Stealing and Evading Malware Classifiers and Antivirus at Low False Positive Conditions

Maria Rigaki, Sebastian Garcia

Model stealing attacks have been successfully used in many machine learning domains, but there is little understanding of how these attacks work against models that perform malware…