ML-based IoT Malware Detection Under Adversarial Settings: A Systematic Evaluation
The rapid growth of the Internet of Things (IoT) devices is paralleled by them being on the front-line of malicious attacks. This has led to an explosion in the number of IoT malware, with continued mutations, evolution, and sophistication. These malicious software are detected using machine learning (ML) algorithms alongside the traditional signature-based methods. Although ML-based detectors improve the detection performance, they are susceptible to malware evolution and sophistication, making them limited to the patterns that they have been trained upon. This continuous trend motivates the large body of literature on malware analysis and detection research, with many systems emerging constantly, and outperforming their predecessors. In this work, we systematically examine the state-of-the-art malware detection approaches, that utilize various representation and learning techniques, under a range of adversarial settings. Our analyses highlight the instability of the proposed detectors in learning patterns that distinguish the benign from the malicious software. The results exhibit that software mutations with functionality-preserving operations, such as stripping and padding, significantly deteriorate the accuracy of such detectors. Additionally, our analysis of the industry-standard malware detectors shows their instability to the malware mutations.
Code (0)
등록된 구현이 없습니다.
Tasks
Malware AnalysisMalware DetectionSimilar Papers 제목 키워드 기반
Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art
Malware has been one of the most damaging threats to computers that span across multiple operating systems and various file formats. To defend against ever-increasing and ever-evolving malware, tremendous efforts have be…
Adversarial AttackMalware Detectionspeech-recognitionSpeech RecognitionBurning the Adversarial Bridges: Robust Windows Malware Detection Against Binary-level Mutations
Toward robust malware detection, we explore the attack surface of existing malware detection systems. We conduct root-cause analyses of the practical binary-level black-box adversarial malware examples. Additionally, we …
Malware DetectionEvasion of IoT Malware Detection via Dummy Code Injection
The Internet of Things (IoT) has revolutionized connectivity by linking billions of devices worldwide. However, this rapid expansion has also introduced severe security vulnerabilities, making IoT devices attractive targ…
Intrusion DetectionAnomaly DetectionMalware DetectionPractical Attacks on Machine Learning: A Case Study on Adversarial Windows Malware
While machine learning is vulnerable to adversarial examples, it still lacks systematic procedures and tools for evaluating its security in different application contexts. In this article, we discuss how to develop autom…
BIG-bench Machine LearningMalware DetectionFGAM:Fast Adversarial Malware Generation Method Based on Gradient Sign
Malware detection models based on deep learning have been widely used, but recent research shows that deep learning models are vulnerable to adversarial attacks. Adversarial attacks are to deceive the deep learning model…
Deep LearningMalware Detection