TY - GEN
T1 - Identifying ATTCK Tactics in Android Malware Control Flow Graph Through Graph Representation Learning and Interpretability
AU - Fairbanks, Jeffrey
AU - Orbe, Andres
AU - Patterson, Christine
AU - Layne, Janet
AU - Serra, Edoardo
AU - Scheepers, Marion
N1 - Publisher Copyright:
© 2021 IEEE.
PY - 2021
Y1 - 2021
N2 - To mitigate a malware threat it is important to understand the malware's behavior. The MITRE ATTACK ontology specifies an enumeration of tactics, techniques, and procedures (TTP) that characterize malware. However, absent are automated procedures that would characterize, given the malware executable, which part of the execution flow is connected with a specific TTP. This paper is the first in providing an automation methodology to locate TTP in a sub-part of the control flow graph that describes the execution flow of a mal-ware executable. This methodology merges graph representation learning and tools for machine learning explanation.
AB - To mitigate a malware threat it is important to understand the malware's behavior. The MITRE ATTACK ontology specifies an enumeration of tactics, techniques, and procedures (TTP) that characterize malware. However, absent are automated procedures that would characterize, given the malware executable, which part of the execution flow is connected with a specific TTP. This paper is the first in providing an automation methodology to locate TTP in a sub-part of the control flow graph that describes the execution flow of a mal-ware executable. This methodology merges graph representation learning and tools for machine learning explanation.
KW - Control Flow Graph
KW - Graph Representation Learning
KW - Machine Learning Interpretability
KW - Malware Tactics Classification
UR - http://www.scopus.com/inward/record.url?scp=85125360808&partnerID=8YFLogxK
U2 - 10.1109/BigData52589.2021.9671343
DO - 10.1109/BigData52589.2021.9671343
M3 - Conference contribution
AN - SCOPUS:85125360808
T3 - Proceedings - 2021 IEEE International Conference on Big Data, Big Data 2021
SP - 5602
EP - 5608
BT - Proceedings - 2021 IEEE International Conference on Big Data, Big Data 2021
A2 - Chen, Yixin
A2 - Ludwig, Heiko
A2 - Tu, Yicheng
A2 - Fayyad, Usama
A2 - Zhu, Xingquan
A2 - Hu, Xiaohua Tony
A2 - Byna, Suren
A2 - Liu, Xiong
A2 - Zhang, Jianping
A2 - Pan, Shirui
A2 - Papalexakis, Vagelis
A2 - Wang, Jianwu
A2 - Cuzzocrea, Alfredo
A2 - Ordonez, Carlos
PB - Institute of Electrical and Electronics Engineers Inc.
T2 - 2021 IEEE International Conference on Big Data, Big Data 2021
Y2 - 15 December 2021 through 18 December 2021
ER -