Abstract:Malware has been one of the most damaging threats to computers that span across multiple operating systems and various file formats. To defend against ever-increasing and ever-evolving malware, tremendous efforts have been made to propose a variety of malware detection that attempt to effectively and efficiently detect malware so as to mitigate possible damages as early as possible. Recent studies have shown that, on the one hand, existing machine learning (ML) and deep learning (DL) techniques enable superior solutions in detecting newly emerging and previously unseen malware. However, on the other hand, ML and DL models are inherently vulnerable to adversarial attacks in the form of adversarial examples, which are maliciously generated by slightly and carefully perturbing the legitimate inputs to misbehave. Adversarial attacks are initially studied in the domain of computer vision like image classification, and then quickly extended to other domains, including natural language processing, audio recognition, and even malware detection. In this paper, we focus on malware with the file format of portable executable (PE) in the family of Windows operating systems, namely Windows PE malware , as a representative case to study the adversarial attack methods in such adversarial settings. To be specific, we start by first outlining the general learning framework of Windows PE malware detection based on ML/DL and subsequently highlighting three unique challenges of performing adversarial attacks in the context of Windows PE malware. Then, we conduct a comprehensive and systematic review to categorize the state-of-the-art adversarial attacks against PE malware detection, as well as corresponding defenses to increase the robustness of Windows PE malware detection. Finally, we conclude the paper by first presenting other related attacks against Windows PE malware detection beyond the adversarial attacks and then shedding light on future research directions and opportunities.

Adversarial Malware Examples for Terminal Cyberspace Attack Analysis in Cyber-Physical Power Systems

Adversarial Attacks and Mitigation for Anomaly Detectors of Cyber-Physical Systems

Analysis of Malware-Induced Cyber Attacks in Cyber-Physical Power Systems

Cyber Protection for Malware Attack Resistance in Cyber-Physical Power Systems

Black-Box Adversarial Attacks Against Deep Learning Based Malware Binaries Detection with GAN

Black-Box Adversarial Windows Malware Generation Via United Puppet-based Dropper and Genetic Algorithm

Creating Adversarial Malware Examples Through Guided Metamorphic Changes

Adversarial Deep Learning for Robust Detection of Binary Encoded Malware

MalwareTotal: Multi-Faceted and Sequence-Aware Bypass Tactics Against Static Malware Detection

Malware Detection in Adversarial Settings

On the Robustness of Malware Detectors to Adversarial Samples

Adversarial attacks against Windows PE malware detection: A survey of the state-of-the-art

A Comparison of State-of-the-Art Techniques for Generating Adversarial Malware Binaries

Attack and Defense of Dynamic Analysis-Based, Adversarial Neural Malware Classification Models

Burning the Adversarial Bridges: Robust Windows Malware Detection Against Binary-level Mutations

An IRL-based malware adversarial generation method to evade anti-malware engines

A Survey of Adversarial Attack and Defense Methods for Malware Classification in Cyber Security

Creating Valid Adversarial Examples of Malware

Adversarial-Example Attacks Toward Android Malware Detection System

Protecting from Malware Obfuscation Attacks through Adversarial Risk Analysis

From Image to Code: Executable Adversarial Examples of Android Applications.