mlsanityData to 14 Oct 2026

SLIFER: Investigating Performance and Robustness of Malware Detection Pipelines

arXiv 2405.14478 ↗First posted 23 May 2024cs.CR cs.AIcited by 4

Not on the map. Why?

Abstract (arXiv)

As a result of decades of research, Windows malware detection is approached through a plethora of techniques. However, there is an ongoing mismatch between academia -- which pursues an optimal performances in terms of detection rate and low false alarms -- and the requirements of real-world scenarios. In particular, academia focuses on combining static and dynamic analysis within a single or ensemble of models, falling into several pitfalls like (i) firing dynamic analysis without considering the computational burden it requires; (ii) discarding impossible-to-analyze samples; and (iii) analyzing robustness against adversarial attacks without considering that malware detectors are complemented with more non-machine-learning components. Thus, in this paper we bridge these gaps, by investigating the properties of malware detectors built with multiple and different types of analysis. To do so, we develop SLIFER, a Windows malware detection pipeline sequentially leveraging both static and dynamic analysis, interrupting computations as soon as one module triggers an alarm, requiring dynamic analysis only when needed. Contrary to the state of the art, we investigate how to deal with samples that impede analyzes, showing how much they impact performances, concluding that it is better to flag them as legitimate to not drastically increase false alarms. Lastly, we perform a robustness evaluation of SLIFER. Counter-intuitively, the injection of new content is either blocked more by signatures than dynamic analysis, due to byte artifacts created by the attack, or it is able to avoid detection from signatures, as they rely on constraints on file size disrupted by attacks. As far as we know, we are the first to investigate the properties of sequential malware detectors, shedding light on their behavior in real production environment.

Key facts. Cited by 4 papers in the map (data through 14 Oct 2026). Builds on 17 of its 42 references that are in the map. First posted on arXiv 23 May 2024.

Builds on

17 of 42 references.

References · 17

  1. 2017Evasion Attacks against Machine Learning at Test Timecited by 689
  2. 2017Wild Patterns: Ten Years After the Rise of Adversarial Machine Learningcited by 414
  3. 2017Adversarial Examples: Attacks and Defenses for Deep Learningcited by 351
  4. 2018EMBER: An Open Dataset for Training Static PE Malware Machine Learning Modelscited by 165
  5. 2017Malware Detection by Eating a Whole EXEcited by 115
  6. 2018TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Timecited by 108
  7. 2020Functionality-preserving Black-box Optimization of Adversarial Windows Malwarecited by 58
  8. 2015Deep Neural Network Based Malware Detection Using Two Dimensional Binary Program Featurescited by 48
  9. 2019Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytescited by 31
  10. 2020Adversarial EXEmples: A Survey and Experimental Evaluation of Practical Attacks on Machine Learning for Windows Malware Detectioncited by 18
  11. 2023Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performancecited by 13
  12. 2019Neurlux: Dynamic Malware Analysis Without Feature Engineeringcited by 12
5 more
  1. 2022Quo Vadis: Hybrid Machine Learning Meta-Model based on Contextual and Behavioral Malware Representationscited by 9
  2. 2023Nebula: Self-Attention for Dynamic Malware Analysiscited by 8
  3. 2018Malware Dynamic Analysis Evasion Techniques: A Surveycited by 6
  4. 2020Getting Passive Aggressive About False Positives: Patching Deployed Malware Detectorscited by 5
  5. 2022Fast and Efficient Malware Detection with Joint Static and Dynamic Features Through Transfer Learningcited by 1

Built on by

Cited by year (2026 to 14 Oct)

Citing papers per year: 2025: 3; 2026: 1.

4 papers.

  1. 2025Empirical Quantification of Spurious Correlations in Malware Detectioncited by 1
  2. 2025Demystifying the Role of Rule-based Detection in AI Systems for Windows Malware Detectioncited by 1
  3. 2025One Detector Fits All: Robust and Adaptive Detection of Malicious Packages from PyPI to Enterprisescited by 0
  4. 2026Cost-Aware Hierarchical Multi-Agent Ransomware Detection and Family Attributioncited by 0