Mal-D2GAN: Double-Detector based GAN for Malware Generation

Fuente: arXiv
Gespeichert in:
Bibliographische Detailangaben
Hauptverfasser: Thanh, Nam Hoang, Duy, Trung Pham, Thu, Lam Bui
Format: Preprint
Veröffentlicht: 2025
Schlagworte:
Online-Zugang:
Tags: Tag hinzufügen
Keine Tags, Fügen Sie den ersten Tag hinzu!
_version_ 1866918034024693760
author Thanh, Nam Hoang
Duy, Trung Pham
Thu, Lam Bui
author_facet Thanh, Nam Hoang
Duy, Trung Pham
Thu, Lam Bui
contents Machine learning (ML) has been developed to detect malware in recent years. Most researchers focused their efforts on improving the detection performance but ignored the robustness of the ML models. In addition, many machine learning algorithms are very vulnerable to intentional attacks. To solve these problems, adversarial malware examples are generated by GANs to enhance the robustness of the malware detector. However, since current GAN models suffer from limitations such as unstable training and weak adversarial examples, we propose the Mal-D2GAN model to address these problems. Specifically, the Mal-D2GAN architecture was designed with double-detector and a least square loss function and tested on a dataset of 20,000 samples. The results show that the Mal-D2GAN model reduced the detection accuracy (true positive rate) in 8 malware detectors. The performance was then compared with that of the existing MalGAN and Mal- LSGAN models.
format Preprint
id arxiv_https___arxiv_org_abs_2505_18806
institution arXiv
publishDate 2025
record_format arxiv
spellingShingle Mal-D2GAN: Double-Detector based GAN for Malware Generation
Thanh, Nam Hoang
Duy, Trung Pham
Thu, Lam Bui
Cryptography and Security
Machine learning (ML) has been developed to detect malware in recent years. Most researchers focused their efforts on improving the detection performance but ignored the robustness of the ML models. In addition, many machine learning algorithms are very vulnerable to intentional attacks. To solve these problems, adversarial malware examples are generated by GANs to enhance the robustness of the malware detector. However, since current GAN models suffer from limitations such as unstable training and weak adversarial examples, we propose the Mal-D2GAN model to address these problems. Specifically, the Mal-D2GAN architecture was designed with double-detector and a least square loss function and tested on a dataset of 20,000 samples. The results show that the Mal-D2GAN model reduced the detection accuracy (true positive rate) in 8 malware detectors. The performance was then compared with that of the existing MalGAN and Mal- LSGAN models.
title Mal-D2GAN: Double-Detector based GAN for Malware Generation
topic Cryptography and Security
url https://arxiv.org/abs/2505.18806