Abstract:Recent methods have demonstrated that machine learning (ML) based static malware detection models are vulnerable to adversarial attacks. However, the generated malware often fails to generalize to production-level anti-malware software (AMS), as they usually involve multiple detection methods. This calls for universal solutions to the problem of malware variants generation. In this work, we demonstrate how the proposed method, MalwareTotal, has allowed malware variants to continue to abound in ML-based, signature-based, and hybrid anti-malware software. Given a malicious binary, we develop sequential bypass tactics that enable malicious behavior to be concealed within multi-faceted manipulations. Through 12 experiments on real-world malware, we demonstrate that an attacker can consistently bypass detection (98.67%, and 100% attack success rate against ML-based methods EMBER and MalConv, respectively; 95.33%, 92.63%, and 98.52% attack success rate against production-level anti-malware software ClamAV, AMS A, and AMS B, respectively) without modifying the malware functionality. We further demonstrate that our approach outperforms state-of-the-art adversarial malware generation techniques both in attack success rate and query consumption (the number of queries to the target model). Moreover, the samples generated by our method have demonstrated transferability in the real-world integrated malware detector, VirusTotal. In addition, we show that common mitigation such as adversarial training on known attacks cannot effectively defend against the proposed attack. Finally, we investigate the value of the generated adversarial examples as a means of hardening victim models through an adversarial training procedure, and demonstrate that the accuracy of the retrained model against generated adversarial examples increases by 88.51 percentage points.

Crafting Adversarial Example to Bypass Flow-&ML- Based Botnet Detector Via RL.

MARNet: Backdoor Attacks Against Cooperative Multi-Agent Reinforcement Learning

Evading Machine Learning Botnet Detection Models via Deep Reinforcement Learning

Adversarial Explainability: Utilizing Explainable Machine Learning in Bypassing IoT Botnet Detection Systems

A Black-Box Attack Method against Machine-Learning-Based Anomaly Network Flow Detection Models

Comprehensive Botnet Detection by Mitigating Adversarial Attacks, Navigating the Subtleties of Perturbation Distances and Fortifying Predictions with Conformal Layers

Deep Reinforcement Learning based Evasion Generative Adversarial Network for Botnet Detection

Automatic Evasion of Machine Learning-Based Network Intrusion Detection Systems

MPass: Bypassing Learning-based Static Malware Detectors.

Adversarial Attacks Against Network Intrusion Detection in IoT Systems

Evading Deep Learning-Based Malware Detectors via Obfuscation: A Deep Reinforcement Learning Approach

GPMT: Generating Practical Malicious Traffic Based on Adversarial Attacks with Little Prior Knowledge

Flow-based detection and proxy-based evasion of encrypted malware C2 traffic

Amoeba: Circumventing ML-supported Network Censorship via Adversarial Reinforcement Learning

DeepMal: maliciousness-Preserving adversarial instruction learning against static malware detection

Evaluating and Improving Adversarial Robustness of Machine Learning-Based Network Intrusion Detectors

Reinforcement learning based adversarial malware example generation against black-box detectors

Deep PackGen: A Deep Reinforcement Learning Framework for Adversarial Network Packet Generation

DeepDetectNet vs RLAttackNet: An adversarial method to improve deep learning-based static malware detection model

MalwareTotal: Multi-Faceted and Sequence-Aware Bypass Tactics Against Static Malware Detection