Towards Adversarial Malware Detection: Lessons Learned from PDF-based Attacks

Abstract

Malware still constitutes a major threat in the cybersecurity landscape, also due to the widespread use of infection vectors such as documents. These infection vectors hide embedded malicious code to the victim users, facilitating the use of social engineering techniques to infect their machines. Research showed that machine-learning algorithms provide effective detection mechanisms against such threats, but the existence of an arms race in adversarial settings has recently challenged such systems. In this work, we focus on malware embedded in PDF files as a representative case of such an arms race. We start by providing a comprehensive taxonomy of the different approaches used to generate PDF malware, and of the corresponding learning-based detection systems. We then categorize threats specifically targeted against learning-based PDF malware detectors, using a well-established framework in the field of adversarial machine learning. This framework allows us to categorize known vulnerabilities of learning-based PDF malware detectors and to identify novel attacks that may threaten such systems, along with the potential defense mechanisms that can mitigate the impact of such threats. We conclude the paper by discussing how such findings highlight promising research directions towards tackling the more general challenge of designing robust malware detectors in adversarial settings.

References in corpus (17)

• Explaining and Harnessing Adversarial Examples
• Intriguing properties of neural networks
• ZOO: Zeroth Order Optimization based Black-box Attacks to Deep Neural Networks without Training Substitute Models
• Proceedings of the 29th International Conference on Machine Learning (ICML-12)
• Wild Patterns: Ten Years After the Rise of Adversarial Machine Learning
• Understanding Black-box Predictions via Influence Functions
• Targeted Backdoor Attacks on Deep Learning Systems Using Data Poisoning
• BadNets: Identifying Vulnerabilities in the Machine Learning Model Supply Chain
• Evasion Attacks against Machine Learning at Test Time
• Delving into Transferable Adversarial Examples and Black-box Attacks
• How to Explain Individual Classification Decisions
• Poisoning Attacks against Support Vector Machines
• Security Evaluation of Pattern Classifiers under Attack
• Security Analysis of Online Centroid Anomaly Detection
• Evading Classifiers by Morphing in the Dark
• Randomized Prediction Games for Adversarial Machine Learning
• Security Evaluation of Support Vector Machines in Adversarial Environments

Cited by in corpus (6)

• A Survey of Privacy Attacks in Machine Learning
• Arms Race in Adversarial Malware Detection: A Survey
• Machine Learning (In) Security: A Stream of Problems
• Mitigating Adversarial Gray-Box Attacks Against Phishing Detectors
• Adversarial Detection of Flash Malware: Limitations and Open Issues
• Analyzing PDFs like Binaries: Adversarially Robust PDF Malware Analysis via Intermediate Representation and Language Model