{"id":"https://openalex.org/W7155392943","doi":"https://doi.org/10.48550/arxiv.2604.20495","title":"Towards Certified Malware Detection: Provable Guarantees Against Evasion Attacks","display_name":"Towards Certified Malware Detection: Provable Guarantees Against Evasion Attacks","publication_year":2026,"publication_date":"2026-04-22","ids":{"openalex":"https://openalex.org/W7155392943","doi":"https://doi.org/10.48550/arxiv.2604.20495"},"language":null,"primary_location":{"id":"doi:10.48550/arxiv.2604.20495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.20495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"type":"preprint","indexed_in":["datacite"],"open_access":{"is_oa":true,"oa_status":"green","oa_url":"https://doi.org/10.48550/arxiv.2604.20495","any_repository_has_fulltext":true},"authorships":[{"author_position":"first","author":{"id":"https://openalex.org/A5134410837","display_name":"Nandakrishna Giri","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Giri, Nandakrishna","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5134460040","display_name":"Asmitha K. A.","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"A., Asmitha K.","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5038688486","display_name":"Serena Nicolazzo","orcid":"https://orcid.org/0000-0003-2719-9526"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nicolazzo, Serena","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"middle","author":{"id":"https://openalex.org/A5085793134","display_name":"Antonino Nocera","orcid":"https://orcid.org/0000-0003-2120-2341"},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"Nocera, Antonino","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]},{"author_position":"last","author":{"id":"https://openalex.org/A5134377236","display_name":"Vinod P","orcid":null},"institutions":[],"countries":[],"is_corresponding":false,"raw_author_name":"P, Vinod","raw_affiliation_strings":[],"raw_orcid":null,"affiliations":[]}],"institutions":[],"countries_distinct_count":0,"institutions_distinct_count":0,"corresponding_author_ids":[],"corresponding_institution_ids":[],"apc_list":null,"apc_paid":null,"fwci":null,"has_fulltext":false,"cited_by_count":0,"citation_normalized_percentile":null,"cited_by_percentile_year":null,"biblio":{"volume":null,"issue":null,"first_page":null,"last_page":null},"is_retracted":false,"is_paratext":false,"is_xpac":false,"primary_topic":{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.73089998960495,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},"topics":[{"id":"https://openalex.org/T11241","display_name":"Advanced Malware Detection Techniques","score":0.73089998960495,"subfield":{"id":"https://openalex.org/subfields/1711","display_name":"Signal Processing"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T11689","display_name":"Adversarial Robustness in Machine Learning","score":0.2304999977350235,"subfield":{"id":"https://openalex.org/subfields/1702","display_name":"Artificial Intelligence"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}},{"id":"https://openalex.org/T10400","display_name":"Network Security and Intrusion Detection","score":0.00860000029206276,"subfield":{"id":"https://openalex.org/subfields/1705","display_name":"Computer Networks and Communications"},"field":{"id":"https://openalex.org/fields/17","display_name":"Computer Science"},"domain":{"id":"https://openalex.org/domains/3","display_name":"Physical Sciences"}}],"keywords":[{"id":"https://openalex.org/keywords/malware","display_name":"Malware","score":0.6872000098228455},{"id":"https://openalex.org/keywords/robustness","display_name":"Robustness (evolution)","score":0.5216000080108643},{"id":"https://openalex.org/keywords/evasion","display_name":"Evasion (ethics)","score":0.5188999772071838},{"id":"https://openalex.org/keywords/classifier","display_name":"Classifier (UML)","score":0.4641000032424927},{"id":"https://openalex.org/keywords/smoothing","display_name":"Smoothing","score":0.421999990940094},{"id":"https://openalex.org/keywords/certificate","display_name":"Certificate","score":0.4090999960899353},{"id":"https://openalex.org/keywords/executable","display_name":"Executable","score":0.3977999985218048},{"id":"https://openalex.org/keywords/backdoor","display_name":"Backdoor","score":0.3492000102996826}],"concepts":[{"id":"https://openalex.org/C41008148","wikidata":"https://www.wikidata.org/wiki/Q21198","display_name":"Computer science","level":0,"score":0.7885000109672546},{"id":"https://openalex.org/C541664917","wikidata":"https://www.wikidata.org/wiki/Q14001","display_name":"Malware","level":2,"score":0.6872000098228455},{"id":"https://openalex.org/C63479239","wikidata":"https://www.wikidata.org/wiki/Q7353546","display_name":"Robustness (evolution)","level":3,"score":0.5216000080108643},{"id":"https://openalex.org/C2781251061","wikidata":"https://www.wikidata.org/wiki/Q5416089","display_name":"Evasion (ethics)","level":3,"score":0.5188999772071838},{"id":"https://openalex.org/C119857082","wikidata":"https://www.wikidata.org/wiki/Q2539","display_name":"Machine learning","level":1,"score":0.4699000120162964},{"id":"https://openalex.org/C95623464","wikidata":"https://www.wikidata.org/wiki/Q1096149","display_name":"Classifier (UML)","level":2,"score":0.4641000032424927},{"id":"https://openalex.org/C154945302","wikidata":"https://www.wikidata.org/wiki/Q11660","display_name":"Artificial intelligence","level":1,"score":0.460999995470047},{"id":"https://openalex.org/C124101348","wikidata":"https://www.wikidata.org/wiki/Q172491","display_name":"Data mining","level":1,"score":0.42649999260902405},{"id":"https://openalex.org/C3770464","wikidata":"https://www.wikidata.org/wiki/Q775963","display_name":"Smoothing","level":2,"score":0.421999990940094},{"id":"https://openalex.org/C96865113","wikidata":"https://www.wikidata.org/wiki/Q2946816","display_name":"Certificate","level":2,"score":0.4090999960899353},{"id":"https://openalex.org/C160145156","wikidata":"https://www.wikidata.org/wiki/Q778586","display_name":"Executable","level":2,"score":0.3977999985218048},{"id":"https://openalex.org/C38652104","wikidata":"https://www.wikidata.org/wiki/Q3510521","display_name":"Computer security","level":1,"score":0.367000013589859},{"id":"https://openalex.org/C2781045450","wikidata":"https://www.wikidata.org/wiki/Q254569","display_name":"Backdoor","level":2,"score":0.3492000102996826},{"id":"https://openalex.org/C520049643","wikidata":"https://www.wikidata.org/wiki/Q189760","display_name":"Voting","level":3,"score":0.336899995803833},{"id":"https://openalex.org/C79540074","wikidata":"https://www.wikidata.org/wiki/Q3269465","display_name":"Keystroke dynamics","level":4,"score":0.33329999446868896},{"id":"https://openalex.org/C149810388","wikidata":"https://www.wikidata.org/wiki/Q5374873","display_name":"Emulation","level":2,"score":0.3239000141620636},{"id":"https://openalex.org/C52622490","wikidata":"https://www.wikidata.org/wiki/Q1026626","display_name":"Feature extraction","level":2,"score":0.3172000050544739},{"id":"https://openalex.org/C2776214188","wikidata":"https://www.wikidata.org/wiki/Q408386","display_name":"Inference","level":2,"score":0.31690001487731934},{"id":"https://openalex.org/C97686452","wikidata":"https://www.wikidata.org/wiki/Q7604153","display_name":"Static