摘要
智能软件作为人工智能技术快速发展的代表性应用之一,在解决软件工程类问题、提高软件运行效率方面发挥着关键作用,但其安全问题也逐渐受到关注。后门攻击作为一种常见的软件攻击方式,攻击者可通过操控在软件中隐藏的恶意功能控制软件行为,从而窃取数据或执行其他恶意操作,给用户带来巨大的安全威胁。为此,从软件工程角度进行综述,首先介绍后门攻击的基本概念、分类及与其他攻击方法的比较;其次分析后门攻击的常见手段并进行比较;最后讨论防御后门攻击的策略与技术,结合智能软件中的深度神经网络模型对后门植入检测与防御相关方法进行归纳、比较与展望。研究后门攻击与防御技术可以促进软件产业的创新发展,提高软件的安全性与可靠性。
Intelligent software,as one of the representative applications of the rapid development of artificial intelligence technology,plays a crucial role in solving software engineering problems,improving software operation efficiency.However,the security issues it brings are gradu-ally receiving attention.Backdoor attack,as a common software attack method,allows attackers to control software behavior by manipulating malicious functions hidden within the software,thereby stealing data or performing other malicious operations,posing a huge security threat to users.To this end,a review is conducted from the perspective of software engineering.Firstly,the basic concept,classification,and compari-son with other attack methods of backdoor attacks are introduced;Then analyze and compare the common methods of backdoor attacks;Final-ly,we will discuss the strategies and techniques for defending against backdoor attacks,and summarize,compare,and prospect the methods related to backdoor implantation and detection defense,combined with deep neural network models in intelligent software.Studying backdoor attacks and defense technologies can promote innovative development in the software industry,improve software security and reliability.
作者
肖子勤
史涯晴
曲豫宾
王兴亚
姚永明
XIAO Ziqin;SHI Yaqing;QU Yubin;WANG Xingya;YAO Yongming(School of Command and Control Engineering,Army Engineering University of the PLA,Nanjing 210001,China;School of Computer Science and Technology,Nanjing University of Technology,Nanjing 210007,China)
出处
《软件导刊》
2024年第6期185-197,共13页
Software Guide
基金
国家自然科学基金项目(61702544)。
关键词
智能软件
深度学习
后门攻防
模型安全
intelligent software
deep learning
backdoor attack and defense
model security