Welcome to the Machine Learning Static Evasion Competition

 

These Terms and Conditions ("Terms") apply to the Machine Learning Static Evasion Competition sponsored by Endgame Inc (the "Competition"). Please read these Terms carefully as they form a binding legal agreement between you and the Competition Sponsor.

 

COMPETITION SPONSOR: Endgame Inc., 3101 Wilson Blvd, Suite 500, Arlington, VA 22201 ("Endgame") with respect to the Competition.

 

COMPETITION WEBSITE: https://evademalwareml.io/

 

YOU MAY NOT SUBMIT AN ENTRY TO A COMPETITION UNLESS YOU AGREE TO THESE TERMS. YOUR SUBMISSION OF AN ENTRY IN A COMPETITION CONSTITUTES YOUR AGREEMENT TO THESE TERMS.

 

The words "include" and "including" as used in these Terms mean "including but not limited to."

 

1.     Liability.

1.1.  You understand that the competition requires downloading, storing, manipulating and/or executing malicious executables (“malware”).

1.2.  You agree that you will exercise appropriate industry practices for downloading, storing, manipulating, and/or executing malware, which may include

1.2.1.     Using an operating system other than those compatible with Microsoft Windows for storing/manipulating portable executable (PE) files

1.2.2.     Using a sandbox with disabled internet access to detonate and explore the behavior of the malware

1.3.  The Competition Sponsor shall have no liability whatsoever for any claims, losses, actions, damages, suits, or proceedings resulting from:

1.3.1.     Damage or loss caused by malware to your computer or computer network

1.3.2.     Damage or loss caused by malware to other computers or computer networks owing to your distributing of original or modified malicious software.

 

2.     Eligibility.

2.1.  VOID WHERE PROHIBITED. The Competition is void in Crimea, Cuba, North Korea, Syria, (due to OFAC restrictions), and Quebec, for example, where prohibited by law. Please check your local laws before entering.

2.2.  NO PURCHASE NECESSARY TO ENTER OR WIN. You do not need to purchase any Competition Sponsor product or service to enter or win the Competition.

2.3.  Ineligible Individuals.

2.3.1.     You cannot participate in the Competition if you are, and will be immediately disqualified and forfeit all of your prizes if you become:

2.3.1.1.         a resident of Crimea, Cuba, North Korea, Syria, (due to OFAC restrictions), and Quebec, for example, or anywhere where the Competition is prohibited by law;

2.3.1.2.         restricted by applicable export controls and sanctions programs;

2.3.1.3.         a current employee (including intern), contractor, officer, or director, of Endgame or its affiliates; or

2.3.1.4.         an immediate family member (including a parent, sibling, child, spouse, or life partner regardless of where you live) of one of the individuals listed in subsection (2.3.1.3) above or you are a member of their household (whether related or not).

2.4.  Requirements to Enter.

2.4.1.     In order to enter the Competition, you must have:

2.4.1.1.         access to the Internet, and

2.4.1.2.         a valid Google Mail (Gmail) account for authentication.

2.5.  Verifying Eligibility. The Competition Sponsor reserves the right to verify your eligibility and to adjudicate on any dispute at any time. You agree to provide the Competition Sponsor with any proof of eligibility requested by Competition Sponsor and your refusal or failure to provide such proof within 10 days of Competition Sponsor’s request will result in your disqualification from the Competition and forfeiture of any prizes.

2.6.  Communications. All communications between Competition Sponsor and you, including the Competition Website and email communications, will be in English.

 

3.     Participation.

3.1.  Registration. To enter the Competition, you must register at the Competition Website and provide the required information about yourself.

3.1.1.     Registration times are listed on the Competition Website. YOU ARE RESPONSIBLE FOR DETERMINING THE CORRESPONDING TIME IN YOUR TIME ZONE.

3.1.2.     You may only register for the Competition with one valid email address. If you compete in the same Competition with multiple email addresses, you will be disqualified.

3.2.  Screen Names. Competition Sponsor reserves the right to change or omit participant screen names or nicknames for purposes of publication, particularly if they are, in the Competition Sponsor’s sole opinion, obscene or violate the intellectual property rights of others.

 

4.     Competition Structure.

4.1.  Overview. The competition consists of modifying functional malware (provided on the Competition Website) to evade one or more hosted machine learning models.  Modified malware samples are to be uploaded as a ZIP file on the Competition Website.  The samples will be evaluated by one or more hosted machine learning models, and the functionality of the malware will be verified by detonating the malware in a virtual machine.

4.2.  Available information. One or more machine learning models will be made available to contestants for download and inspection to reverse engineer or for other strategies for creating evasive malware variants.

4.3.  Submissions. You must submit your solutions through the Competition Website.

4.3.1.     Your submission must be in the format specified by the task, the Competition Website, and these Terms (with precedence given in that order).

4.3.2.     Solutions submitted after the applicable deadline will not be accepted.

4.4.  Modifying the Competition. Competition Sponsor may cancel or modify the structure, location, and times of the Competition to run the Competition in accordance with these Terms or to prevent an unfair result.

 

5.     Judging and Scoring. 

The solutions you submit will be judged as follows.

