Deep Learning for Cybersecurity: Assembly Code and Authorship Analytics

到2018.1，加拿大的电子商务销售额预计将达到400亿美元。约75%的加拿大人使用互联网银行。2显然，互联网和许多在线信息系统已成为加拿大关键基础设施的一部分。然而，统计数据也显示，加拿大人--个人、行业和政府--对新一轮网络威胁没有做好充分准备。深度学习是人工神经网络(ANN)的一大进步，ANN是一种受人脑处理信息方式启发的机器学习框架。由于高性能计算的改进，海量数据的可用性，以及人工神经网络，深度学习最近在从下棋到自动驾驶汽车的多个领域显示出许多有希望的突破。我们如何利用深度学习的进步来加强我们网络空间的安全和数据隐私？*本研究计划的长期目标是增强网络安全和隐私社区的大规模数据分析能力，使安全专业人员能够高效地应对安全事件，数据托管人员可以有效地保护客户的数据隐私。在这个为期5年的研究计划中，我将重点关注以下两个短期目标。*第一个目标是增强网络安全专业人员在汇编代码分析方面的深度学习能力，并为他们提供新一代软件逆向工程方法和工具，以有效地理解良性软件和恶意软件二进制程序的内部工作原理。具体地说，该团队将利用深度学习技术开发汇编代码搜索引擎和描述生成器。申请者与公共和私营部门的网络安全专业人员密切合作；研究成果将直接增强加拿大网络空间的安全。这些项目将是开源的；因此，结果也将有利于软件逆向工程和机器学习社区。*第二个目标是为数据保管人或个人互联网用户提供发布数字文本文档的能力，例如产品评论、评论文章、博客等，而不会因为作者的数字写作风格而损害其身份。交付内容将包括一个开源的保护隐私的文本释义引擎。研究结果将增强社交媒体用户的匿名性，进而促进网络自由和打击社交媒体审查。研究结果还将为数据保管人在分享其管理的文本数据时提供额外的隐私保护。这也将间接促进开放数据运动。*1 www.pfsweb.com/blog/2016-canada-ecommerce-market***2 www.cba.ca/科技与银行

E-commerce sales in Canada are expected to reach $40 billion by 2018.1 Approximately 75% of Canadians use Internet banking.2 Clearly, the Internet and many online information systems have become part of the critical infrastructure of Canada. However, statistics also show that Canadians – individuals, industry, and government – are not well-prepared for new waves of cyber threats. Deep learning is a major advancement of artificial neural network (ANN), which is a machine learning framework inspired by how the human brain processes information. Due to improvement in high-performance computing, availability of huge volumes of data, and ANN, deep learning has recently shown many promising breakthroughs in multiple areas, from playing chess to self-driving cars. How can we utilize the advancement of deep learning to strengthen the security of our cyberspace and data privacy?******The long-term objective of this research program is to enhance the large-scale data analytic capabilities of the cybersecurity and privacy communities so that security professionals can efficiently respond to security incidents and data custodians can effectively protect their clients' data privacy. In this 5-year research program I will focus on the following two short-term objectives.******The first objective is to enhance the cybersecurity professionals' deep learning capability on assembly code analytics and provide them a new generation of software reverse engineering methods and tools to efficiently understand the inner workings of benign software and malware binaries. Specifically, the team will develop an assembly code search engine and a description generator using deep learning technology. The applicant closely collaborates with cybersecurity professionals in both public and private sectors; the research results will directly enhance the security of Canadian cyberspace. The projects will be open source; therefore, the results will also benefit the software reverse engineering and machine-learning communities.******The second objective is to provide data custodians or individual Internet users with the capability of releasing digital textual documents, e.g., product reviews, opinion articles, blogs, etc., without compromising the identity of the authors due to their digital writing styles. The deliverable will include an open-source privacy-preserving text paraphrasing engine. The research result will enhance the anonymity of users in social media, which in turn promotes web freedom and the fight against social media censorship. The research result will also provide data custodians with an addition layer of privacy protection when they share their administered textual data. This will also indirectly contribute to the open data movement. ******1 www.pfsweb.com/blog/2016-canada-ecommerce-market***2 www.cba.ca/technology-and-banking