Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Art

Abstract

Malware has been one of the most damaging threats to computers that span across multiple operating systems and various file formats. To defend against ever-increasing and ever-evolving malware, tremendous efforts have been made to propose a variety of malware detection that attempt to effectively and efficiently detect malware so as to mitigate possible damages as early as possible. Recent studies have shown that, on the one hand, existing ML and DL techniques enable superior solutions in detecting newly emerging and previously unseen malware. However, on the other hand, ML and DL models are inherently vulnerable to adversarial attacks in the form of adversarial examples. In this paper, we focus on malware with the file format of portable executable (PE) in the family of Windows operating systems, namely Windows PE malware, as a representative case to study the adversarial attack methods in such adversarial settings. To be specific, we start by first outlining the general learning framework of Windows PE malware detection based on ML/DL and subsequently highlighting three unique challenges of performing adversarial attacks in the context of Windows PE malware. Then, we conduct a comprehensive and systematic review to categorize the state-of-the-art adversarial attacks against PE malware detection, as well as corresponding defenses to increase the robustness of Windows PE malware detection. Finally, we conclude the paper by first presenting other related attacks against Windows PE malware detection beyond the adversarial attacks and then shedding light on future research directions and opportunities. In addition, a curated resource list of adversarial attacks and defenses for Windows PE malware detection is also available at https://github.com/ryderling/adversarial-attacks-and-defenses-for-windows-pe-malware-detection.

Accepted by ELSEVIER Computers & Security (COSE)

References in corpus (20)

• Survey of Machine Learning Techniques for Malware Analysis
• Generating Adversarial Malware Examples for Black-Box Attacks Based on GAN
• Adversarial Examples: Opportunities and Challenges
• Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning
• Adversarial Machine Learning in Image Classification: A Survey Towards the Defender's Perspective
• Functionality-preserving Black-box Optimization of Adversarial Windows Malware
• Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detection
• EMBER: An Open Dataset for Training Static PE Malware Machine Learning Models
• Deceiving End-to-End Deep Learning Malware Detectors using Adversarial Examples
• Black-Box Attacks against RNN based Malware Detection Algorithms
• Deep Graph Matching and Searching for Semantic Code Retrieval
• Multilevel Graph Matching Networks for Deep Graph Similarity Learning
• DeepRobust: A PyTorch Library for Adversarial Attacks and Defenses
• OpenAttack: An Open-source Textual Adversarial Attack Toolkit
• A Survey of Machine Learning Methods and Challenges for Windows Malware Classification
• Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binaries
• COPYCAT: Practical Adversarial Attacks on Visualization-Based Malware Detection
• AVClass2: Massive Malware Tag Extraction from AV Labels
• Semantic-preserving Reinforcement Learning Attack Against Graph Neural Networks for Malware Detection
• Against All Odds: Winning the Defense Challenge in an Evasion Competition with Diversification

Cited by in corpus (5)

• A Survey of Malware Detection Using Deep Learning
• WebAssembly Diversification for Malware Evasion
• A Comparison of Adversarial Learning Techniques for Malware Detection
• The Power of MEME: Adversarial Malware Creation with Model-Based Reinforcement Learning
• Beyond the Hype: A Real-World Evaluation of the Impact and Cost of Machine Learning-Based Malware Detection