On the Security Risks of ML-based Malware Detection Systems: A Survey
Not on the map. Why?
Abstract (arXiv)
Malware presents a persistent threat to user privacy and data integrity. To combat this, machine learning-based (ML-based) malware detection (MD) systems have been developed. However, these systems have increasingly been attacked in recent years, undermining their effectiveness in practice. While the security risks associated with ML-based MD systems have garnered considerable attention, the majority of prior works is limited to adversarial malware examples, lacking a comprehensive analysis of practical security risks. This paper addresses this gap by utilizing the CIA principles to define the scope of security risks. We then deconstruct ML-based MD systems into distinct operational stages, thus developing a stage-based taxonomy. Utilizing this taxonomy, we summarize the technical progress and discuss the gaps in the attack and defense proposals related to the ML-based MD systems within each stage. Subsequently, we conduct two case studies, using both inter-stage and intra-stage analyses according to the stage-based taxonomy to provide new empirical insights. Based on these analyses and insights, we suggest potential future directions from both inter-stage and intra-stage perspectives.
Key facts. Cited by 1 paper in the map (data through 14 Oct 2026). Builds on 71 of its 190 references that are in the map. First posted on arXiv 16 May 2025.
Builds on
71 of 190 references.
References · 71
- 2019PyTorch: An Imperative Style, High-Performance Deep Learning Librarycited by 20,305
- 2014Explaining and Harnessing Adversarial Examplescited by 7,364
- 2017A Unified Approach to Interpreting Model Predictionscited by 6,555
- 2016Towards Evaluating the Robustness of Neural Networkscited by 2,998
- 2015Character-level Convolutional Networks for Text Classificationcited by 2,330
- 2020Reliable evaluation of adversarial robustness with an ensemble of diverse parameter-free attackscited by 1,451
- 2015The Limitations of Deep Learning in Adversarial Settingscited by 790
- 2017Evasion Attacks against Machine Learning at Test Timecited by 689
- 2016Stealing Machine Learning Models via Prediction APIscited by 619
- 2019STRIP: A Defence Against Trojan Attacks on Deep Neural Networkscited by 459
- 2018Detecting Backdoor Attacks on Deep Neural Networks by Activation Clusteringcited by 456
- 2018Efficient Neural Network Robustness Certification with General Activation Functionscited by 445
38 more
- 2019High Accuracy and High Fidelity Extraction of Neural Networkscited by 214
- 2019Detecting AI Trojans Using Meta Neural Analysiscited by 199
- 2018Formal Security Analysis of Neural Networks using Symbolic Intervalscited by 185
- 2020Blind Backdoors in Deep Learning Modelscited by 182
- 2018EMBER: An Open Dataset for Training Static PE Malware Machine Learning Modelscited by 165
- 2018Efficient Formal Safety Analysis of Neural Networkscited by 165
- 2020Randomized Smoothing of All Shapes and Sizescited by 147
- 2017Malware Detection by Eating a Whole EXEcited by 115
- 2018TESSERACT: Eliminating Experimental Bias in Malware Classification across Space and Timecited by 108
- 2018Technical Report: When Does Machine Learning FAIL? Generalized Transferability for Evasion and Poisoning Attackscited by 81
- 2018Adversarial Malware Binaries: Evading Deep Learning for Malware Detection in Executablescited by 62
- 2018Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learningcited by 61
- 2020Functionality-preserving Black-box Optimization of Adversarial Windows Malwarecited by 58
- 2020Transcending Transcend: Revisiting Malware Classification in the Presence of Concept Driftcited by 53
- 2017Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detectioncited by 52
- 2020SOREL-20M: A Large Scale Benchmark Dataset for Malicious PE Detectioncited by 49
- 2018Microsoft Malware Classification Challengecited by 46
- 2016Adversarial Perturbations Against Deep Neural Networks for Malware Classificationcited by 42
- 2018Exploring Adversarial Examples in Malware Detectioncited by 42
- 2022Towards A Proactive ML Approach for Detecting Backdoor Poison Samplescited by 40
- 2020Adversarial Deep Ensemble: Evasion Attacks and Defenses for Malware Detectioncited by 33
- 2018Adversarial Deep Learning for Robust Detection of Binary Encoded Malwarecited by 32
- 2019Explaining Vulnerabilities of Deep Learning to Adversarial Malware Binariescited by 31
- 2019Malware Makeover: Breaking ML-based Static Analysis by Modifying Executable Bytescited by 31
- 2016MaMaDroid: Detecting Android Malware by Building Markov Chains of Behavioral Modelscited by 30
- 2023Understanding Certified Training with Interval Bound Propagationcited by 26
- 2023Expressive Losses for Verified Robustness via Convex Combinationscited by 23
- 2018Non-Negative Networks Against Adversarial Attackscited by 20
- 2017Automated Poisoning Attacks and Defenses in Malware Detection Systems: An Adversarial Machine Learning Approachcited by 19
- 2018Android HIV: A Study of Repackaging Malware for Evading Machine-Learning Detectioncited by 19
- 2019On Training Robust PDF Malware Classifierscited by 19
- 2021Adversarial Attacks against Windows PE Malware Detection: A Survey of the State-of-the-Artcited by 18
- 2023RS-Del: Edit Distance Robustness Certificates for Sequence Classifiers via Randomized Deletioncited by 17
- 2020Why an Android App is Classified as Malware? Towards Malware Classification Interpretationcited by 16
- 2018Poisoning Behavioral Malware Clusteringcited by 15
- 2022Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifierscited by 14
- 2024CTBENCH: A Library and Benchmark for Certified Trainingcited by 14
- 2021EvadeDroid: A Practical Evasion Attack on Machine Learning for Black-box Android Malware Detectioncited by 13
50 most cited of 71 All 71 (JSON)
Built on by
Citing papers per year: 2026: 1.
1 paper.