{"id":"https://openalex.org/W7160242292","doi":"https://doi.org/10.1109/tdsc.2026.3689685","title":"UAP4MA: Leveraging Multi-Agent Bandits to Generate Universal Adversarial Perturbations for Malware Attribution","display_name":"UAP4MA: Leveraging Multi-Agent Bandits to Generate Universal Adversarial Perturbations for Malware Attribution","publication_year":2026,"publication_date":"2026-05-04","ids":{"openalex":"https://openalex.org/W7160242292","doi":"https://doi.org/10.1109/tdsc.2026.3689685"},"language":null,"primary_location":{"id":"doi:10.1109/tdsc.2026.3689685","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3689685","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"},"type":"article","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5135416408","display_name":"Yuxia Sun","orcid":null},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yuxia Sun","raw_affiliation_strings":["College of Information Science and Technology, Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-5959-0629","affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135313282","display_name":"Hengfeng Hu","orcid":null},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Hengfeng Hu","raw_affiliation_strings":["International School, Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0005-9588-3428","affiliations":[{"raw_affiliation_string":"International School, Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5084868951","display_name":"Yepang Liu","orcid":"https://orcid.org/0000-0001-8147-8126"},"institutions":[{"id":"https://openalex.org/I3045169105","display_name":"Southern University of Science and Technology","ror":"https://ror.org/049tv2d57","country_code":"CN","type":"education","lineage":["https://openalex.org/I3045169105"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Yepang Liu","raw_affiliation_strings":["Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China"],"raw_orcid":"https://orcid.org/0000-0001-8147-8126","affiliations":[{"raw_affiliation_string":"Department of Computer Science and Engineering, Southern University of Science and Technology, Shenzhen, China","institution_ids":["https://openalex.org/I3045169105"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135319128","display_name":"Haocheng Liang","orcid":null},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Haocheng Liang","raw_affiliation_strings":["College of Information Science and Technology, Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0002-6658-8831","affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5123009332","display_name":"S Z Chen","orcid":null},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Shiqi Chen","raw_affiliation_strings":["College of Information Science and Technology, Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0009-0007-9513-4659","affiliations":[{"raw_affiliation_string":"College of Information Science and Technology, Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5135396352","display_name":"Zhiquan Liu","orcid":null},"institutions":[{"id":"https://openalex.org/I159948400","display_name":"Jinan University","ror":"https://ror.org/02xe5ns62","country_code":"CN","type":"education","lineage":["https://openalex.org/I159948400"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Zhiquan Liu","raw_affiliation_strings":["College of Cyber Security, Jinan University, Guangzhou, China"],"raw_orcid":"https://orcid.org/0000-0002-3934-2177","affiliations":[{"raw_affiliation_string":"College of Cyber Security, Jinan University, Guangzhou, China","institution_ids":["https://openalex.org/I159948400"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5135350449","display_name":"Jianfeng Ma","orcid":null},"institutions":[{"id":"https://openalex.org/I149594827","display_name":"Xidian University","ror":"https://ror.org/05s92vm98","country_code":"CN","type":"education","lineage":["https://openalex.org/I149594827"]}],"countries":["CN"],"is_corresponding":false,"raw_author_name":"Jianfeng Ma","raw_affiliation_strings":["School of Cyber Engineering, Xidian University, Xi’an, China"],"raw_orcid":"https://orcid.org/0000-0003-4251-1143","affiliations":[{"raw_affiliation_string":"School