Feature-level Malware Obfuscation in Deep Learning
We consider the problem of detecting malware with deep learning models, where the malware may be combined with significant amounts of benign code. Examples of this include piggybacking and trojan horse attacks on a system, where malicious behavior is hidden within a useful application. Such added flexibility in augmenting the malware enables significantly more code obfuscation. Hence we focus on the use of static features, particularly Intents, Permissions, and API calls, which we presume cannot be ultimately hidden from the Android system, but only augmented with yet more such features. We first train a deep neural network classifier for malware classification using features of benign and malware samples. Then we demonstrate a steep increase in false negative rate (i.e., attacks succeed), simply by randomly adding features of a benign app to malware. Finally we test the use of data augmentation to harden the classifier against such attacks. We find that for API calls, it is possible to reject the vast majority of attacks, where using Intents or Permissions is less successful.
Code (0)
등록된 구현이 없습니다.
Tasks
Data AugmentationDeep LearningMalware ClassificationMethods 이 논문이 사용한 방법론
Similar Papers 제목 키워드 기반
Light up that Droid! On the Effectiveness of Static Analysis Features against App Obfuscation for Android Malware Detection
Malware authors have seen obfuscation as the mean to bypass malware detectors based on static analysis features. For Android, several studies have confirmed that many anti-malware products are easily evaded with simple p…
Android Malware DetectionMalware DetectionA Malware Obfuscation AI Technique to Evade Antivirus Detection in Counter Forensic Domain
Data obfuscation is the process of converting a constant or a variable into computational results of several constants to make it hard for the files to be detected or analyzed by anti-malware engines. In recent years, ma…
DRLDO: A novel DRL based De-ObfuscationSystem for Defense against Metamorphic Malware
In this paper, we propose a novel mechanism to normalize metamorphic and obfuscated malware down at the opcode level and hence create an advanced metamorphic malware de-obfuscation and defense system. We name this system…
Deep Reinforcement LearningIntrusion DetectionProtecting from Malware Obfuscation Attacks through Adversarial Risk Analysis
Malware constitutes a major global risk affecting millions of users each year. Standard algorithms in detection systems perform insufficiently when dealing with malware passed through obfuscation tools. We illustrate thi…
Review of Deep Learning-based Malware Detection for Android and Windows System
Differentiating malware is important to determine their behaviors and level of threat; as well as to devise defensive strategy against them. In response, various anti-malware systems have been developed to distinguish be…
Malware Detection