Search papers, labs, and topics across Lattice.
This paper investigates the vulnerabilities of machine learning-based data drift detection tools in the context of evasion and poisoning attacks, particularly as they relate to malware classification. By analyzing the interaction between data drift detectors and malware classifiers, the authors reveal that the distinct characteristics of data drift detectors lead to different attack dynamics than those observed in traditional malware classifiers. The key finding indicates that evasion and poisoning attacks can exploit these differences, potentially undermining the effectiveness of drift detection in maintaining accurate malware classification.
Evasion and poisoning attacks can exploit the unique vulnerabilities of data drift detectors, leading to misclassifications that traditional defenses might overlook.
As concept drift due to malware evolution presents challenges for malware classification, machine learning-based data drift detection tools are developed to mitigate this problem. These data drift detector tools are designed for a different purpose and built with different techniques compared to malware classifiers. Although evasion and poisoning attacks against machine learning-based malware classifiers can cause misclassification of malware samples, it is not clear how these attacks work against data drift detectors and malware classifiers in combination. This work investigates the effect of evasion and poisoning attacks on the data drift detector along with the malware classifier. We demonstrate how unique characteristics of data drift detectors cause attacks against malware classifiers to work differently against them.
