{"id":"https://openalex.org/W4416549479","doi":"https://doi.org/10.1145/3719027.3765118","title":"Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks","display_name":"Evaluating the Robustness of a Production Malware Detection System to Transferable Adversarial Attacks","publication_year":2025,"publication_date":"2025-11-19","ids":{"openalex":"https://openalex.org/W4416549479","doi":"https://doi.org/10.1145/3719027.3765118"},"language":null,"primary_location":{"id":"doi:10.1145/3719027.3765118","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3765118","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"},"type":"conference-paper","indexed_in":["crossref"],"open_access":{"is_oa":false,"oa_status":"closed","oa_url":null,"any_repository_has_fulltext":false},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5059480732","display_name":"Milad Nasr","orcid":"https://orcid.org/0000-0002-1913-6157"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Milad Nasr","raw_affiliation_strings":["Google Deepmind, Mountain view, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-1913-6157","affiliations":[{"raw_affiliation_string":"Google Deepmind, Mountain view, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5002695158","display_name":"Yanick Fratantonio","orcid":"https://orcid.org/0009-0008-3676-9117"},"institutions":[{"id":"https://openalex.org/I4210100430","display_name":"Google (Switzerland)","ror":"https://ror.org/014f9c269","country_code":"CH","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210100430","https://openalex.org/I4210128969"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Yanick Fratantonio","raw_affiliation_strings":["Google, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0009-0008-3676-9117","affiliations":[{"raw_affiliation_string":"Google, Zurich, Switzerland","institution_ids":["https://openalex.org/I4210100430"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5064912041","display_name":"Luca Invernizzi","orcid":"https://orcid.org/0000-0001-8420-0760"},"institutions":[{"id":"https://openalex.org/I4210100430","display_name":"Google (Switzerland)","ror":"https://ror.org/014f9c269","country_code":"CH","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210100430","https://openalex.org/I4210128969"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Luca Invernizzi","raw_affiliation_strings":["Google, Zurich, Switzerland"],"raw_orcid":"https://orcid.org/0000-0001-8420-0760","affiliations":[{"raw_affiliation_string":"Google, Zurich, Switzerland","institution_ids":["https://openalex.org/I4210100430"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5034203249","display_name":"Ange Albertini","orcid":"https://orcid.org/0009-0008-4066-7893"},"institutions":[{"id":"https://openalex.org/I4210100430","display_name":"Google (Switzerland)","ror":"https://ror.org/014f9c269","country_code":"CH","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210100430","https://openalex.org/I4210128969"]}],"countries":["CH"],"is_corresponding":false,"raw_author_name":"Ange Albertini","raw_affiliation_strings":["Google, Berlin, Switzerland"],"raw_orcid":"https://orcid.org/0009-0008-4066-7893","affiliations":[{"raw_affiliation_string":"Google, Berlin, Switzerland","institution_ids":["https://openalex.org/I4210100430"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5068231312","display_name":"Loua Farah","orcid":"https://orcid.org/0009-0006-7218-5763"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Loua Farah","raw_affiliation_strings":["Google, Paris, France"],"raw_orcid":"https://orcid.org/0009-0006-7218-5763","affiliations":[{"raw_affiliation_string":"Google, Paris, France","institution_ids":[]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5114402404","display_name":"Alex Petit-Bianco","orcid":"https://orcid.org/0009-0004-9530-9330"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Alex Petit-Bianco","raw_affiliation_strings":["Google, Grenoble Area, France"],"raw_orcid":"https://orcid.org/0009-0004-9530-9330","affiliations":[{"raw_affiliation_string":"Google, Grenoble Area, France","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5103331911","display_name":"Andreas Terzis","orcid":"https://orcid.org/0000-0002-5681-3399"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Andreas Terzis","raw_affiliation_strings":["Google Deepmind, Mountain View, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-5681-3399","affiliations":[{"raw_affiliation_string":"Google Deepmind, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5024050018","display_name":"Kurt