AI based Antivirus: Can AlphaAV Win the Battle in which Man Has Failed?

Presented at Black Hat Europe 2016, Nov. 4, 2016, 3:30 p.m. (30 minutes)

This talk will introduce our work on AI based Antivirus using deep learning. We can control the false positive rate less than 0.05% and false negative rate less than 12%. We think it's OK for production and it's already in production since Jan 2016.<br> Android malware can often evade anti-malware security software if the author changes a few lines of code or designs the program to automatically mutate before each new infection or add shell on their app. <br><br> Deep learning involves training an artificial neural network with many layers of simulated neurons using huge quantities of data. The networks trained to recognize the characteristics of malicious code by looking at ten million of examples of malware and non-malware files, could offer a far better way to catch such malicious code.<br><br> We build a deep learning system for Android anti-malware. We select high-quality app features data with only a little size, and use innovative normalization preprocessing, unique activation function and advanced multilayer artificial neural network to recognize the unknown malware variants and defense zero-day attacks. Our deep learning system has high precision (99.96%) and high recall (88%).

Presenters:

  • Zhijun Jia - Staff Malware Researcher, Baidu Inc.
    Zhijun Jia has 10+ years security experience. He is expert of mobile malware research.
  • Yanyan Ji - Staff Security Engineer, Baidu Inc.
    Yanyan Ji has 10+ security experience.
  • Thomas Lei Wang - Technical Director, Baidu Inc.
    Thomas Lei Wang has over 12 years work experience in security industry. He joined Baidu Security in early 2013. Before Baidu, he used to work for Websense, Trend Micro and Fortinet. He founded TrustGo Security Labs in 2011. His research focuses on malware defense. He is very experienced in building a full functional security team with research, engineering and product development.
  • Liuping Hou - Staff Security Engineer, Baidu Inc.
    Liuping Hou has 10+ security experience. He is expert of Anti-Malware.
  • Jinke Liu - &nbsp;, Baidu
    Jinke Liu joined Baidu in 2014. His job is use machine learning to identify malware.

Links:

Similar Presentations: