Md Ajwad Akil

Adversarially training your drift-adaptive malware detector on the wrong data (source vs. target) can actually *increase* its vulnerability to certain attacks, revealing a surprising interaction between domain adaptation and adversarial robustness.