Thomas","orcid":"https://orcid.org/0000-0002-3762-5851"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Kurt Thomas","raw_affiliation_strings":["Google, Mountain View, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-3762-5851","affiliations":[{"raw_affiliation_string":"Google, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"middle","author":{"id":"https://openalex.org/A5058819105","display_name":"Elie Bursztein","orcid":"https://orcid.org/0000-0003-0316-6906"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Elie Bursztein","raw_affiliation_strings":["Google, Mountain View, CA, USA"],"raw_orcid":"https://orcid.org/0000-0003-0316-6906","affiliations":[{"raw_affiliation_string":"Google, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]},{"author_position":"last","author":{"id":"https://openalex.org/A5034257647","display_name":"Nicholas Carlini","orcid":"https://orcid.org/0000-0002-1463-3461"},"institutions":[{"id":"https://openalex.org/I1291425158","display_name":"Google (United States)","ror":"https://ror.org/00njsd438","country_code":"US","type":"company","lineage":["https://openalex.org/I1291425158","https://openalex.org/I4210128969"]}],"countries":["US"],"is_corresponding":false,"raw_author_name":"Nicholas Carlini","raw_affiliation_strings":["Google Deepmind, Mountain View, CA, USA"],"raw_orcid":"https://orcid.org/0000-0002-1463-3461","affiliations":[{"raw_affiliation_string":"Google Deepmind, Mountain View, CA, USA","institution_ids":["https://openalex.org/I1291425158"]}]}],"institutions":[],"countries_distinct_count":2,"institutions_distinct_count":2,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":"4394","last_page":"4408"},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.524399995803833,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.524399995803833,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.4429999887943268,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11424","display_name":"Security and Verification in Computing","score":0.009399999864399433,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.8604000210762024},{"id":"https://openalex.org/keywords/cryptovirology","display_name":"Cryptovirology","score":0.7468000054359436},{"id":"https://openalex.org/keywords/adversarial-system","display_name":"Adversarial system","score":0.7009999752044678},{"id":"https://openalex.org/keywords/obfuscation","display_name":"Obfuscation","score":0.6277999877929688},{"id":"https://openalex.org/keywords/byte","display_name":"Byte","score":0.5598999857902527},{"id":"https://openalex.org/keywords/adversary","display_name":"Adversary","score":0.5202999711036682},{"id":"https://openalex.org/keywords/identification","display_name":"Identification (biology)","score":0.4918000102043152},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.45260000228881836}],"concepts":[{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.8604000210762024},{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7569000124931335},{"id":"https://openalex.org/C84525096","wikidata":"https://www.wikidata.org/wiki/Q3506050","display_name":"Cryptovirology","level":3,"score":0.7468000054359436},{"id":"https://openalex.org/C37736160","wikidata":"https://www.wikidata.org/wiki/Q1801315","display_name":"Adversarial system","level":2,"score":0.7009999752044678},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.666100025177002},{"id":"https://openalex.org/C40305131","wikidata":"https://www.wikidata.org/wiki/Q2616305","display_name":"Obfuscation","level":2,"score":0.6277999877929688},{"id":"https://openalex.org/C43364308","wikidata":"https://www.wikidata.org/wiki/Q8799","display_name":"Byte","level":2,"score":0.5598999857902527},{"id":"https://openalex.org/C41065033","wikidata":"https://www.wikidata.org/wiki/Q2825412","display_name":"Adversary","level":2,"score":0.5202999711036682},{"id":"https://openalex.org/C116834253","wikidata":"https://www.wikidata.org/wiki/Q2039217","display_name":"Identification (biology)","level":2,"score":0.4918000102043152},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.45260000228881836},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.43860000371932983},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.38749998807907104},{"id":"https://openalex.org/C77714075","wikidata":"https://www.wikidata.org/wiki/Q5452017","display_name":"Firewall (physics)","level":5,"score":0.35269999504089355},{"id":"https://openalex.org/C2778348673","wikidata":"https://www.wikidata.org/wiki/Q739302","display_name":"Production (economics)","level":2,"score":0.3474999964237213},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.3384000062942505},{"id":"https://openalex.org/C2779395397","wikidata":"https://www.wikidata.org/wiki/Q15731404","display_name":"Malware analysis","level":3,"score":0.3301999866962433},{"id":"https://openalex.org/C43521106","wikidata":"https://www.wikidata.org/wiki/Q2165493","display_name":"Pipeline (software)","level":2,"score":0.3287999927997589},{"id":"https://openalex.org/C2778403875","wikidata":"https://www.wikidata.org/wiki/Q20312394","display_name":"Adversarial machine learning","level":3,"score":0.311599999666214},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.3102000057697296},{"id":"https://openalex.org/C141141315","wikidata":"https://www.wikidata.org/wiki/Q2379942","display_name":"Guard (computer science)","level":2,"score":0.2786000072956085},{"id":"https://openalex.org/C168167062","wikidata":"https://www.wikidata.org/wiki/Q1117970","display_name":"Component (thermodynamics)","level":2,"score":0.26080000400543213}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.1145/3719027.3765118","is_oa":false,"landing_page_url":"https://doi.org/10.1145/3719027.3765118","pdf_url":null,"source":null,"license":null,"license_id":null,"version":"publishedVersion","is_accepted":true,"is_published":true,"raw_source_name":"Proceedings of the 2025 ACM SIGSAC Conference on Computer and Communications Security","raw_type":"proceedings-article"}],"best_oa_location":null,"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"grobid_xml":false,"pdf":false},"content_urls":null,"referenced_works_count":6,"referenced_works":["https://openalex.org/W2746600820","https://openalex.org/W2963969878","https://openalex.org/W3015481738","https://openalex.org/W4210611912","https://openalex.org/W4378976928","https://openalex.org/W4378977274"],"related_works":[],"abstract_inverted_index":{"As":[0],"deep":[1],"learning":[2,70],"models":[3],"become":[4],"widely":[5],"deployed":[6,211],"as":[7],"components":[8],"within":[9],"larger":[10],"production":[11,107,178,213],"systems,":[12],"their":[13],"individual":[14],"shortcomings":[15],"can":[16,33,104,137],"create":[17],"system-level":[18],"vulnerabilities":[19],"with":[20,204],"real-world":[21],"impact.":[22],"This":[23,88],"paper":[24],"studies":[25],"how":[26],"adversarial":[27,98],"attacks":[28],"targeting":[29],"an":[30,37,115,164],"ML":[31,57],"component":[32],"degrade":[34],"or":[35],"bypass":[36],"entire":[38],"production-grade":[39],"malware":[40,60,76,81,108,113,117,134,151],"detection":[41,61],"system,":[42],"performing":[43],"a":[44,56,68,79,133,180,190,202],"case":[45],"study":[46],"analysis":[47],"of":[48,123,132,143,170,173],"Gmail's":[49],"pipeline":[50,62],"where":[51],"file-type":[52],"identification":[53],"relies":[54],"on":[55],"model.":[58],"The":[59],"in":[63,141,212],"use":[64],"by":[65,127],"Gmail":[66,216],"contains":[67],"machine":[69],"model":[71],"that":[72,100],"routes":[73],"each":[74],"potential":[75],"sample":[77],"to":[78,83,110,114,149,160,166,187,201],"specialized":[80],"classifier":[82],"improve":[84],"accuracy":[85],"and":[86,145,162],"performance.":[87],"model,":[89,179],"called":[90],"Magika,":[91,102],"has":[92,208],"been":[93,210],"open":[94],"sourced.":[95],"By":[96],"designing":[97],"examples":[99],"fool":[101],"we":[103,136],"cause":[105],"the":[106,168,215],"service":[109],"incorrectly":[111],"route":[112],"unsuitable":[116],"detector":[118],"thereby":[119,146],"increasing":[120],"our":[121,158,176],"chance":[122],"evading":[124],"detection.":[125],"Specifically,":[126],"changing":[128],"just":[129,189],"13":[130],"bytes":[131,186],"sample,":[135],"successfully":[138],"evade":[139],"Magika":[140],"90%":[142],"cases":[144],"allow":[147],"us":[148],"send":[150],"files":[152],"over":[153],"Gmail.":[154],"We":[155,195],"then":[156],"turn":[157],"attention":[159],"defenses,":[161],"develop":[163],"approach":[165],"mitigate":[167],"severity":[169],"these":[171],"types":[172],"attacks.":[174],"For":[175],"defended":[177],"highly":[181],"resourced":[182],"adversary":[183],"requires":[184],"50":[185],"achieve":[188],"20%":[191],"attack":[192],"success":[193],"rate.":[194],"implement":[196],"this":[197],"defense,":[198],"and,":[199],"thanks":[200],"collaboration":[203],"Google":[205],"engineers,":[206],"it":[207],"already":[209],"for":[214],"classifier.":[217]},"counts_by_year":[],"updated_date":"2026-07-14T23:27:15.235271","created_date":"2025-11-23T00:00:00"}