analysis","level":2,"score":0.3151000142097473},{"id":"https://openalex.org/C46304622","wikidata":"https://www.wikidata.org/wiki/Q374814","display_name":"Certification","level":2,"score":0.29429998993873596},{"id":"https://openalex.org/C184297639","wikidata":"https://www.wikidata.org/wiki/Q177765","display_name":"Biometrics","level":2,"score":0.28999999165534973},{"id":"https://openalex.org/C153668964","wikidata":"https://www.wikidata.org/wiki/Q27636","display_name":"Majority rule","level":2,"score":0.2773999869823456},{"id":"https://openalex.org/C35525427","wikidata":"https://www.wikidata.org/wiki/Q745881","display_name":"Intrusion detection system","level":2,"score":0.2709999978542328}],"mesh":[],"locations_count":1,"locations":[{"id":"doi:10.48550/arxiv.2604.20495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.20495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":null,"raw_source_name":null,"raw_type":"Preprint"}],"best_oa_location":{"id":"doi:10.48550/arxiv.2604.20495","is_oa":true,"landing_page_url":"https://doi.org/10.48550/arxiv.2604.20495","pdf_url":null,"source":{"id":"https://openalex.org/S4306400194","display_name":"arXiv (Cornell University)","issn_l":null,"issn":null,"is_oa":true,"is_in_doaj":false,"is_core":false,"host_organization":"https://openalex.org/I205783295","host_organization_name":"Cornell University","host_organization_lineage":["https://openalex.org/I205783295"],"host_organization_lineage_names":[],"type":"repository"},"license":"cc-by","license_id":"https://openalex.org/licenses/cc-by","version":null,"is_accepted":false,"is_published":false,"raw_source_name":null,"raw_type":"Preprint"},"sustainable_development_goals":[],"awards":[],"funders":[],"has_content":{"pdf":false,"grobid_xml":false},"content_urls":null,"referenced_works_count":0,"referenced_works":[],"related_works":[],"abstract_inverted_index":{"Machine":[0],"learning-based":[1],"static":[2],"malware":[3,25],"detectors":[4],"remain":[5],"vulnerable":[6],"to":[7,139],"adversarial":[8],"evasion":[9,134],"techniques,":[10],"such":[11],"as":[12],"metamorphic":[13,133],"engine":[14],"mutations.":[15],"To":[16],"address":[17],"this":[18],"vulnerability,":[19],"we":[20,79],"propose":[21],"a":[22,55,81,88],"certifiably":[23],"robust":[24],"detection":[26],"framework":[27],"based":[28,63],"on":[29,64,110],"randomized":[30],"smoothing":[31],"through":[32],"feature":[33],"ablation":[34],"and":[35,58,74,106,114],"targeted":[36],"noise":[37],"injection.":[38],"During":[39],"evaluation,":[40],"our":[41,96],"system":[42],"analyzes":[43],"an":[44],"executable":[45],"by":[46,53,98],"generating":[47],"multiple":[48],"ablated":[49,115],"variants,":[50],"classifies":[51],"them":[52],"using":[54,118],"smoothed":[56,108,126],"classifier,":[57],"identifies":[59],"the":[60,65,70,75,100,103,107,124,140],"final":[61],"label":[62],"majority":[66],"vote.":[67],"By":[68],"analyzing":[69],"top-class":[71],"voting":[72],"distribution":[73],"Wilson":[76],"score":[77],"interval,":[78],"derive":[80],"formal":[82],"certificate":[83],"that":[84,123],"guarantees":[85],"robustness":[86,131],"within":[87],"specific":[89],"radius":[90],"against":[91,132],"feature-space":[92],"perturbations.":[93],"We":[94],"evaluate":[95],"approach":[97],"comparing":[99],"performance":[101],"of":[102],"base":[104],"classifier":[105,109,127],"both":[111],"clean":[112],"executables":[113],"variants":[116],"generated":[117],"PyMetaEngine.":[119],"Our":[120],"results":[121],"demonstrate":[122],"proposed":[125],"successfully":[128],"provides":[129],"certifiable":[130],"attacks":[135],"without":[136],"requiring":[137],"modifications":[138],"underlying":[141],"machine":[142],"learning":[143],"architecture.":[144]},"counts_by_year":[],"updated_date":"2026-07-01T06:00:48.157686","created_date":"2026-04-24T00:00:00"}