Skip to main content
Share Your Experience: Take the 2024 Developer Survey

Questions tagged [machine-learning]

How to use machine learning for security (e.g. for filtering or analytics) as well as security of machine learning systems (e.g. attempts to "fool" them).

Filter by
Sorted by
Tagged with
0 votes
1 answer
154 views

Can Deep Learning predict Encryption Keys in Elliptic Curve Diffie Hellman Ephemeral

I was talking to my friend who is building an AI startup, and his premise was Deep Learning, can somehow be used, to predict, when fed the correct data (input) and run for multiple (n; n = large) ...
fuzzy-rockies's user avatar
0 votes
0 answers
26 views

How to analyze code files (Java, PHP, Python) for malicious code? [duplicate]

How can we analyze files like .jar or .php or .py files for malicious code? I need to automate the analysis process using machine learning. What should be the features in these cases?
Samuel Smith's user avatar
1 vote
1 answer
114 views

Static malware analysis using machine learning

As you know, using machine learning we can detect malware. We can use dynamic analysis based on WinAPI function calls and their arguments. But what about static analysis using machine learning? In ...
Samuel Smith's user avatar
0 votes
1 answer
221 views

Can a machine learning model contain malicious code?

As interest in machine learning grows, it is becoming common for people without a background in data science like myself, to grab models from sources such as HuggingFace and run them. Now my ...
Mendhak's user avatar
  • 103
1 vote
1 answer
123 views

Encrypted semantic search

I want to implement semantic search but in an encrypted fashion. For storing passwords, we store Enc(password) in a database, and when a user logs in, we check if Enc(query) == entry in the database. ...
mathenthusiast8203's user avatar
1 vote
0 answers
114 views

CWEs for Language Machine Learning Models

I'm looking for the relevant CWE's for specific attacks against prompt-based language ML models, such as GPT-3, GPT-4 etc. Specifically: Prompt Injection: Amending prompts with malicious input to ...
Vjz's user avatar
  • 11
1 vote
0 answers
81 views

Are there any pretrained Malheur malware classification models or predefined datasets out there? [closed]

At my school's information security course we learned the basics of https://github.com/rieck/malheur Are there any pretrained models? I imagine a use-case where I have several pretrained models then ...
mLstudent33's user avatar
1 vote
2 answers
137 views

How to source training data in ML for information security? [closed]

A company entrusts a Data Scientist with the mission of processing and valuing data for the research or treatment of events related to traces of computer attacks. I was wondering how would he get the ...
Revolucion for Monica's user avatar
0 votes
2 answers
269 views

Can Machine Learning be utilized to identify and track IP Spoofing?

"IP Spoofing" refers to changing source IP addresses so that the attack appears to be coming from someone else. When the victim replies to the address, it goes back to the spoofed address ...
Jakob's user avatar
  • 1
1 vote
0 answers
126 views

Publicly Available PCAP dumps that associate IP addresses with Operating System? [closed]

I am currently working on a machine learning module to detect Operating Systems based on existing packet traffic in pcap file format. So far, I have generated some traffic of popular Operating Systems ...
Alan's user avatar
  • 11
1 vote
0 answers
131 views

Anonymous (privacy-preserving) random walk

Quoting this paper - SmartWalk (https://dl.acm.org/doi/pdf/10.1145/2976749.2978319): For graph privacy, strong link privacy relies on deep perturbation to the original graph, indicating a large ...
rshah's user avatar
  • 153
0 votes
2 answers
254 views

What is the current state of author recognition software and what can be done about it?

I'm curious what the current state of author recognition software is, i.e. software that detects the author of a certain anonymous text based on a certain pool of texts obtained from elsewhere. This ...
Sebastiaan van den Broek's user avatar
1 vote
2 answers
251 views

What is the term for adding benign code/behavior to malware to evade antiviruses?

Some malware authors add benign code/behavior to their malware just to throw off antiviruses and IDSs which employ machine learning to detect malware. There is a name for this technique (and even a ...
kansas_bulldog382's user avatar
1 vote
0 answers
310 views

FYP ideas in Applications of Machine Learning in Cyber Security domain [closed]

I am a Computer Science Engineering undergraduate aspiring to pursue a career in the field of cyber security. I have some experience in web application security, memory and network forensics fields. I ...
Picanto's user avatar
  • 11
1 vote
1 answer
198 views

Is it possible to exploit computer vision to achieve remote code execution?

