],"downloadCount":0,"downloadsOverTime":[],"referenceCount":0,"citationCount":0,"citationsOverTime":[],"partCount":0,"partOfCount":0,"versionCount":0,"versionOfCount":0,"created":"2023-09-07T14:51:28.000Z","registered":"2023-09-07T14:51:29.000Z","published":"2023","updated":"2023-09-07T14:51:29.000Z"},"relationships":{"client":{"data":{"id":"arxiv.content","type":"clients"}},"provider":{"data":{"id":"arxiv","type":"providers"}},"media":{"data":{"id":"10.48550/arxiv.2309.01866","type":"media"}},"references":{"data":[]},"citations":{"data":[]},"parts":{"data":[]},"partOf":{"data":[]},"versions":{"data":[]},"versionOf":{"data":[]}}}}