EvilModel 2.0: Bringing Neural Network Models into Malware Attacks

2021-09-09 · Zhi Wang, Chaoge Liu, Xiang Cui, Jie Yin, Xutong Wang

Security issues have gradually emerged with the continuous development of artificial intelligence (AI). Earlier work verified the possibility of converting neural network models into stegomalware, embedding malware into a model with limited impact on the model's performance. However, existing methods are not applicable in real-world attack scenarios and do not attract enough attention from the security community due to performance degradation and additional workload. Therefore, we propose an improved stegomalware EvilModel. By analyzing the composition of the neural network model, three new methods for embedding malware into the model are proposed: MSB reservation, fast substitution, and half substitution, which can embed malware that accounts for half of the model's volume without affecting the model's performance. We built 550 EvilModels using ten mainstream neural network models and 19 malware samples. The experiment shows that EvilModel achieved an embedding rate of 48.52\%. A quantitative algorithm is proposed to evaluate the existing embedding methods. We also design a trigger and propose a threat scenario for the targeted attack. The practicality and effectiveness of the proposed methods were demonstrated by experiments and analyses of the embedding capacity, performance impact, and detection evasion.

📄 PDF Abstract BibTeX arXiv:2109.04344

Code (1)

gaborvecsei/Neural-Network-Steganography

EvilModel: Hiding Malware Inside of Neural Network Models

2021-07-19 · Zhi Wang, Chaoge Liu, Xiang Cui

Delivering malware covertly and evasively is critical to advanced malware campaigns. In this paper, we present a new method to covertly and evasively deliver malware through a neural network model. Neural network models …

Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art

2021-12-23 · Xiang Ling, Lingfei Wu, Jiangyu Zhang, Zhenqing Qu 외

Malware has been one of the most damaging threats to computers that span across multiple operating systems and various file formats. To defend against ever-increasing and ever-evolving malware, tremendous efforts have be…

Adversarial Attack Malware Detection speech-recognition Speech Recognition

A Malware Classification Survey on Adversarial Attacks and Defences

2023-12-15 · Mahesh Datta Sai Ponnuru, Likhitha Amasala, Tanu Sree Bhimavarapu, Guna Chaitanya Garikipati

As the number and complexity of malware attacks continue to increase, there is an urgent need for effective malware detection systems. While deep learning models are effective at detecting malware, they are vulnerable to…

Adversarial Attack Classification Malware Classification Malware Detection+1

Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systems

2025-01-23 · Ping He, Lorenzo Cavallaro, Shouling Ji

Android malware presents a persistent threat to users' privacy and data integrity. To combat this, researchers have proposed machine learning-based (ML-based) Android malware detection (AMD) systems. However, adversarial…

Adversarial Robustness Android Malware Detection Malware Detection

Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection

2025-03-14 · Tianwei Lan, Luca Demetrio, Farid Nait-Abdesselam, Yufei Han 외

Machine learning (ML) malware detectors rely heavily on crowd-sourced AntiVirus (AV) labels, with platforms like VirusTotal serving as a trusted source of malware annotations. But what if attackers could manipulate these…

Android Malware Detection Malware Detection