Arms Race in Adversarial Malware Detection: A Survey
arXiv:2005.11671 · doi:10.1145/3484491
Abstract
Malicious software (malware) is a major cyber threat that has to be tackled with Machine Learning (ML) techniques because millions of new malware examples are injected into cyberspace on a daily basis. However, ML is vulnerable to attacks known as adversarial examples. In this paper, we survey and systematize the field of Adversarial Malware Detection (AMD) through the lens of a unified conceptual framework of assumptions, attacks, defenses, and security properties. This not only leads us to map attacks and defenses to partial order structures, but also allows us to clearly describe the attack-defense arms race in the AMD context. We draw a number of insights, including: knowing the defender's feature set is critical to the success of transfer attacks; the effectiveness of practical evasion attacks largely depends on the attacker's freedom in conducting manipulations in the problem space; knowing the attacker's manipulation set is critical to the defender's success; the effectiveness of adversarial training depends on the defender's capability in identifying the most powerful attack. We also discuss a number of future research directions.
arXiv comment35 pages, 5 figures
References in corpus (23)
- Evasion Attacks against Machine Learning at Test Time
- Poisoning Attacks against Support Vector Machines
- Provable defenses against adversarial examples via the convex outer adversarial polytope
- Adversarially Robust Generalization Requires More Data
- Adversarial Attacks and Defences: A Survey
- Security Evaluation of Pattern Classifiers under Attack
- Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN
- On the (Statistical) Detection of Adversarial Examples
- Is feature selection secure against training data poisoning?
- Formal Security Analysis of Neural Networks using Symbolic Intervals
- Adversarial Feature Selection against Evasion Attacks
- Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning
- Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detection
- Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detection
- Robustness of classifiers: from adversarial to random noise
- Towards Adversarial Malware Detection: Lessons Learned from PDF-based Attacks
- Evading Classifiers by Morphing in the Dark
- A Framework for Enhancing Deep Neural Networks Against Adversarial Malware
- Adversarial Examples - A Complete Characterisation of the Phenomenon
- Robustness of classifiers to universal perturbations: a geometric perspective
- Adversarial Detection of Flash Malware: Limitations and Open Issues
- A General Retraining Framework for Scalable Adversarial Classification
- SAFE-PDF: Robust Detection of JavaScript PDF Malware Using Abstract Interpretation