Search papers, labs, and topics across Lattice.
This paper introduces a latent-stability analysis pipeline that evaluates how malware representations respond to feature-space perturbations, addressing the limitations of traditional clean-sample metrics. By defining Latent Escape Divergence (LED) and employing various representation techniques, the study reveals that while full EMBER features excel in clean classification, the proposed VAE+Mandelbrot+PINNFlow representation offers valuable insights into the behavior of these representations under perturbation. The findings highlight the importance of understanding latent movement and stability in enhancing malware detection robustness.
Traditional metrics fall short; this study reveals how perturbations expose vulnerabilities in malware representations that clean accuracy cannot capture.
Static malware detectors are commonly evaluated using clean-sample metrics such as accuracy, F1, ROC AUC, and PR AUC. However, these metrics provide limited insight into how learned malware representations behave when feature vectors are perturbed, how close samples move toward uncertain decision regions, or whether compressed representations preserve security-relevant structure. This paper presents a latent-stability analysis pipeline for malware perturbation assessment in EMBER feature space. The pipeline compares full EMBER features, PCA-based compression, beta/denoising variational autoencoder representations, Mandelbrot-inspired escape-time descriptors, and a PINN-style latent-flow module. We define Latent Escape Divergence (LED) to measure changes in escape-time profiles under perturbation, and use PINNFlow-derived residual, velocity, risk, and gradient-shift metrics to characterize latent movement. Experiments are conducted on EMBER static PE feature vectors using 180,000 training samples, 180,000 test samples, and 240,000 holdout samples. Full EMBER features achieve the strongest clean classification performance with ROC AUC of 0.9962 and F1 of 0.9713, while PCA-64 is the strongest compressed baseline with ROC AUC of 0.9846 and F1 of 0.9347. The proposed VAE+Mandelbrot+PINNFlow representation does not outperform these baselines for clean classification, but it provides additional diagnostic value under controlled feature-space perturbation probes.
