~/talk

Machine Learning Security Evasion Competition 2020

links:none on file
slides:none on file

A competition modifies 50 Windows malware samples to evade three ML engines (EMBER plus two submitted models), first as a white‑box then as a black‑box challenge; 70 people register in early rounds, 11 bypass at least one model, later 60 register and five bypass any model, engines see ~5,000 queries. Practical wins use simple file edits: the overlay technique (appending data) is the most effective, others use added sections borrowed from benign files or packers that often break functionality; example tooling includes EMBER, hyperopt, VMRay and Docker defenses.

AI-written summary · about

  1. 0:00Start
  2. 13:04Demo
  3. 17:07Winners of 2020
  4. 19:11Machine Learning Evasion Code Walkthrough
  5. 20:15Leaderboard Criteria
~/search
type to search 6,249 conferences, 138,987 speakers and 185,172 talks
~/help
cmdctrl k
search every conference, speaker and series
/
focus the filter search
h
home
c
conferences
s
speakers
e
series
t
light / dark — the status bar button does the same
?
this help
esc
close this, then clear every filter — or just the search, while you are typing in it

Ignored while you are typing. Pages without a filter rail have no search to focus.