arrow
返回

On Deceiving Malware Classification with Section Injection

delete2023-01-16
delete2
delete
OA
AI
A
Adeilson Antonio da Silva
M
Maurício Pamplona Segundo *
DOI:10.3390/make5010009delete
delete原文链接
delete原文求助
delete分享
delete收藏
摘要

摘要

En 中文
We investigate how to modify executable files to deceive malware classification systems. This work's main contribution is a methodology to inject bytes across a malware file randomly and use it both as an attack to decrease classification accuracy but also as a defensive method, augmenting the data available for training. It respects the operating system file format to make sure the malware will still execute after our injection and will not change its behavior. We reproduced five state-of-the-art malware classification approaches to evaluate our injection scheme: one based on Global Image Descriptor (GIST) + K-Nearest-Neighbors (KNN), three Convolutional Neural Network (CNN) variations and one Gated CNN. We performed our experiments on a public dataset with 9339 malware samples from 25 different families. Our results show that a mere increase of 7% in the malware size causes an accuracy drop between 25% and 40% for malware family classification. They show that an automatic malware classification system may not be as trustworthy as initially reported in the literature. We also evaluate using modified malware alongside the original ones to increase networks robustness against the mentioned attacks. The results show that a combination of reordering malware sections and injecting random data can improve the overall performance of the classification. All the code is publicly available.
Keyword:
malware classification
adversarial examples
Deep Learning
Convolutional Neural Networks

期刊

M
Machine Learning and Knowledge Extraction
IF:
6
论文数:
838
被引数:
1.8K

机构

State University System of Florida 封面图
State University System of Florida
学者数:
12.8W
论文数: 10.9W
被引数: 130
U
university of south florida
学者数:
1.5W
论文数: 1.2W
被引数: 9
引用论文

引用论文

err分享
err收藏
err分享
err收藏
Effects of titanium and tantalum adhesion layers on the properties of sol-gel derived SrBi2Ta2O9 thin films
err2002-08-01
err0
PREAI
errChing-Chich Leu; Hung-Tao Lin; Chen-Ti Hu; Chao-Hsin Chien; Ming-Jui Yang; Ming-Che Yang; Tiao-Yuan Huang
err分享
err收藏
学者 查看更多内容