On deceiving malware classification with section injection

@article{Silva2022OnDM,
  title={On deceiving malware classification with section injection},
  author={Adeilson Antonio da Silva and Maur{\'i}cio Pamplona Segundo},
  journal={ArXiv},
  year={2022},
  volume={abs/2208.06092},
  url={https://api.semanticscholar.org/CorpusID:256170759}
}
The results show that a combination of reordering malware sections and injecting random data can improve the overall performance of the classification, and show that an automatic malware classification system may not be as trustworthy as initially reported in the literature.
[PDF] Semantic Reader

Figures and Tables from this paper

4 Citations

MalwareTotal: Multi-Faceted and Sequence-Aware Bypass Tactics Against Static Malware Detection

This work demonstrates how the proposed method, MalwareTotal, has allowed malware variants to continue to abound in ML-based, signature-based, and hybrid anti-malware software, and investigates the value of the generated adversarial examples as a means of hardening victim models through an adversarial training procedure.

MLP-Mixer-Autoencoder: A Lightweight Ensemble Architecture for Malware Classification

A lightweight ensemble architecture is proposed by combining a customizer MLP-mixer and Autoencoder to refine features extracted from the MLP -mixer with the encoder-decoder architecture of the autoen coder.

Defend against adversarial attacks in malware detection through attack space management

End-to-End Multimodal COVID-19 Content Quantitative Safety Detection Algorithm

53 References

Data augmentation based malware detection using convolutional neural networks

This article aims to provide an image augmentation enhanced deep convolutional neural network (CNN) models for detecting malware families in a metamorphic malware environment and demonstrates accuracy up to 98%, which is quite satisfactory.

Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries

This work finds that a recently-proposed convolutional neural network does not learn any meaningful characteristic for malware detection from the data and text sections of executable files, but rather tends to learn to discriminate between benign and malware samples based on the characteristics found in the file header.

Deep Transfer Learning for Static Malware Classification

The proposed method outperforms other classical machine learning methods measured in accuracy, false positive rate, true positive rate and $F_1$ score (in binary classification).

Attacks on Visualization-Based Malware Detection: Balancing Effectiveness and Executability

This work designs a new adversarial example attack against visualization-based malware detection that can evade pre-processing filtering and maintain the original malware functionality.

COPYCAT: Practical Adversarial Attacks on Visualization-Based Malware Detection

This work proposes an approach to generate adversarial examples, COPYCAT, which is specifically designed for malware detection systems considering two main goals; achieving a high misclassification rate and maintaining the executability and functionality of the original input.

Deep neural network based malware detection using two dimensional binary program features

A deep neural network based malware detection system that Invincea has developed is introduced, which achieves a usable detection rate at an extremely low false positive rate and scales to real world training example volumes on commodity hardware.

Robust Intelligent Malware Detection Using Deep Learning

A novelty in combining visualization and deep learning architectures for static, dynamic, and image processing-based hybrid approach applied in a big data environment is the first of its kind toward achieving robust intelligent zero-day malware detection.

Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytes

This work proposes an attack that interweaves binary-diversification techniques and optimization frameworks to mislead DNNs while preserving the functionality of binaries, and finds that it can fool some commercial anti-viruses.

Towards Building an Intelligent Anti-Malware System: A Deep Learning Approach using Support Vector Machine (SVM) for Malware Classification

The exploration of an even more optimal DL-SVM model is the next stage towards the engineering of an intelligent anti-malware system that utilizes the power of deep learning models.

Imbalanced Malware Images Classification: a CNN based Approach

A simple yet effective weighted softmax loss which can be employed as the final layer of deep CNNs and aims at alleviating the impact of data imbalance in an end-to-end learning fashion.
...