3 papers
cs.CR2025
Living Off the LLM: How LLMs Will Change Adversary Tactics
Sean Oesch, Jack Hutchins, Luke Koch +1
In living off the land attacks, malicious actors use legitimate tools and processes already present on a system to avoid detection. In this paper, we explore how the on-device LLMs…
cs.CR2024
On the Abuse and Detection of Polyglot Files
Luke Koch, Sean Oesch, Amul Chaulagain +8
A polyglot is a file that is valid in two or more formats. Polyglot files pose a problem for malware detection systems that route files to format-specific detectors/signatures, as…
cs.CR2022
Toward the Detection of Polyglot Files
Luke Koch, Sean Oesch, Mary Adkisson +3
Standardized file formats play a key role in the development and use of computer software. However, it is possible to abuse standardized file formats by creating a file that is val…