of Cyber Engineering, Xidian University, Xi’an, China","institution_ids":["https://openalex.org/I149594827"]}]}],"institutions":[],"countries_distinct_count":1,"institutions_distinct_count":3,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":0.0,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":{"value":0.5307187,"is_in_top_1_percent":false,"is_in_top_10_percent":false},"cited_by_percentile_year":null,"biblio":{"volume":"23","issue":"4","first_page":"8985","last_page":"8997"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5823000073432922,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.5823000073432922,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.27459999918937683,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T12101","display_name":"Advanced Bandit Algorithms Research","score":0.019999999552965164,"subfield":{"id":"https://openalex.org/subfields/1803","display_name":"Management Science and Operations Research"},"field":{"id":"https://openalex.org/fields/18","display_name":"Decision Sciences"},"domain":{"id":"https://openalex.org/domains/2","display_name":"Social Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.8547000288963318},{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.7993999719619751},{"id":"https://openalex.org/keywords/construct","display_name":"Construct (python library)","score":0.5803999900817871},{"id":"https://openalex.org/keywords/attribution","display_name":"Attribution","score":0.46950000524520874},{"id":"https://openalex.org/keywords/threat-model","display_name":"Threat model","score":0.41040000319480896},{"id":"https://openalex.org/keywords/set","display_name":"Set (abstract data type)","score":0.3855000138282776},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.3741999864578247}],"concepts":[{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.8547000288963318},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.8413000106811523},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.7993999719619751},{"id":"https://openalex.org/C2780801425","wikidata":"https://www.wikidata.org/wiki/Q5164392","display_name":"Construct (python library)","level":2,"score":0.5803999900817871},{"id":"https://openalex.org/C143299363","wikidata":"https://www.wikidata.org/wiki/Q900584","display_name":"Attribution","level":2,"score":0.46950000524520874},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.451200008392334},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.42179998755455017},{"id":"https://openalex.org/C140547941","wikidata":"https://www.wikidata.org/wiki/Q7797194","display_name":"Threat model","level":2,"score":0.41040000319480896},{"id":"https://openalex.org/C177264268","wikidata":"https://www.wikidata.org/wiki/Q1514741","display_name":"Set (abstract data type)","level":2,"score":0.3855000138282776},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.3741999864578247},{"id":"https://openalex.org/C204323151","wikidata":"https://www.wikidata.org/wiki/Q905424","display_name":"Range (aeronautics)","level":2,"score":0.34850001335144043},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.334199994802475},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3239000141620636},{"id":"https://openalex.org/C165696696","wikidata":"https://www.wikidata.org/wiki/Q11287","display_name":"Exploit","level":2,"score":0.32339999079704285},{"id":"https://openalex.org/C2778572836","wikidata":"https://www.wikidata.org/wiki/Q380933","display_name":"Space (punctuation)","level":2,"score":0.3075999915599823},{"id":"https://openalex.org/C111335779","wikidata":"https://www.wikidata.org/wiki/Q3454686","display_name":"Reduction (mathematics)","level":2,"score":0.29499998688697815},{"id":"https://openalex.org/C65856478","wikidata":"https://www.wikidata.org/wiki/Q3991682","display_name":"Attack model","level":2,"score":0.27129998803138733},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.2524000108242035},{"id":"https://openalex.org/C26517878","wikidata":"https://www.wikidata.org/wiki/Q228039","display_name":"Key (lock)","level":2,"score":0.25119999051094055}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1109/tdsc.2026.3689685","is_oa":false,"landing_page_url":"https://doi.org/10.1109/tdsc.2026.3689685","pdf_url":null,"source":{"id":"https://openalex.org/S133795288","display_name":"IEEE Transactions on Dependable and Secure Computing","issn_l":"1545-5971","issn":["1545-5971","1941-0018","2160-9209"],"is_oa":false,"is_in_doaj":false,"is_core":true,"host_organization":"https://openalex.org/P4310320439","host_organization_name":"IEEE Computer Society","host_organization_lineage":["https://openalex.org/P4310320439","https://openalex.org/P4310319808"],"host_organization_lineage_names":["IEEE Computer Society","Institute of Electrical and Electronics Engineers"],"type":"journal"},"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"IEEE Transactions on Dependable and Secure Computing","raw_type":"journal-article"}],"best_oa_location":null,"sustainable_development_goals":[{"id":"https://metadata.un.org/sdg/16","score":0.7438802123069763,"display_name":"Peace, Justice and strong institutions"}],"awards":[{"id":"https://openalex.org/G1541114875","display_name":null,"funder_award_id":"62372219","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"},{"id":"https://openalex.org/G7356091226","display_name":null,"funder_award_id":"62272195","funder_id":"https://openalex.org/F4320321001","funder_display_name":"National Natural Science Foundation of China"}],"funders":[{"id":"https://openalex.org/F4320321001","display_name":"National Natural Science Foundation of China","ror":"https://ror.org/01h0zpd94"}],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Advanced":[0],"Persistent":[1],"Threat":[2],"(APT)":[3],"malware":[4,29,90],"group":[5],"attribution":[6,91,190],"is":[7],"crucial":[8],"for":[9,21,88,187],"cybersecurity,":[10],"yet":[11],"current":[12],"models":[13,44],"remain":[14],"vulnerable":[15],"to":[16,125,169],"adversarial":[17,24],"attacks.":[18],"Recent":[19],"approaches":[20],"generating":[22],"universal":[23],"perturbations":[25],"(UAPs)":[26],"in":[27,165],"the":[28,78,139,151,156],"problem":[30],"space":[31],"have":[32],"exposed":[33],"substantial":[34],"security":[35],"risks,":[36],"as":[37,181],"a":[38,46,95,105,182],"single":[39],"UAP":[40,83,106],"can":[41],"mislead":[42],"classification":[43],"across":[45],"wide":[47],"range":[48],"of":[49],"malware.":[50],"However,":[51],"these":[52,73],"methods":[53],"are":[54],"limited":[55],"by":[56,107],"suboptimal":[57],"attack":[58,145,157],"effectiveness":[59,176],"and":[60,62,121,128,138,161,177,184],"efficiency":[61],"rely":[63],"heavily":[64],"on":[65,132],"confidence":[66],"scores,":[67],"restricting":[68],"their":[69],"practicality.":[70],"To":[71],"address":[72],"limitations,":[74],"we":[75],"propose":[76],"UAP4MA,":[77],"first":[79],"decision-based,":[80],"problem-space,":[81],"black-box":[82],"generation":[84],"method":[85],"tailored":[86],"specifically":[87],"APT":[89,189],"models.":[92,191],"UAP4MA":[93],"employs":[94],"multi-agent":[96],"Multi-Armed":[97],"Bandit":[98],"(MAB)":[99],"framework,":[100],"where":[101],"agents":[102],"collaboratively":[103],"construct":[104],"applying":[108],"functionality-preserving":[109],"transformations":[110],"chosen":[111],"from":[112],"13":[113],"distinct":[114],"types,":[115],"leveraging":[116],"Optimized":[117],"Initialization,":[118],"Collaborative":[119],"Multi-Agents,":[120],"Dynamic":[122],"Agent":[123],"Strategies":[124],"enhance":[126],"exploration":[127],"exploitation.":[129],"Extensive":[130],"experiments":[131],"our":[133],"newly":[134],"released":[135],"AMG43":[136],"dataset":[137,141],"APTMalware":[140],"demonstrate":[142],"UAP4MA's":[143,175],"outstanding":[144],"performance,":[146],"achieving":[147],"over":[148],"four":[149],"times":[150],"fooling":[152],"rate":[153,159],"(FR),":[154],"double":[155],"success":[158],"(ASR),":[160],"an":[162],"80%":[163],"reduction":[164],"training":[166],"time":[167],"compared":[168],"state-of-the-art":[170],"methods.":[171],"These":[172],"results":[173],"underscore":[174],"efficiency,":[178],"establishing":[179],"it":[180],"powerful":[183],"practical":[185],"approach":[186],"challenging":[188]},"counts_by_year":[],"updated_date":"2026-07-11T05:44:25.926202","created_date":"2026-05-06T00:00:00"}