AVID-2023-V004

Description

Bypassing Cylance’s AI Malware Detection

Details

Researchers at Skylight were able to create a universal bypass string that evades detection by Cylance’s AI Malware detector when appended to a malicious file.

References

• Bypassing Cylance’s AI Malware Detection
• Skylight Cyber Blog Post, “Cylance, I Kill You!"
• Statement’s from Skylight Cyber CEO

AVID Taxonomy Categorization

• Risk domains: Security
• SEP subcategories: S0403: Adversarial Example
• Lifecycle stages: L06: Deployment

Affected or Relevant Artifacts

• Developer:
• Deployer: CylancePROTECT, Cylance Smart Antivirus
• Artifact Details:

  Type	Name
  System	CylancePROTECT, Cylance Smart Antivirus

Other information

• Vulnerability Class: ATLAS Case Study
• Date Published: 2023-03-31
• Date Last Modified: 2023-03-31
• Version: 0.2
• AVID Entry