Skip to Main content Skip to Navigation
Journal articles

Auditing static machine learning anti-Malware tools against metamorphic attacks

Abstract : Malicious software is one of the most serious cyber threats on the Internet today. Traditional malware detection has proven unable to keep pace with the sheer number of malware because of their growing complexity, new attacks and variants. Most malware implement various metamorphic techniques in order to disguise themselves, therefore preventing successful analysis and thwarting the detection by signature-based anti-malware engines. During the past decade, there has been an increase in the research and deployment of anti-malware engines powered by machine learning, and in particular deep learning, due to their ability to handle huge volumes of malware and generalize to never-before-seen samples. However, there is little research about the vulnerability of these models to adversarial examples. To fill this gap, this paper presents an exhaustive evaluation of the state-of-the-art approaches for malware classification against common metamorphic attacks. Given the limitations found in deep learning approaches, we present a simple architecture that increases 14.95% the classification performance with respect to MalConv’s architecture. Furthermore, the use of the metamorphic techniques to augment the training set is investigated and results show that it significantly improves the classification of malware belonging to families with few samples.
Document type :
Journal articles
Complete list of metadata

https://hal.archives-ouvertes.fr/hal-03317625
Contributor : Joao Marques-Silva Connect in order to contact the contributor
Submitted on : Friday, August 6, 2021 - 7:24:10 PM
Last modification on : Friday, August 27, 2021 - 11:28:05 AM

Licence


Distributed under a Creative Commons Attribution 4.0 International License

Links full text

Identifiers

Citation

Daniel Gibert, Carles Mateu, Jordi Planes, João Marques Silva. Auditing static machine learning anti-Malware tools against metamorphic attacks. Computers and Security, Elsevier, 2021, TC 11 Briefing Papers, 102, pp.1-32. ⟨10.1016/j.cose.2020.102159⟩. ⟨hal-03317625⟩

Share

Metrics

Record views

59