Subverting adversarial attribution

颠覆对抗性归因

• 批准号: RGPIN-2020-06319
• 负责人: Stakhanova, Natalia
• 金额: $ 2.11万
• 依托单位: University of Saskatchewan
• 依托单位国家: 加拿大
• 项目类别: Discovery Grants Program - Individual
• 财政年份: 2021
• 资助国家: 加拿大
• 起止时间: 2021-01-01 至 2022-12-31
• 项目状态: 已结题
• 来源: https://www.nserc-crsng.gc.ca/ase-oro/Details-Detailles_eng.asp?id=740731
• 关键词: Subverting; adversarial; attribution

Everything changes when a threat of malware attack becomes your number one priority. Recent cyberattacks have caused severe consequences in critical sectors including healthcare, the financial industry, and national defense. Malicious software, or malware, has become an ultimate tool in these attacks. In 2016, malware was responsible for Ukraine's power grid blackout. In 2017, hospitals across UK were hit with a ransomware attack demanding payment for unlocking the hospital's IT systems. Adaptive, destructive, and constantly evolving, malware evades our traditional defenses. More than ever adversaries use obfuscation techniques to disguise their identity, and their malicious code to make it hard to detect, analyze or understand. The long-term goal of our research is to design and develop efficient and resilient techniques for identifying, understanding, evaluating and neutralizing obfuscation defenses in software. This will not only give us more effective software protection tools, but will also greatly enhance our understanding of adversarial behavior.

当恶意软件攻击的威胁成为您的首要任务时，一切都会改变。最近的网络攻击在医疗保健、金融行业和国防等关键行业造成了严重后果。恶意软件或恶意软件已成为这些攻击的终极工具。2016年，恶意软件是乌克兰电网中断的罪魁祸首。2017年，英国各地的医院遭到勒索软件攻击，要求为解锁医院的IT系统支付费用。自适应、破坏性和不断发展的恶意软件避开了我们的传统防御。对手比以往任何时候都更多地使用混淆技术来伪装他们的身份，并使用他们的恶意代码来使其难以检测、分析或理解。我们研究的长期目标是设计和开发有效的和有弹性的技术来识别、理解、评估和中和软件中的混淆防御。这不仅将给我们提供更有效的软件保护工具，还将大大提高我们对对抗行为的理解。