Re:EvilModel: Hiding Malware Inside of Neural Network Models...
by high_byte on Tuesday July 20, 2021 @08:20AM
(#27892871)
useless. they suggested no means to execute the malware - once it is extracted the antivirus WILL detect the unmodified malware. you'd be better off zipping with password or even simple XOR over the data would "evade" detection... until you run it raw.
[ Parent
| on HN ]
Re:EvilModel: Hiding Malware Inside of Neural Network Models...
by rjmunro on Tuesday July 20, 2021 @09:19AM
(#27893330)
I can imagine that in some circumstances, it's possible if an evil insider downloads some random large random data files, it may trigger alarms. If they download a large Neural Network Model, that would be expected for whatever work they do - they could legitimately ask for it to be whitelisted by their firewall. They'd then have to write a small python script from memory to extract the malware, but it's pretty unlikely.
Re:EvilModel: Hiding Malware Inside of Neural Network Models...
by CloselyChunky on Tuesday July 20, 2021 @09:19AM
(#27893331)
AFAIK antivirus systems do (did?) not scan RAM, only persistent memory. So decrypting/decoding the malware in-memory and jumping into the code should avoid detection. That's how "runtime crypters" work or used to work a few years ago.