Backdoor attack method and apparatus for malicious URL detection system

An electronic device, comprising:

• at least one processor;
• and
• a memory communicatively coupled to the at least one processor;
• wherein the memory stores instructions executable by the at least one processor, and when the instructions are executed by the at least one processor, the at least one processor is configured to:
• obtain original URL samples of backdoor URL samples to be generated;
• determine position information of separator slashes in each URL of the original URL sample, and obtain a position number result by numbering the position information;
• determine a backdoor attack mode of a malicious URL detection system based on the position number result, and generate the backdoor URL samples corresponding to the original URL samples by using the backdoor attack mode;
• and
• establish a training set based on a preset ratio of the backdoor URL samples, train a neural network model by using the training set, and test an attack strength of the malicious URL detection system in the backdoor attack mode by using the trained neural network model to obtain a real-time attack success rate;
• wherein the at least one processor is further configured to:
• determine positions of a first number of separator slashes selected from the URLs of the original URL samples and determine a position serial number corresponding to each selected separator slash;
• determine the backdoor attack mode of the malicious URL detection system based on the position serial numbers and a second number of separator slashes;
• and
• generate the backdoor URL samples corresponding to all the original URL samples based on the determined backdoor attack mode;
• wherein the at least one processor is further configured to:
• obtain word features, character features and statistical features of the URL sample in the training set;
• construct the neural network model for processing the character features and the word features, and train the neural network model to obtain a trained neural network model;
• and
• construct a multi-feature representation of the word features, the character features and the statistical features of the URL sample, and obtain a test result of real-time attack success rate by inputting the multi-feature representation to the trained neural network model for testing the attack strength of the malicious URL detection system in the backdoor attack mode.

A non-transitory computer-readable storage medium, having computer instructions stored thereon, wherein the computer instructions are configured to cause a computer to execute a backdoor attack method for a malicious URL detection system, the backdoor attack method comprises:

• obtaining original URL samples of backdoor URL samples to be generated;
• determining position information of separator slashes in each URL of the original URL samples, and obtaining a position number result by numbering the position information;
• determining a backdoor attack mode of the malicious URL detection system based on the position number result, and generating the backdoor URL samples corresponding to the original URL samples by using the backdoor attack mode;
• and
• constructing a training set based on a preset ratio of the backdoor URL samples, training a neural network model by using the training set, and testing an attack strength of the malicious URL detection system in the backdoor attack mode by using the trained neural network model to obtain a real-time attack success rate;
• wherein determining the backdoor attack mode of the malicious URL detection system based on the position number result, and generating the backdoor URL samples corresponding to the original URL samples by using the backdoor attack mode, comprise:
• determining positions of a first number of separator slashes selected from the URLs of the original URL samples and determining a position serial number corresponding to each selected separator slash;
• determining the backdoor attack mode of the malicious URL detection system based on the position serial numbers and a second number of separator slashes;
• and
• generating the backdoor URL samples corresponding to all the original URL samples based on the determined backdoor attack mode;
• wherein constructing the training set based on the preset ratio of the backdoor URL samples, training the neural network model by using the training set, and testing the attack strength of the malicious URL detection system in the backdoor attack mode by using the trained neural network model to obtain the real-time attack success rate, comprise:
• obtaining word features, character features and statistical features of the URL sample in the training set;
• constructing the neural network model for processing the character features and the word features, and training the neural network model to obtain a trained neural network model;
• and
• constructing a multi-feature representation of the word features, the character features and the statistical features of the URL sample, and obtaining a test result of the real-time attack success rate by inputting the multi-feature representation to the trained neural network model for testing the attack strength of the malicious URL detection system in the backdoor attack mode.