mlsanityData to 7 Oct 2026

Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detection

arXiv 1808.04218 ↗First posted 10 Aug 2018cs.CRcited by 19

Not on the map. Why?

Abstract (arXiv)

Machine learning based solutions have been successfully employed for automatic detection of malware on Android. However, machine learning models lack robustness to adversarial examples, which are crafted by adding carefully chosen perturbations to the normal inputs. So far, the adversarial examples can only deceive detectors that rely on syntactic features (e.g., requested permissions, API calls, etc), and the perturbations can only be implemented by simply modifying application's manifest. While recent Android malware detectors rely more on semantic features from Dalvik bytecode rather than manifest, existing attacking/defending methods are no longer effective. In this paper, we introduce a new attacking method that generates adversarial examples of Android malware and evades being detected by the current models. To this end, we propose a method of applying optimal perturbations onto Android APK that can successfully deceive the machine learning detectors. We develop an automated tool to generate the adversarial examples without human intervention. In contrast to existing works, the adversarial examples crafted by our method can also deceive recent machine learning based detectors that rely on semantic features such as control-flow-graph. The perturbations can also be implemented directly onto APK's Dalvik bytecode rather than Android manifest to evade from recent detectors. We demonstrate our attack on two state-of-the-art Android malware detection schemes, MaMaDroid and Drebin. Our results show that the malware detection rates decreased from 96% to 0% in MaMaDroid, and from 97% to 0% in Drebin, with just a small number of codes to be inserted into the APK.

Key facts. Cited by 19 papers in the map (data through 7 Oct 2026). First posted on arXiv 10 Aug 2018.

Builds on

No reference list yet.

Built on by

Cited by year (2026 to 7 Oct)

Citing papers per year: 2021: 4; 2022: 5; 2023: 3; 2024: 2; 2025: 4; 2026: 1.

19 papers.

Sort:

By area:

  1. 2021Deep Learning for Android Malware Defenses: a Systematic Literature Reviewcited by 18
  2. 2021EvadeDroid: A Practical Evasion Attack on Machine Learning for Black-box Android Malware Detectioncited by 13
  3. 2023Efficient Query-Based Attack against ML-Based Android Malware Detection under Zero Knowledge Settingcited by 10
  4. 2022Evaluating Membership Inference Through Adversarial Robustnesscited by 7
  5. 2023PAD: Towards Principled Adversarial Malware Detection Against Evasion Attackscited by 5
  6. 2021Privacy Inference Attacks and Defenses in Cloud-based Deep Neural Network: A Surveycited by 4
  7. 2024Unraveling the Key of Machine Learning-based Android Malware Detectioncited by 4
  8. 2022StratDef: Strategic Defense Against Adversarial Attacks in ML-based Malware Detectioncited by 3
  9. 2023MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attackscited by 3
  10. 2022Level Up with ML Vulnerability Identification: Leveraging Domain Constraints in Feature Space for Robust Android Malware Detectioncited by 2
  11. 2025Defending against Adversarial Malware Attacks on ML-based Android Malware Detection Systemscited by 2
  12. 2022MaMaDroid2.0 -- The Holes of Control Flow Graphscited by 1
7 more
  1. 2024MASKDROID: Robust Android Malware Detection with Masked Graph Representationscited by 1
  2. 2025On the Security Risks of ML-based Malware Detection Systems: A Surveycited by 1
  3. 2021Brief View and Analysis to Latest Android Security Issues and Approachescited by 0
  4. 2022Adversarial Patterns: Building Robust Android Malware Classifierscited by 0
  5. 2025Evaluating the robustness of adversarial defenses in malware detection systemscited by 0
  6. 2025LLM-Driven Feature-Level Adversarial Attacks on Android Malware Detectorscited by 0
  7. 2026Learning to Look Benign: Targeted Evasion of Malware Detectors via API Import Injectioncited by 0