Bayesian Learned Models Can Detect Adversarial Malware For Free

arXiv:2403.18309v1 Announce Type: new
Abstract: The vulnerability of machine learning-based malware detectors to adversarial attacks has prompted the need for robust solutions. Adversarial training is an effective method but is computationally expensive to scale up to large datasets and comes at the cost of sacrificing model performance for robustness. We hypothesize that adversarial malware exploits the low-confidence regions of models and can be identified using epistemic uncertainty of ML approaches -- epistemic uncertainty in a machine learning-based malware detector is …

adversarial adversarial attacks arxiv attacks can cost cs.cr datasets detect free large machine machine learning malware performance robustness scale scale up solutions training vulnerability