Abstract:Recent methods have demonstrated that machine learning (ML) based static malware detection models are vulnerable to adversarial attacks. However, the generated malware often fails to generalize to production-level anti-malware software (AMS), as they usually involve multiple detection methods. This calls for universal solutions to the problem of malware variants generation. In this work, we demonstrate how the proposed method, MalwareTotal, has allowed malware variants to continue to abound in ML-based, signature-based, and hybrid anti-malware software. Given a malicious binary, we develop sequential bypass tactics that enable malicious behavior to be concealed within multi-faceted manipulations. Through 12 experiments on real-world malware, we demonstrate that an attacker can consistently bypass detection (98.67%, and 100% attack success rate against ML-based methods EMBER and MalConv, respectively; 95.33%, 92.63%, and 98.52% attack success rate against production-level anti-malware software ClamAV, AMS A, and AMS B, respectively) without modifying the malware functionality. We further demonstrate that our approach outperforms state-of-the-art adversarial malware generation techniques both in attack success rate and query consumption (the number of queries to the target model). Moreover, the samples generated by our method have demonstrated transferability in the real-world integrated malware detector, VirusTotal. In addition, we show that common mitigation such as adversarial training on known attacks cannot effectively defend against the proposed attack. Finally, we investigate the value of the generated adversarial examples as a means of hardening victim models through an adversarial training procedure, and demonstrate that the accuracy of the retrained model against generated adversarial examples increases by 88.51 percentage points.

Explaining and Measuring Functionalities of Malware Detectors

Mate! Are You Really Aware? an Explainability-Guided Testing Framework for Robustness of Malware Detectors

Exposing Weaknesses of Malware Detectors with Explainability-Guided Evasion Attacks

A malware detection framework based on kolmogorov complexity

Functionality-Verification Attack Framework Based on Reinforcement Learning Against Static Malware Detectors

Updating Windows Malware Detectors: Balancing Robustness and Regression against Adversarial EXEmples

On the Robustness of Malware Detectors to Adversarial Samples

Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries

Explainability Guided Adversarial Evasion Attacks on Malware Detectors

Telemade: A Testing Framework for Learning-Based Malware Detection Systems.

A Comprehensive Analysis of Explainable AI for Malware Hunting

On the Robustness of Machine Learning Based Malware Detection Algorithms

Burning the Adversarial Bridges: Robust Windows Malware Detection Against Binary-level Mutations

PAD: Towards Principled Adversarial Malware Detection Against Evasion Attacks

Can We Leverage Predictive Uncertainty to Detect Dataset Shift and Adversarial Examples in Android Malware Detection?

MalwareTotal: Multi-Faceted and Sequence-Aware Bypass Tactics Against Static Malware Detection

Adversarial ELF Malware Detection Method Using Model Interpretation

Automated Poisoning Attacks and Defenses in Malware Detection Systems: An Adversarial Machine Learning Approach

Malware Detection in Adversarial Settings

Arms Race in Adversarial Malware Detection: A Survey

Adversarial Deep Learning for Robust Detection of Binary Encoded Malware