39 citations · 82 across the 22 of their papers we have counts for
24 papers
Windows Malware Detector as a Compound AI System: Trade-Offs in Accuracy, Efficiency, and Adversarial Robustness
Andrea Ponte, Luca Demetrio, Luca Oneto +2
Industrial Windows malware detectors are commonly described as Compound AI Systems composed of multiple heterogeneous components, including rule-based mechanisms as well as machine…
Architectural Backdoors in Vision-Language Model Supply Chains via Representation Steering
Maria Rosaria Briglia, Igor Maljkovic, Antonio Emanuele Cinà +3
Vision--Language Models (VLMs) are increasingly deployed through a model supply chain in which pretrained checkpoints, architecture definitions, text encoders, and exported computa…
EXE-Bench: Ranking the Tradeoffs of AI-based Windows Malware Detectors for Real-World Usability
Andrea Ponte, Daniel Gibert, Matous Kozak +5
Due to the lack of systematic evaluations, we are not yet able to determine which AI-based Windows malware detector to deploy in production, since existing evaluations (i) differ i…
Adversarial Frontiers: Minimum-Norm Attack Ensembles for Robustness Evaluation
Luca Scionis, Luca Melis, Maura Pintor +5
Adversarial robustness is commonly evaluated with predefined attack ensembles, such as AutoAttack, at a single perturbation budget and on a selective choice of pertur…
DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors
Christian Scano, Diego Soi, Angelo Sotgiu +5
Adversarial APKs are Android applications modified in the problem space to evade machine-learning malware detectors. In this work, we first show that, despite claims, existing prob…
Harnessing Hyperbolic Geometry for Harmful Prompt Detection and Sanitization
Igor Maljkovic, Maria Rosaria Briglia, Iacopo Masi +2
Vision-Language Models (VLMs) have become essential for tasks such as image synthesis, captioning, and retrieval by aligning textual and visual information in a shared embedding sp…
Out-of-Distribution Detection for Continual Learning: Design Principles and Benchmarking
Srishti Gupta, Riccardo Balia, Daniele Angioni +7
Recent years have witnessed significant progress in the development of machine learning models across a wide range of fields, fueled by increased computational resources, large-sca…
Evaluating the Evaluators: Trust in Adversarial Robustness Tests
Antonio Emanuele Cinà, Maura Pintor, Luca Demetrio +3
Despite significant progress in designing powerful adversarial evasion attacks for robustness verification, the evaluation of these methods often remains inconsistent and unreliabl…
Regression-aware Continual Learning for Android Malware Detection
Daniele Ghiani, Daniele Angioni, Giorgio Piras +6
Malware evolves rapidly, forcing machine learning-based detectors to be continuously updated. With antivirus vendors processing hundreds of thousands of new samples daily, datasets…
Vision Transformer with Adversarial Indicator Token against Adversarial Attacks in Radio Signal Classifications
Lu Zhang, Sangarapillai Lambotharan, Gan Zheng +4
The remarkable success of transformers across various fields such as natural language processing and computer vision has paved the way for their applications in automatic modulatio…
Buffer-free Class-Incremental Learning with Out-of-Distribution Detection
Srishti Gupta, Daniele Angioni, Maura Pintor +4
Class-incremental learning (CIL) poses significant challenges in open-world scenarios, where models must not only learn new classes over time without forgetting previous ones but a…
Robust image classification with multi-modal large language models
Francesco Villani, Igor Maljkovic, Dario Lazzaro +3
Deep Neural Networks are vulnerable to adversarial examples, i.e., carefully crafted input samples that can cause models to make incorrect predictions with high confidence. To miti…
On the Robustness of Adversarial Training Against Uncertainty Attacks
Emanuele Ledda, Giovanni Scodeller, Daniele Angioni +5
In learning problems, the noise inherent to the task at hand hinders the possibility to infer without a certain degree of uncertainty. Quantifying this uncertainty, regardless of i…
Adversarial Pruning: A Survey and Benchmark of Pruning Methods for Adversarial Robustness
Giorgio Piras, Maura Pintor, Ambra Demontis +3
Recent work has proposed neural network pruning techniques to reduce the size of a network while preserving robustness against adversarial examples, i.e., well-crafted inputs induc…
Sonic: Fast and Transferable Data Poisoning on Clustering Algorithms
Francesco Villani, Dario Lazzaro, Antonio Emanuele Cinà +3
Data poisoning attacks on clustering algorithms have received limited attention, with existing methods struggling to scale efficiently as dataset sizes and feature counts increase.…
HO-FMN: Hyperparameter Optimization for Fast Minimum-Norm Attacks
Raffaele Mura, Giuseppe Floris, Luca Scionis +6
Gradient-based attacks are a primary tool to evaluate robustness of machine-learning models. However, many attacks tend to provide overly-optimistic evaluations as they use fixed l…
Over-parameterization and Adversarial Robustness in Neural Networks: An Overview and Empirical Analysis
Srishti Gupta, Zhang Chen, Luca Demetrio +9
Thanks to their extensive capacity, over-parameterized neural networks exhibit superior predictive capabilities and generalization. However, having a large parameter space is consi…
A New Formulation for Zeroth-Order Optimization of Adversarial EXEmples in Malware Detection
Marco Rando, Luca Demetrio, Lorenzo Rosasco +1
Machine learning malware detectors are vulnerable to adversarial EXEmples, i.e., carefully-crafted Windows programs tailored to evade detection. Unlike other adversarial problems,…
SLIFER: Investigating Performance and Robustness of Malware Detection Pipelines
Andrea Ponte, Dmitrijs Trizna, Luca Demetrio +3
As a result of decades of research, Windows malware detection is approached through a plethora of techniques. However, there is an ongoing mismatch between academia -- which pursue…
Updating Windows Malware Detectors: Balancing Robustness and Regression against Adversarial EXEmples
Matous Kozak, Luca Demetrio, Dmitrijs Trizna +1
Adversarial EXEmples are carefully-perturbed programs tailored to evade machine learning Windows malware detectors, with an ongoing effort to develop robust models able to address…
AttackBench: Evaluating Gradient-based Attacks for Adversarial Examples
Antonio Emanuele Cinà, Jérôme Rony, Maura Pintor +5
Adversarial examples are typically optimized with gradient-based attacks. While novel attacks are continuously proposed, each is shown to outperform its predecessors using differen…
Robust Synthetic Data-Driven Detection of Living-Off-the-Land Reverse Shells
Dmitrijs Trizna, Luca Demetrio, Battista Biggio +1
Living-off-the-land (LOTL) techniques pose a significant challenge to security operations, exploiting legitimate tools to execute malicious commands that evade traditional detectio…
Robustness-Congruent Adversarial Training for Secure Machine Learning Model Updates
Daniele Angioni, Luca Demetrio, Maura Pintor +4
Machine-learning models demand periodic updates to improve their average accuracy, exploiting novel architectures and additional data. However, a newly updated model may commit mis…
Nebula: Self-Attention for Dynamic Malware Analysis
Dmitrijs Trizna, Luca Demetrio, Battista Biggio +1
Dynamic analysis enables detecting Windows malware by executing programs in a controlled environment and logging their actions. Previous work has proposed training machine learning…