Training a malware scanner using training data that includes malware generated by an artificial intelligence (ai)

A server comprising:

• one or more processors;
• and
• one or more non-transitory computer readable media storing instructions executable by the one or more processors to perform operations comprising:
• injecting malicious code into a legitimate software package to create an injected package;
• extracting, by an artificial intelligence, a plurality of parts of the injected package;
• mutating, by the artificial intelligence, individual parts of the plurality of parts to create multiple mutated parts;
• assembling at least a portion of the multiple mutated parts to create a mutated malware;
• determining, by a malware scanner, a risk score associated with the mutated malware;
• based at least in part on determining that the risk score satisfies a predetermined threshold, storing the mutated malware in a set of mutated malware;
• after determining, by the one or more processors, that a number of mutated malware in the set of mutated malware satisfies a requested number, adding the set of mutated malware to a set of training data;
• training, using the set of training data, a particular malware scanner that includes a particular artificial intelligence component;
• and
• deploying the particular malware scanner to detect malware.

One or more non-transitory computer readable media capable of storing instructions executable by one or more processors to perform operations comprising:

• injecting malicious code into a legitimate software package to create an injected package;
• extracting, by an artificial intelligence, a plurality of parts of the injected package;
• mutating, by the artificial intelligence, individual parts of the plurality of parts to create multiple mutated parts;
• assembling at least a portion of the multiple mutated parts to create a mutated malware;
• determining, by a malware scanner, a risk score associated with the mutated malware;
• based at least in part on determining that the risk score satisfies a predetermined threshold, storing the mutated malware in a set of mutated malware;
• after determining, by the one or more processors, that a number of mutated malware in the set of mutated malware satisfies a requested number, adding the set of mutated malware to a set of training data;
• training, using the set of training data, a particular malware scanner that includes a particular artificial intelligence component;
• and
• deploying the particular malware scanner to detect malware.