2 ms·
The featured article links to an article from Cylance that _does_ actually claim their model could've _theoretically_ detected and flagged malware before its cr
by _underfl0w_ 7y ago
The featured article links to an article from Cylance that _does_ actually claim their model could've _theoretically_ detected and flagged malware before its creation.
_"...before the cybercriminals set up the crypto-system, the payment details of the campaign, the C2 infrastructure and before anything else was readied, our model was fully able to predict and prevent that campaign’s malware."_
They claim that a 2015 version of their product _could have_ detected malware that was written in 2016.
This conjecture seems plausible but on closer inspection seems to be... speculative. Especially if something like this could undermine it.
- swinglock 7y agoOld school antiviruses also has heuristics so they could make the same claim. It wouldn't be true in practice because malware authors would just test their malware against common antiviruses and tweak it before shipping so that the heuristics don't pick it up. Just like these researches did against their "AI". AI really just meaning "generated heuristics", doesn't it? If it becomes a problem for malware authors they will make their own "AI" obfuscation generators soon if they haven't already. They still have the advantage since the "AI" antivirus runs locally, so they can just run tests against it until it doesn't detect, without having to send a large amount of malware samples to the defenders.