What kind of vulnerability in the implementation of a vision-based machine learning system (object recognition, for example) would enable an attacker to achieve remote code execution? The only ...
jstrieb's user avatar
  • 153
0 votes
2 answers
252 views

ML approach to malicious attachments using email contents

Based on my understanding of the field, it seems like there is a lot of attention paid to spam filtering based on the contents and metadata of an email, and there is considerable attention paid to ...
solumnant's user avatar
  • 133
1 vote
1 answer
146 views

How we can PoC our product that needs training data for our machine learning algorithm of the the bank clients?

Recently, we have had a challenge with potential future clients which are the bank. Our product requires to gather static data (e.g. address, loans, last 50 transactions, etc) of banks clients. These ...
Filipon's user avatar
  • 1,294
2 votes
1 answer
437 views

What features would you use to detect a backdoor or a bot installation?

I was reading a document about logging and analysis. The document talks about statistical analysis and machine learning techniques to detect some attack scenarios. For instance, If you want to detect ...
U. User's user avatar
  • 190
2 votes
1 answer
286 views

Can IP address considered as a useful feature for intrusion detection?

I am trying to build a machine learning model which classifies attacks. My data has a bunch of IP addresses, and I don't know if I should use the IP address as a feature to detect attacks. I found ...
U. User's user avatar
  • 190
2 votes
4 answers
244 views

Web Application Firewall with based on an external decision to detect anomaly

I have a theoretical knowledge about WAF but I do not have knowledge of the tools in the market. I wonder if there are any WAFs that base their decision making through a response from an external ...
Alexandre Barreiro Neto's user avatar
0 votes
0 answers
121 views

Detecting network attacks by processing individual or multiple network packets?

I am trying to create a tool that identifies network attacks using machine learning, something like a small intrusion detection system. I have collected benign traffic from the network and then ...
Irene Ant's user avatar
  • 669
0 votes
1 answer
396 views

How likely is it to see a commercial IDS/IPS that uses machine learning in the near future that performs better than a normal IDS/IPS? [closed]

I have to choose a field to study on and I want to know does it worth studying in this field and will the future IDS/IPS systems be using machine-learning/deep-learning or at least how likely is it? ...
AlenT's user avatar
  • 200
3 votes
3 answers
1k views

Extracting features from PE files. Machine learning and malware

Are the features which can be extracted from a PE file (some information from headers, section names, strings, import, export sections etc) enough to use them to train particular machine learning ...
bielu000's user avatar
  • 131
1 vote
1 answer
321 views

The role of Machine Learning In Cybersecurity Defense [closed]

Hackers and malware are one step ahead of cybersecurity experts, and every time technology is released to the market, vulnerabilities will be quickly discovered and exploited. How effective can ...
R1W's user avatar
  • 1,627
10 votes
1 answer
3k views

Can CAPTCHA-solving patterns be used to track/identify a person?

Captchas are everywhere. Suppose you're a big company offering Captchas on many sites and you can easily track a user across the web simply by setting a cookie everytime some site loads your captcha ...
dervonnebenaan's user avatar
0 votes
1 answer
1k views

What are some interesting project ideas that use machine learning to solve issues in IOT security? [closed]

I am interesting in IOT security and machine learning/deep learning. I am looking for good project ideas to work on. example: http://projectabstracts.com/20138/a-malicious-pattern-detection-engine-...
siddhu619's user avatar
  • 117
0 votes
2 answers
896 views

What do you call an antivirus that detects suspicious activity?

A traditional antivirus scans data at rest and data in transit for known virus signatures. (Where "virus" includes trojans, rootkits, et al.) This does not help when defending against zero-days and ...
lofidevops's user avatar
  • 3,610
0 votes
2 answers
247 views

Are there any real instances of threats to machine learning systems?

I recently read a paper on The security of Machine Learning. Are there any instances of attacks against machine learning systems besides spam filters?
Anukarsh Singh's user avatar
33 votes
6 answers
33k views

Can a neural network crack hashing algorithms?

I've been reading a bit about neural networks, and their ability to approximate many complex functions. Wouldn't a neural network be capable of cracking a hashing algorithm like SHA256? For example, ...
Saturn's user avatar
  • 583