Questions tagged [machine-learning]
How to use machine learning for security (e.g. for filtering or analytics) as well as security of machine learning systems (e.g. attempts to "fool" them).
28
questions
0
votes
0
answers
22
views
How to analyze code files (Java, PHP, Python) for malicious code? [duplicate]
How can we analyze files like .jar or .php or .py files for malicious code?
I need to automate the analysis process using machine learning. What should be the features in these cases?
0
votes
1
answer
62
views
Static malware analysis using machine learning
As you know, using machine learning we can detect malware.
We can use dynamic analysis based on WinAPI function calls and their arguments.
But what about static analysis using machine learning? In ...
0
votes
1
answer
130
views
Can a machine learning model contain malicious code?
As interest in machine learning grows, it is becoming common for people without a background in data science like myself, to grab models from sources such as HuggingFace and run them.
Now my ...
- 103
1
vote
1
answer
72
views
Encrypted semantic search
I want to implement semantic search but in an encrypted fashion.
For storing passwords, we store Enc(password) in a database, and when a user logs in, we check if Enc(query) == entry in the database.
...
1
vote
0
answers
56
views
CWEs for Language Machine Learning Models
I'm looking for the relevant CWE's for specific attacks against prompt-based language ML models, such as GPT-3, GPT-4 etc.
Specifically:
Prompt Injection: Amending prompts with malicious input to ...
- 11
1
vote
0
answers
39
views
Are there any pretrained Malheur malware classification models or predefined datasets out there? [closed]
At my school's information security course we learned the basics of https://github.com/rieck/malheur
Are there any pretrained models? I imagine a use-case where I have several pretrained models then ...
- 111
1
vote
2
answers
106
views
How to source training data in ML for information security? [closed]
A company entrusts a Data Scientist with the mission of processing and valuing data for the research or treatment of events related to traces of computer attacks. I was wondering how would he get the ...
0
votes
2
answers
207
views
Can Machine Learning be utilized to identify and track IP Spoofing?
"IP Spoofing" refers to changing source IP addresses so that the attack appears to be coming from someone else.
When the victim replies to the address, it goes back to the spoofed address ...
- 1
1
vote
0
answers
95
views
Publicly Available PCAP dumps that associate IP addresses with Operating System? [closed]
I am currently working on a machine learning module to detect Operating Systems based on existing packet traffic in pcap file format. So far, I have generated some traffic of popular Operating Systems ...
- 11
1
vote
0
answers
110
views
Anonymous (privacy-preserving) random walk
Quoting this paper - SmartWalk (https://dl.acm.org/doi/pdf/10.1145/2976749.2978319):
For graph privacy, strong link privacy relies on deep perturbation to
the original graph, indicating a large ...
- 153
0
votes
2
answers
207
views
What is the current state of author recognition software and what can be done about it?
I'm curious what the current state of author recognition software is, i.e. software that detects the author of a certain anonymous text based on a certain pool of texts obtained from elsewhere. This ...
1
vote
2
answers
225
views
What is the term for adding benign code/behavior to malware to evade antiviruses?
Some malware authors add benign code/behavior to their malware just to throw off antiviruses and IDSs which employ machine learning to detect malware. There is a name for this technique (and even a ...
1
vote
0
answers
283
views
FYP ideas in Applications of Machine Learning in Cyber Security domain [closed]
I am a Computer Science Engineering undergraduate aspiring to pursue a career in the field of cyber security. I have some experience in web application security, memory and network forensics fields. I ...
- 11
1
vote
1
answer
174
views
Is it possible to exploit computer vision to achieve remote code execution?
What kind of vulnerability in the implementation of a vision-based machine learning system (object recognition, for example) would enable an attacker to achieve remote code execution?
The only ...
- 153
0
votes
2
answers
224
views
ML approach to malicious attachments using email contents
Based on my understanding of the field, it seems like there is a lot of attention paid to spam filtering based on the contents and metadata of an email, and there is considerable attention paid to ...
- 133
1
vote
1
answer
120
views
How we can PoC our product that needs training data for our machine learning algorithm of the the bank clients?
Recently, we have had a challenge with potential future clients which are the bank. Our product requires to gather static data (e.g. address, loans, last 50 transactions, etc) of banks clients. These ...
- 1,264
2
votes
1
answer
388
views
What features would you use to detect a backdoor or a bot installation?
I was reading a document about logging and analysis. The document talks about statistical analysis and machine learning techniques to detect some attack scenarios. For instance, If you want to detect ...
- 180
2
votes
1
answer
236
views
Can IP address considered as a useful feature for intrusion detection?
I am trying to build a machine learning model which classifies attacks. My data has a bunch of IP addresses, and I don't know if I should use the IP address as a feature to detect attacks. I found ...
- 180
2
votes
4
answers
210
views
Web Application Firewall with based on an external decision to detect anomaly
I have a theoretical knowledge about WAF but I do not have knowledge of the tools in the market. I wonder if there are any WAFs that base their decision making through a response from an external ...
0
votes
0
answers
98
views
Detecting network attacks by processing individual or multiple network packets?
I am trying to create a tool that identifies network attacks using machine learning, something like a small intrusion detection system. I have collected benign traffic from the network and then ...
- 649
0
votes
1
answer
364
views
How likely is it to see a commercial IDS/IPS that uses machine learning in the near future that performs better than a normal IDS/IPS? [closed]
I have to choose a field to study on and I want to know does it worth studying in this field and will the future IDS/IPS systems be using machine-learning/deep-learning or at least how likely is it?
...
- 200
3
votes
3
answers
1k
views
Extracting features from PE files. Machine learning and malware
Are the features which can be extracted from a PE file (some information from headers, section names, strings, import, export sections etc) enough to use them to train particular machine learning ...
- 131
1
vote
1
answer
293
views
The role of Machine Learning In Cybersecurity Defense [closed]
Hackers and malware are one step ahead of cybersecurity experts, and every time technology is released to the market, vulnerabilities will be quickly discovered and exploited.
How effective can ...
- 1,627
10
votes
1
answer
3k
views
Can CAPTCHA-solving patterns be used to track/identify a person?
Captchas are everywhere. Suppose you're a big company offering Captchas on many sites and you can easily track a user across the web simply by setting a cookie everytime some site loads your captcha ...
- 365
0
votes
1
answer
1k
views
What are some interesting project ideas that use machine learning to solve issues in IOT security? [closed]
I am interesting in IOT security and machine learning/deep learning. I am looking for good project ideas to work on.
example: http://projectabstracts.com/20138/a-malicious-pattern-detection-engine-...
- 117
0
votes
2
answers
872
views
What do you call an antivirus that detects suspicious activity?
A traditional antivirus scans data at rest and data in transit for known virus signatures. (Where "virus" includes trojans, rootkits, et al.)
This does not help when defending against zero-days and ...
- 3,610
0
votes
2
answers
221
views
Are there any real instances of threats to machine learning systems?
I recently read a paper on The security of Machine Learning.
Are there any instances of attacks against machine learning systems besides spam filters?
- 111
33
votes
6
answers
33k
views
Can a neural network crack hashing algorithms?
I've been reading a bit about neural networks, and their ability to approximate many complex functions.
Wouldn't a neural network be capable of cracking a hashing algorithm like SHA256?
For example, ...
- 583