Abstract:For efficient malware detection, there are more and more deep learning methods based on raw software binaries. Recent studies show that deep learning models can easily be fooled to make a wrong decision by introducing subtle perturbations to inputs, which attracts a large influx of work in adversarial attacks. However, most of the existing attack methods are based on manual features (e.g., API calls) or in the white-box setting, making the attacks impractical in current real-world scenarios. In this work, we propose a novel attack framework called GAPGAN, which generates adversarial payloads (padding bytes) with generative adversarial networks (GANs). To the best of our knowledge, it is the first work that performs endto-end black-box attacks at the byte-level against deep learning based malware binaries detection. In our attack framework, we map input discrete malware binaries to continuous space, then feed it to the generator of GAPGAN to generate adversarial payloads. We append payloads to the original binaries to craft an adversarial sample while preserving its functionality. We propose to use a dynamic threshold for reducing the loss of the effectiveness of the payloads when mapping it from continuous format back to the original discrete format. For balancing the attention of the generator to the payloads and the adversarial samples, we use an automatic weight tuning strategy. We train GAPGAN with both malicious and benign software. Once the training is finished, the generator can generate an adversarial sample with only the input malware in less than twenty milliseconds. We apply GAPGAN to attack the state-of-the-art detector MalConv and achieve 100% attack success rate with only appending payloads of 2.5% of the total length of the data for detection. We also attack deep learning models with different structures under different defense methods. The experiments show that GAPGAN outperforms other state-of-the-art attack models in efficiency and effectiveness.

Deep Graph Neural Networks for Malware Detection Using Ghidra P-Code

Black-Box Adversarial Attacks Against Deep Learning Based Malware Binaries Detection with GAN

MalGraph: Hierarchical Graph Neural Networks for Robust Windows Malware Detection

Malware Analysis Using Machine Learning and Deep Learning Techniques

Malware Detection by Control-Flow Graph Level Representation Learning With Graph Isomorphism Network

Deep Neural Network Based Malware Detection Using Two Dimensional Binary Program Features

Classifying Malware Represented As Control Flow Graphs Using Deep Graph Convolutional Neural Network

Using deep graph learning to improve dynamic analysis-based malware detection in PE files

An Efficient DenseNet-Based Deep Learning Model for Malware Detection

Mal2GCN: A Robust Malware Detection Approach Using Deep Graph Convolutional Networks With Non-Negative Weights

A Comparison of Graph Neural Networks for Malware Classification

Semantics-Preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection

Malware Detected and Tell MeWhy: An Verifiable Malware Detection Model with Graph Metric Learning

Deep learning-aided runtime opcode-based Windows malware detection

Semantic-preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection

Behavioral Malware Detection Using Deep Graph Convolutional Neural Networks

An unknown malware detection scheme based on the features of graph

DeepMAL -- Deep Learning Models for Malware Traffic Detection and Classification

An investigation of a deep learning based malware detection system

SCGDet: Malware Detection using Semantic Features Based on Reachability Relation

Feature graph construction with static features for malware detection