Evasion of deep-learning detector for malware C&C traffic
Date: 2023
Affected: Palo Alto Networks ML malware detector
Attack vector: evasion
Category: research
Severity: High

The Palo Alto Networks Security AI research team tested a deep-learning model for malware C&C traffic detection in HTTP and demonstrated that crafted traffic can evade the detector.


Mitigations:

Architectural layers (MAESTRO):