Improving Gmail Malicious Document Detection with Deep Learning
Gmail protects your incoming mail against spam, phishing attempts, and malware. Now Gmail Malicious Document Detection works with the Help of Deep Learning. Gmail existing machine learning models are highly effective at doing this, and in conjunction with our other protections, they help block more than 99.9% of threats from reaching Gmail inboxes.
Gmail Malicious Document Detection - Old Scanner
One of gmail key protections is gmail malware scanner that processes more than 300 billion attachments each week to block harmful content. 63% percent of the malicious documents we block differ from day to day. To stay ahead of this constantly evolving threat, we recently added a new generation of document scanners that rely on deep learning to improve our detection capabilities.
Gmail Malicious Document Detection Using New Scanner and Working with Deep Learning
TensorFlow
Since the new scanner launched at the end of 2019, google increased gmail daily detection coverage of Office documents that contain malicious scripts by 10%. Gmail technology is especially helpful at detecting adversarial, bursty attacks. In these cases, gmail new scanner has improved gmail detection rate by 150%. Under the hood, gmail new scanner uses a distinct TensorFlow deep-learning model trained with TFX (TensorFlow Extended) and a custom document analyzer for each file type. The document analyzers are responsible for parsing the document, identifying common attack patterns, extracting macros, deobfuscating content, and performing feature extraction.
Strengthening gmail document detection capabilities is one of gmail key focus areas, as malicious documents represent 58% of the malware targeting Gmail users. Gmail are still actively developing this technology, and right now, gmail only use it to scan Office documents.
Gmail new scanner runs in parallel with existing detection capabilities, all of which contribute to the final verdict of gmail decision engine to block a malicious document. Combining different scanners is one of the cornerstones of our defense-in-depth approach to help protect users and ensure our detection system is resilient to adversarial attacks.
Gmail will continue to actively expand the use of artificial intelligence to protect gmail users’ inboxes, and to stay ahead of attacks.