Communication Dans Un Congrès Année : 2025

Certifiably Robust Malware Detectors by Design

Résumé

Malware analysis involves analyzing suspicious software to detect malicious payloads. Static malware analysis, which does not require software execution, relies increasingly on machine learning techniques to achieve scalability. Although such techniques obtain very high detection accuracy, they can be easily evaded with adversarial examples where a few modifications of the sample can dupe the detector without modifying the behavior of the software. Unlike other domains, such as computer vision, creating an adversarial example of malware without altering its functionality requires specific transformations. We propose a new model architecture for certifiably robust malware detection by design. In addition, we show that every robust detector can be decomposed into a specific structure, which can be applied to learn empirically robust malware detectors, even on fragile features. Our framework ERDALT is based on this structure. We compare and validate these approaches with machine-learning-based malware detection methods, allowing for robust detection with limited reduction of detection performance.

Fichier principal
Vignette du fichier
main.pdf (485.57 Ko) Télécharger le fichier
Origine Fichiers produits par l'(les) auteur(s)
Licence

Dates et versions

hal-05079220 , version 1 (22-05-2025)

Licence

Identifiants

Citer

Pierre-François Gimenez, Sarath Sivaprasad, Mario Fritz. Certifiably Robust Malware Detectors by Design. SEC 2025 - 40th IFIP TC-11 International Information Security and Privacy Conference, May 2025, Maribor, Slovenia. pp.125-139, ⟨10.1007/978-3-031-92886-4_9⟩. ⟨hal-05079220⟩
104 Consultations
317 Téléchargements

Altmetric

Partager

  • More