Abstract:For efficient malware detection, there are more and more deep learning methods based on raw software binaries. Recent studies show that deep learning models can easily be fooled to make a wrong decision by introducing subtle perturbations to inputs, which attracts a large influx of work in adversarial attacks. However, most of the existing attack methods are based on manual features (e.g., API calls) or in the white-box setting, making the attacks impractical in current real-world scenarios. In this work, we propose a novel attack framework called GAPGAN, which generates adversarial payloads (padding bytes) with generative adversarial networks (GANs). To the best of our knowledge, it is the first work that performs endto-end black-box attacks at the byte-level against deep learning based malware binaries detection. In our attack framework, we map input discrete malware binaries to continuous space, then feed it to the generator of GAPGAN to generate adversarial payloads. We append payloads to the original binaries to craft an adversarial sample while preserving its functionality. We propose to use a dynamic threshold for reducing the loss of the effectiveness of the payloads when mapping it from continuous format back to the original discrete format. For balancing the attention of the generator to the payloads and the adversarial samples, we use an automatic weight tuning strategy. We train GAPGAN with both malicious and benign software. Once the training is finished, the generator can generate an adversarial sample with only the input malware in less than twenty milliseconds. We apply GAPGAN to attack the state-of-the-art detector MalConv and achieve 100% attack success rate with only appending payloads of 2.5% of the total length of the data for detection. We also attack deep learning models with different structures under different defense methods. The experiments show that GAPGAN outperforms other state-of-the-art attack models in efficiency and effectiveness.

Improving Detection Accuracy for Malicious JavaScript Using GAN.

Black-Box Adversarial Attacks Against Deep Learning Based Malware Binaries Detection with GAN

A deep learning approach for detecting malicious JavaScript code

CNN‐ and GAN‐based classification of malicious code families: A code visualization approach

Efficient Malware Detection Using Hybrid Approach of Transfer Learning and Generative Adversarial Examples with Image Representation

Obfuscated Malicious Javascript Detection by Machine Learning

Detecting Malicious JavaScript Code Based on Semantic Analysis.

Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN.

Evading Pdf Malware Classifiers With Generative Adversarial Network

Leveraging LSTM and GAN for Modern Malware Detection

N-gram MalGAN: Evading machine learning detection via feature n-gram

Improving Android Malware Detection Through Data Augmentation Using Wasserstein Generative Adversarial Networks

JStrong: Malicious JavaScript detection based on code semantic representation and graph neural network

Malicious JavaScript Code Detection Based on Hybrid Analysis

Efficient Malware Originated Traffic Classification by Using Generative Adversarial Networks

The GANfather: Controllable generation of malicious activity to improve defence systems

Query-Free Evasion Attacks Against Machine Learning-Based Malware Detectors with Generative Adversarial Networks

Advanced Cyber Attack Detection Using Generative Adversarial Networks and NLP

Detection of Malicious Code Variants Based on Deep Learning

A Visualized Malware Detection Framework with CNN and Conditional GAN

Malicious Web Pages Detection Based On Abnormal Visibility Recognition