4 ms·
The actual research: https://skylightcyber.com/2019/07/18/cylance-i-kill-you/ https://skylightcyber.com/2019/07/18/cylance-i-kill-you/ Actual summary, Cylance
by some_random 7y ago
The actual research: https://skylightcyber.com/2019/07/18/cylance-i-kill-you/ https://skylightcyber.com/2019/07/18/cylance-i-kill-you/
Actual summary, Cylance has a model that uses strings as a feature, and by taking all the strings from the whitelisted files and catting them onto the malware sample one can subvert the ensemble model completely.
- jgalentine007 7y agoWhich is something a novice computer user might try when 'hacking'. Really Cylance?
- ma2rten 7y agoSome early spam filters could also be tricked using the same technique. I think PG might have written about this.
- nsajko 7y agohttp://www.paulgraham.com/antispam.html http://www.paulgraham.com/antispam.html http://www.paulgraham.com/sofar.html http://www.paulgraham.com/sofar.html > More Good Tokens