Search papers, labs, and topics across Lattice.
This paper introduces DROIDBREAKER, a novel framework for crafting adversarial APKs that effectively evade machine-learning-based Android malware detectors. By addressing the impracticalities of existing problem-space attacks, DROIDBREAKER employs query-efficient techniques to manipulate only the most influential APK components while ensuring that the modified applications maintain their intended functionality. Evaluations demonstrate that DROIDBREAKER achieves high evasion rates with minimal side effects, significantly reducing detection rates by commercial malware scanners.
Existing problem-space attacks are largely impractical, but DROIDBREAKER shows how to craft adversarial APKs that evade detection while preserving functionality.
Adversarial APKs are Android applications modified in the problem space to evade machine-learning malware detectors. In this work, we first show that, despite claims, existing problem-space attacks remain largely impractical. Most techniques leverage software transplantation to inject entire benign modules, introducing many side-effect features and often causing build-time failures. Fine-grained methods that inject only a narrow subset of components exhibit limited effectiveness, while those that also use obfuscation rely on brittle bytecode rewriting, producing APKs that are syntactically valid but semantically unusable. Prior work further overestimates attack success rates by running smoke tests that only validate installation and basic execution, without assessing whether the modified APK still preserves its intended behavior. To overcome these limitations, we present DROIDBREAKER, a practical (build-safe) and functional (semantics-preserving) problem-space attack framework that provides: (i) query-efficient white- and black-box attacks by manipulating only the APK components most influential to the target model; (ii) a set of fine-grained, build-safe manipulations (including injection and obfuscation of API calls, app modules, permissions, and URLs) with minimal side effects; and (iii) a semantics-preserving functionality test that enforces runtime equivalence by comparing execution logs and API-level traces between the initial and the modified APK. Evaluated on a recent corpus of Android applications, DROIDBREAKER achieves high evasion rates with few queries and minimal side effects in both white-box and black-box settings, and drastically reduces detections by commercial malware scanners hosted on VirusTotal.
