Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Flow-based detection and proxy-based evasion of encrypted malware C2
  traffic   State of the art deep learning techniques are known to be vulnerable to
evasion attacks where an adversarial sample is generated from a malign sample
and misclassified as benign. Detection of encrypted malware command and control
traffic based on TCP/IP flow features can be framed as a learning task and is
thus vulnerable to evasion attacks. However, unlike e.g. in image processing
where generated adversarial samples can be directly mapped to images, going
from flow features to actual TCP/IP packets requires crafting the sequence of
packets, with no established approach for such crafting and a limitation on the
set of modifiable features that such crafting allows. In this paper we discuss
learning and evasion consequences of the gap between generated and crafted
adversarial samples. We exemplify with a deep neural network detector trained
on a public C2 traffic dataset, white-box adversarial learning, and a
proxy-based approach for crafting longer flows. Our results show 1) the high
evasion rate obtained by using generated adversarial samples on the detector
can be significantly reduced when using crafted adversarial samples; 2)
robustness against adversarial samples by model hardening varies according to
the crafting approach and corresponding set of modifiable features that the
attack allows for; 3) incrementally training hardened models with adversarial
samples can produce a level playing field where no detector is best against all
attacks and no attack is best against all detectors, in a given set of attacks
and detectors. To the best of our knowledge this is the first time that level
playing field feature set- and iteration-hardening are analyzed in encrypted C2
malware traffic detection.

11
The categories of this paper are: hep-lat
30
The categories of this paper are: q-alg
33
The categories of this paper are: plasm-ph
37
The categories of this paper are: supr-con
19
The categories of this paper are: eess
0
The categories of this paper are: hep-ph
24
The categories of this paper are: dg-ga
8
The categories of this paper are: hep-ex
9
The categories of this paper are: nlin
17
The categories of this paper are: q-fin
3
The categories of this paper are: physics
14
The categories of this paper are: math-ph
12
The categories of this paper are: nucl-th
25
The categories of this paper are: patt-sol
13
The categories of this paper are: quant-ph
20
The categories of this paper are: acc-phys