一种基于改进深度残差收缩网络的恶意应用检测方法

Detection of malicious applications based on improved deep residual shrinkage network

恶意应用的快速增长给移动智能终端带来了巨大的安全威胁,实现恶意应用高精度检测对移动网络信息安全具有重要意义.本文提出一种基于改进深度残差收缩网络的恶意应用检测方法.首先将流量特征预处理成卷积神经网络输入,接着引入通道注意力机制和空间注意力机制,从通道和空间两个维度对样本特征进行加权.然后再引入深度残差收缩网络,自适应滤除样本冗余特征并通过恒等连接优化参数反向传播,减小模型训练和分类的难度,最终实现安卓恶意应用高精度识别.所提方法可避免手工提取特征,能实现高精度分类并且具有一定泛化能力.实验结果表明,所提方法在恶意应用的2分类、4分类和42分类中准确率分别为99.40%、99.95%和97.33%,与现有方法相比,具有较高的分类性能与泛化能力.

The rapid growth of malicious applications has posed a security threat to mobile intelligent terminals.It is of great significance to achieve high-precision detection of malicious applications for mobile network information security.Here,this paper proposes a method to detect malicious applications based on improved deep residual shrinkage network.First,the traffic features are preprocessed into convolutional neural network inputs,and then the channel attention mechanism and spatial attention mechanism are introduced to weight the sample features from the channel and spatial dimensions.Then,the deep residual shrinkage network is introduced to adaptively filter out the redundant features of the samples,and the parameters are back propagated through the identical connection optimization,so as to reduce the difficulty of model training and classification,and finally realize the high-precision identification of malicious android applications.The proposed method avoids manual feature extraction,achieves high-precision classification and has certain generalization ability.Experimental results show that the accuracy of the proposed method is 99.40%,99.95%and 97.33%in 2-classification,4-classification and 42-classification of malicious applications,respectively.Compared with the existing methods,the proposed method has better classification performance and generalization ability.