7 citations · 14 across the 4 of their papers we have counts for
4 papers
On the Effectiveness of Adversarial Training on Malware Classifiers
Hamid Bostani, Jacopo Cortellazzi, Daniel Arp +3
Adversarial Training (AT) is a key defense against Machine Learning evasion attacks, but its effectiveness for real-world malware detection remains poorly understood. This uncertai…
How to Train your Antivirus: RL-based Hardening through the Problem-Space
Ilias Tsingenopoulos, Jacopo Cortellazzi, Branislav Bošanský +5
ML-based malware detection on dynamic analysis reports is vulnerable to both evasion and spurious correlations. In this work, we investigate a specific ML architecture employed in…
Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers
Limin Yang, Zhi Chen, Jacopo Cortellazzi +5
Malware classifiers are subject to training-time exploitation due to the need to regularly retrain using samples collected from the wild. Recent work has demonstrated the feasibili…
Intriguing Properties of Adversarial ML Attacks in the Problem Space [Extended Version]
Jacopo Cortellazzi, Feargus Pendlebury, Daniel Arp +3
Recent research efforts on adversarial machine learning (ML) have investigated problem-space attacks, focusing on the generation of real evasive objects in domains where, unlike im…