Track papers across labs, topics, and trends.
Search papers, labs, and topics across Lattice.
The authors generated two adversarial malware datasets, family-labelled and type-labelled, from the RawMal-TF collection using adversarial PE file generators, achieving high evasion rates against the EMBER classifier. They then demonstrated the vulnerability of malware classification pipelines to data poisoning by injecting small amounts of mislabeled adversarial samples. Specifically, injecting 0.5% of poisoned data increased the evasion rate against a retrained classifier from 26.1% to 92.8%.
Even a tiny dose of poisoned training data (0.5%) can completely cripple malware classifiers, boosting evasion rates from 26% to over 92%.
We present a dataset of adversarial malware samples derived from the public RawMal-TF collection of real-world malware binaries. Using a suite of adversarial malware generators, we construct two sets of adversarial PE files: 44,347 family-labelled samples and 33,596 type-labelled samples, achieving evasion rates of 98.35 % and 92.20 % against the EMBER classifier, respectively. Each adversarial binary is accompanied by detailed metadata, including EMBER scores and VirusTotal classifications. We further demonstrate the susceptibility of malware classification pipelines to data poisoning attacks through a series of training experiments. Injecting fully mislabelled adversarial samples representing only 0.5 % of the training data in the family-labelled dataset increases the evasion rate against the re-trained classifier from 26.1 % to 92.8 %. The dataset is publicly released to facilitate future research on adversarial malware, poisoning attacks, and the robustness of machine-learning-based malware detection systems.