Confusing Kaspersky antimalware neural networks
Date: 2021
Affected: Kaspersky antimalware ML
Attack vector: evasion
Category: research
Severity: High

The Kaspersky ML research team attacked an internal antimalware ML model without white-box access using only feature knowledge and successfully evaded detection for most adversarially modified malware files.


Mitigations:

Architectural layers (MAESTRO):