Abstract:Malware has been one of the most damaging threats to computers that span across multiple operating systems and various file formats. To defend against ever-increasing and ever-evolving malware, tremendous efforts have been made to propose a variety of malware detection that attempt to effectively and efficiently detect malware so as to mitigate possible damages as early as possible. Recent studies have shown that, on the one hand, existing machine learning (ML) and deep learning (DL) techniques enable superior solutions in detecting newly emerging and previously unseen malware. However, on the other hand, ML and DL models are inherently vulnerable to adversarial attacks in the form of adversarial examples, which are maliciously generated by slightly and carefully perturbing the legitimate inputs to misbehave. Adversarial attacks are initially studied in the domain of computer vision like image classification, and then quickly extended to other domains, including natural language processing, audio recognition, and even malware detection. In this paper, we focus on malware with the file format of portable executable (PE) in the family of Windows operating systems, namely Windows PE malware , as a representative case to study the adversarial attack methods in such adversarial settings. To be specific, we start by first outlining the general learning framework of Windows PE malware detection based on ML/DL and subsequently highlighting three unique challenges of performing adversarial attacks in the context of Windows PE malware. Then, we conduct a comprehensive and systematic review to categorize the state-of-the-art adversarial attacks against PE malware detection, as well as corresponding defenses to increase the robustness of Windows PE malware detection. Finally, we conclude the paper by first presenting other related attacks against Windows PE malware detection beyond the adversarial attacks and then shedding light on future research directions and opportunities.

Practical Attacks on Machine Learning: A Case Study on Adversarial Windows Malware

secml-malware: Pentesting Windows Malware Classifiers with Adversarial EXEmples in Python

Security and Machine Learning in the Real World

Adversarial attacks against Windows PE malware detection: A survey of the state-of-the-art

Functionality-preserving Black-box Optimization of Adversarial Windows Malware

A Survey of Practical Adversarial Example Attacks

Survey of machine learning techniques for malware analysis

Adversarial examples: A survey of attacks and defenses in deep learning-enabled cybersecurity systems

Adversarial Machine Learning for Cybersecurity and Computer Vision: Current Developments and Challenges

Malware Evasion Attack and Defense

A Wolf in Sheep's Clothing: Practical Black-box Adversarial Attacks for Evading Learning-based Windows Malware Detection in the Wild

Auditing static machine learning anti-Malware tools against metamorphic attacks

ATWM: Defense against adversarial malware based on adversarial training

Adversarial Machine Learning Attacks and Defense Methods in the Cyber Security Domain

ATMPA: Attacking Machine Learning-based Malware Visualization Detection Methods via Adversarial Examples

Machine Learning for Windows Malware Detection and Classification: Methods, Challenges and Ongoing Research

Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning

Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection

Creating Valid Adversarial Examples of Malware

The security of machine learning in an adversarial setting: A survey