5.1.  Points. Your submission will earn a certain number of points.

5.1.1.     For each modified malware sample, you will receive one point for each machine learning model that it evades, so long as the modified malware sample has identical behavior to the original malware sample when run in the sandbox of the Competition Website.

5.1.2.     No points will be awarded for samples which do not produce the same behavioral report as an original sample in the malware sandbox.

5.2.  Ranking Participants.

5.2.1.     Highest Score First. Participants will be ranked in order of the highest score first and lowest score last.

5.2.2.     Ties Ranked by Submission Time. In the event of a tie between participants, the one with the earliest submission time will be ranked first while the one with the latest submission time will be ranked last. We reserve the right to break ties when necessary based on finer time precision than is specified on the scoreboard.

 

6.     Notice of Winners.

6.1.  Announcement of Winners. The results of the Participant will be posted on the Competition Website after its completion. Posted results will include a list of the participants' names or nicknames in ranked order based on their scores.

 

7.     Disqualification.

7.1.  You may be disqualified from the Competition and forfeit any prizes you may be eligible to receive if the Competition Sponsor reasonably believes that you have attempted to undermine the legitimate operation of the Competition, including:

7.1.1.     Providing false information about yourself during registration or concerning your eligibility;

7.1.2.     Breaching or refusing to comply with these Terms;

7.1.3.     Tampering or interfering with administration of the Competition or with the ability of other participants to participate in the Competition;

7.1.4.     The Competition administrators determine that you have failed to comply with the Competition Rules. This determination is at their sole discretion.

7.1.5.     Submitting content that violates the rights of a third party; is lewd, obscene, pornographic, racist, sexist, or otherwise inappropriate to the Competition; or violates any applicable law

 

8.     Ownership; Rights in Your Submissions; Privacy.

8.1.  License to Use Content; Reservation of Rights. You may use the data and content made available on the Competition Website solely to prepare for and compete in the Competition. The Competition Sponsor retains all rights in such code and content not explicitly granted by these Terms.

8.2.  Ownership of Submission. You retain all rights to your submissions of output files and source code that you had before submitting them to the Competition.

8.3.  License to Submissions. For any submission you make to the Competition, you grant the Competition Sponsor a non-exclusive, worldwide, perpetual, irrevocable, free license (with the right to sublicense) to reproduce, prepare derivative works of, distribute, publicly perform, publicly display, and otherwise use such submission.

8.4.  Open Source Release. In order to be eligible for the competition prize, you agree to release an open source version of the code used to generate the evasive variants under one of the following open source licenses: Apache 2.0, BSD, LGPL, or MIT.

8.5.  Privacy.

8.5.1.     How Competition Sponsor May Use Your Information.

8.5.1.1.         By accepting a prize, you agree that Competition Sponsor may use your name, likeness, and statements without compensation to promote the Competition, including displaying it on the Competition Website.

8.5.1.2.         Sharing Your Information. Your name and username you create during registration may be displayed publicly on the Competition Website. If you win a prize, Competition Sponsor may share your name and address with third parties to fulfill awarding a prize to you.

 

9.     Indemnities.  You will indemnify the Competition Sponsor and its affiliates, directors, officers, employees against all liabilities, damages, losses, costs, fees (including legal fees), and expenses relating to any allegation or third-party legal proceeding to the extent arising from:

9.1.  your acts or omissions in relation to the Competition (including your use or acceptance of any prize and your breach of these Terms); and

9.2.  your submissions violating any rights of any other person or entity or any obligation you may have with them.

 

10.  Disclaimers.  THE COMPETITION WEBSITE AND ALL CONTENT (INCLUDING SOURCE CODE) IS PROVIDED ON AN "AS IS" AND "AS AVAILABLE" BASIS. THE COMPETITION SPONSOR DISCLAIMS ALL REPRESENTATIONS AND WARRANTIES (EXPRESS OR IMPLIED), INCLUDING ANY WARRANTIES OF MERCHANTABILITY AND FITNESS FOR A PARTICULAR PURPOSE. THE COMPETITION SPONSOR IS NOT RESPONSIBLE FOR ANY INCOMPLETE, FAILED, OR DELAYED TRANSMISSION OF YOUR APPLICATION INFORMATION OR SUBMISSIONS DUE TO THE INTERNET, INCLUDING INTERRUPTION OR DELAYS CAUSED BY EQUIPMENT OR SOFTWARE MALFUNCTION OR OTHER TECHNICAL PROBLEMS. YOU USE ALL SOURCE CODE AVAILABLE ON THE COMPETITION WEBSITE AT YOUR OWN RISK.

 

11.  General.

11.1.               Not an Offer or Contract Of Employment.

11.1.1.  You acknowledge that your participation is voluntary.

11.1.2.  You acknowledge that no confidential, fiduciary, agency or other relationship or implied-in-fact contract now exists between you and the Competition Sponsor and that no such relationship is established by your submission of an entry to the Competition.

11.1.3.  You understand and agree that nothing in these Terms, any Rules, a submission into the Competition, or an award of a prize may be construed as an offer or contract of employment with the Competition Sponsor.

11.2.               Severability. If any term (or part of a term) of these Terms is invalid, illegal or unenforceable, the rest of the rules will remain in effect.

11.3.               Translations. In the event of any discrepancy between the English version of these Terms and a translated version, the English version will govern.