Researchers Easily Trick Cylance's AI-Based Antivirus Into Thinking Malware Is 'Goodware'

itman · Jul 19, 2019

By taking strings from an online gaming program and appending them to malicious files, researchers were able to trick Cylance’s AI-based antivirus engine into thinking programs like WannaCry and other malware are benign.

But researchers in Australia say they’ve found a way to subvert the machine-learning algorithm in PROTECT and cause it to falsely tag already known malware as “goodware.” The method doesn’t involve altering the malicious code, as hackers generally do to evade detection. Instead, the researchers developed a “global bypass” method that works with almost any malware to fool the Cylance engine. It involves simply taking strings from a non-malicious file and appending them to a malicious one, tricking the system into thinking the malicious file is benign.
Click to expand...

https://www.vice.com/en_us/article/...d-antivirus-into-thinking-malware-is-goodware

stapp · Jul 19, 2019

Already posted here
https://www.wilderssecurity.com/thr...rus-into-thinking-malware-is-goodware.418868/

Log in or Sign up

Researchers Easily Trick Cylance's AI-Based Antivirus Into Thinking Malware Is 'Goodware'

itman Registered Member

stapp Global Moderator

Log in or Sign up

Researchers Easily Trick Cylance's AI-Based Antivirus Into Thinking Malware Is 'Goodware'

itman Registered Member

stapp Global Moderator

Useful Searches