arXiv AI
A TTP by TTP Approach: Precise Malware Detection via Malicious TTP Recognition
Read the original on arXiv AI →The Flow has not summarised this story yet — read it at arXiv AI.
Related stories
arXiv Machine Learning
Sep 1
Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection
arXiv:2503.11841v2 Announce Type: replace-cross Abstract: Machine Learning (ML) malware detectors rely heavily on crowd-sourced AntiVirus (AV) labels, with platforms like VirusTotal serving as truste...
Hugging Face Trending Papers
Jul 22
Defense Against LLM Backdoors using Critical Neuron Isolation Pruning
Large language models (LLMs) are vulnerable to backdoor attacks, where hidden triggers induce malicious outputs. Existing defenses generally fall into inference-time detection or training-time mitigation, but face two key limitations.
arXiv AI
Sep 10
Behavioral Grammar: Detecting Adaptive Malware via Tiny Language Model Priors and Second-Order Temporal Analysis
arXiv:2608.00745v2 Announce Type: replace Abstract: Modern endpoint detection systems face a fundamental tension: signature-based approaches are trivially evaded by polymorphic or adaptive threats, w...
arXiv Machine Learning
Jul 21
A Multi-Model Hybrid Defense Approach Against White-box Adversarial Attacks in Computer Network Traffic
arXiv:2607. 17105v1 Announce Type: cross Abstract: It is crucial to safeguard computer networks from evolving network security threats and unknown cyberattacks.
arXiv Machine Learning
Aug 7
Robust Context-Aware Detection of Malicious Instructions in Text
arXiv:2608. 05430v1 Announce Type: cross Abstract: The remarkable instruction-following ability of modern LLMs has enabled their practical use as the minds of agents that can autonomously complete increasingly complex tasks.
arXiv Machine Learning
Aug 28
Provable one-poison backdoor attacks on linear models and ReLU neural networks
The paper demonstrates that a single poisoned data point can successfully create a backdoor in linear models and ReLU neural networks without needing detailed knowledge of the training data. It establishes provable conditions under which this one‑poison attack works with high probability, achieving zero backdooring error while leaving the model’s normal performance largely unaffected. The attack relies only on coarse geometric bounds of the input space and training parameters.