Effectiveness of Adversarial Benign and Malware Examples in Evasion and Poisoning Attacks
The result's identifiers
Result code in IS VaVaI
<a href="https://www.isvavai.cz/riv?ss=detail&h=RIV%2F68407700%3A21240%2F25%3A00385368" target="_blank" >RIV/68407700:21240/25:00385368 - isvavai.cz</a>
Result on the web
<a href="https://doi.org/10.1007/978-3-031-83157-7_10" target="_blank" >https://doi.org/10.1007/978-3-031-83157-7_10</a>
DOI - Digital Object Identifier
<a href="http://dx.doi.org/10.1007/978-3-031-83157-7_10" target="_blank" >10.1007/978-3-031-83157-7_10</a>
Alternative languages
Result language
angličtina
Original language name
Effectiveness of Adversarial Benign and Malware Examples in Evasion and Poisoning Attacks
Original language description
Adversarial attacks present significant challenges for malware detection systems. This research investigates the effectiveness of benign and malicious adversarial examples (AEs) in evasion and poisoning attacks on the Portable Executable file domain. A novel focus of this study is on benign AEs, which, although not directly harmful, can increase false positives and undermine trust in antivirus solutions. We propose modifying existing adversarial malware generators to produce benign AEs and show they are as successful as malware AEs in evasion attacks. Furthermore, our data show that benign AEs have a more decisive influence in poisoning attacks than standard malware AEs, demonstrating their superior ability to decrease the model’s performance. Our findings introduce new opportunities for adversaries and further increase the attack surface that needs to be protected by security researchers.
Czech name
—
Czech description
—
Classification
Type
C - Chapter in a specialist book
CEP classification
—
OECD FORD branch
10201 - Computer sciences, information science, bioinformathics (hardware development to be 2.2, social aspect to be 5.8)
Result continuities
Project
—
Continuities
S - Specificky vyzkum na vysokych skolach
Others
Publication year
2025
Confidentiality
S - Úplné a pravdivé údaje o projektu nepodléhají ochraně podle zvláštních právních předpisů
Data specific for result type
Book/collection name
Machine Learning, Deep Learning and AI for Cybersecurity
ISBN
978-3-031-83156-0
Number of pages of the result
24
Pages from-to
267-290
Number of pages of the book
642
Publisher name
Springer Nature Switzerland AG
Place of publication
Basel
UT code for WoS chapter
—