English(EN) Learning to Look Benign: Targeted Evasion of Malware Detectors via API Import Injection

新AI方法通过模仿无害软件来规避恶意软件检测器

作者 PulseAugur 编辑部 · [1 个来源] · 2026-05-18 16:32

研究人员开发了一种通过注入无害软件特有的API导入来规避基于机器学习的恶意软件检测器的方法。该技术利用条件变分自编码器，在不改变恶意软件核心功能的情况下，针对特定的无害类别。实验表明，恶意软件的检测率显著降低，被规避的样本被归类为预期的无害类型，并且该攻击被证明对商业检测引擎有效。 AI

影响这项研究突显了AI驱动的安全系统的一个关键漏洞，可能需要新的防御策略来应对定向规避攻击。

排序理由该集群包含一篇学术论文，详细介绍了一种规避AI恶意软件检测器的新颖方法。[lever_c_demoted from research: ic=1 ai=1.0]

AI 生成摘要 · Google Gemini · 来自 1 个来源。我们如何撰写摘要 →

本文如何被排名

Signal score: 0 / 100; Composite score across the factors below. Higher = stronger signal that this story matters right now.
Newsworthiness bucket: Tool; 该集群包含一篇学术论文，详细介绍了一种规避AI恶意软件检测器的新颖方法。[lever_c_demoted from research: ic=1 ai=1.0]
Source corroboration: Single-source cluster; Only one publisher covered this so far. Single-source stories can still rank when the publisher is high-authority, but they lack cross-source corroboration.
Topics: safety, paper, product; Editorial topic classification. Feeds into how the story surfaces on /topic/<slug> hub pages and into the per-entity coverage mix.
AI-industry relevance: High; Clearly on-topic for AI-industry coverage.
Story freshness: 99 days old; Aged out of breaking-news scoring windows; ranking reflects the durable signal from the full source set.

完整方法见我们的编辑标准。

arXiv cs.LG TIER_1 English(EN) · Viktor Medvedev · 2026-05-18 16:32

学习伪装无害：通过API导入注入实现恶意软件检测器定向规避

Machine learning-based malware detectors are widely deployed in antivirus and endpoint detection systems, yet their reliance on static features makes them vulnerable to adversarial manipulation. This paper investigates whether a malware sample can be intentionally misclassified a…