Abstract:For efficient malware detection, there are more and more deep learning methods based on raw software binaries. Recent studies show that deep learning models can easily be fooled to make a wrong decision by introducing subtle perturbations to inputs, which attracts a large influx of work in adversarial attacks. However, most of the existing attack methods are based on manual features (e.g., API calls) or in the white-box setting, making the attacks impractical in current real-world scenarios. In this work, we propose a novel attack framework called GAPGAN, which generates adversarial payloads (padding bytes) with generative adversarial networks (GANs). To the best of our knowledge, it is the first work that performs endto-end black-box attacks at the byte-level against deep learning based malware binaries detection. In our attack framework, we map input discrete malware binaries to continuous space, then feed it to the generator of GAPGAN to generate adversarial payloads. We append payloads to the original binaries to craft an adversarial sample while preserving its functionality. We propose to use a dynamic threshold for reducing the loss of the effectiveness of the payloads when mapping it from continuous format back to the original discrete format. For balancing the attention of the generator to the payloads and the adversarial samples, we use an automatic weight tuning strategy. We train GAPGAN with both malicious and benign software. Once the training is finished, the generator can generate an adversarial sample with only the input malware in less than twenty milliseconds. We apply GAPGAN to attack the state-of-the-art detector MalConv and achieve 100% attack success rate with only appending payloads of 2.5% of the total length of the data for detection. We also attack deep learning models with different structures under different defense methods. The experiments show that GAPGAN outperforms other state-of-the-art attack models in efficiency and effectiveness.

Research of dynamic general unpacking methods for Windows malware

PackerGrind: An Adaptive Unpacking System for Android Apps.

Happer - Unpacking Android Apps via a Hardware-Assisted Approach.

Precise system-wide concatic malware unpacking

Parema: an Unpacking Framework for Demystifying VM-based Android Packers.

A fine-grained classification approach for the packed malicious code

Assessing the Impact of Packing on Machine Learning-Based Malware Detection and Classification Systems

Packer Identification Using Hidden Markov Model

MLxPack: Investigating the Effects of Packers on ML-based Malware Detection Systems Using Static and Dynamic Traits

FMDiv: Functional Module Division on Binary Malware for Accurate Malicious Code Localization.

An Efficient Multi-Step Framework for Malware Packing Identification

Black-Box Adversarial Attacks Against Deep Learning Based Malware Binaries Detection with GAN

Generic Unpacking Method Based on Detecting Original Entry Point

Efficient and Robust Malware Detection Based on Control Flow Traces Using Deep Neural Networks

A malware detection framework based on kolmogorov complexity

Design and Implementation of an Automated Malware Dynamic Analysis System

Integration of Ether Unpacker into Ragpicker for plugin-based Malware Analysis and Identification

Design and Implementation of Malware Automated Analysis Tool Based on Behavior Analysis

Pinicorn: Towards Automated Dynamic Analysis for Unpacking 32-Bit PE Malware

Mwsandbox: On Improving The Efficiency Of Automated Coarse-Grained Dynamic Malware Analysis

Analysis of machine learning approaches to packing detection