Showing cs.CRShow all
3 papers · 1 filter
cs.CR2026
DITTO: A Context-aware Pickle-based Pre-Trained Model Scanner for Effective Security Audits
Qiaolin Qin, Wanpeng Li, Benoit Baudry +3
Pre-trained models (PTMs) are widely distributed as serialized binaries, but their reuse often exposes software supply chains to deserialization attacks. Despite the emergence of s…
cs.CR2026
Breaking the Black Box: Byte-Level Boundary Inference of Real-World Antivirus Systems
Jieshuai Yang, Zhi Wang, Yan Jia +6
Existing approaches for understanding the detection logic of real-world antivirus (AV) software infer only binary malware/benign decisions from black-box queries, providing limited…
cs.CR2026
Weaponizing Ground Truth: Data Poisoning Attacks by Exploiting Boundary Misalignment Between Antivirus Software and Learning-Based Detectors
Jieshuai Yang, Zhi Wang, Yan Jia +6
Machine-learning (ML)-based malware detectors are commonly trained using labels obtained from antivirus (AV) engines and aggregation services (e.g., VirusTotal). This practice assu…