arXiv Machine Learning August 31, 2026 By Shae McFadden, Ilias Tsingenopoulos, Mario D'Onghia, Alexander Herzog, Myles Foley, Chris Hicks, Lorenzo Cavallaro, Fabio Pierazzi

REPLICANT: Learning Policies for Evading and Hardening Malware Detectors

Read the original on arXiv Machine Learning →

The paper introduces Replicant, a deep reinforcement learning framework that learns to evade malware detectors under a strict label‑only black‑box threat model. Replicant generates reusable policies for modifying malware samples and deciding when to query the target, and it transfers across different samples, detectors, and feature spaces. In experiments on seven Android malware detectors and three feature spaces, Replicant achieves a mean attack success rate of 78.8%, outperforming state‑of‑the‑art methods by 20.9%–39.2% and providing a stronger signal for adversarial training to harden detectors.

Machine-generated by The Flow from the publisher's headline and feed description — not written or checked by a human. The full article lives at arXiv Machine Learning.

arXiv Machine Learning

Sep 1

Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection

arXiv:2503.11841v2 Announce Type: replace-cross Abstract: Machine Learning (ML) malware detectors rely heavily on crowd-sourced AntiVirus (AV) labels, with platforms like VirusTotal serving as truste...

By Tianwei Lan, Luca Demetrio, Farid Nait-Abdesselam, Yufei Han, Simone Aonzo

rag benchmarks

arXiv Machine Learning

Jul 13

Regression-aware Continual Learning for Android Malware Detection

arXiv:2507. 18313v2 Announce Type: replace Abstract: Malware evolves rapidly, forcing machine learning-based detectors to be continuously updated.

By Daniele Ghiani, Daniele Angioni, Giorgio Piras, Angelo Sotgiu, Luca Minnei, Srishti Gupta, Maura Pintor, Fabio Roli, Battista Biggio

arXiv AI

Jun 6

Adversarial Agents: Black-Box Evasion Attacks with Reinforcement Learning

arXiv:2503. 01734v3 Announce Type: replace-cross Abstract: Attacks on machine learning models have been extensively studied through stateless optimization.

By Kyle Domico, Jean-Charles Noirot Ferrand, Ryan Sheatsley, Eric Pauley, Josiah Hanna, Patrick McDaniel

agents computer-vision reinforcement-learning benchmarks safety

arXiv AI

Jul 17

Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks

arXiv:2607. 14921v1 Announce Type: cross Abstract: Machine learning models are increasingly adapted in various domains.

By Hamid Dashtbani, Mehdi Dousti Gandomani, AmirMahdi Sadeghzadeh

benchmarks safety

arXiv Machine Learning

Jun 26

DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors

arXiv:2606. 26707v1 Announce Type: cross Abstract: Adversarial APKs are Android applications modified in the problem space to evade machine-learning malware detectors.

By Christian Scano, Diego Soi, Angelo Sotgiu, Luca Demetrio, Davide Maiorca, Giorgio Giacinto, Fabio Roli, Battista Biggio

safety

arXiv Machine Learning

Jul 17

Diagnosing and Mitigating Domain Shift in Permission-Based Android Malware Detection

arXiv:2605. 09028v3 Announce Type: replace Abstract: Machine learning-based Android malware detectors often fail in real-world deployment due to domain shift, where models trained on one data source perform poorly on applications from another.

By Md Rafid Islam

benchmarks safety

One email a morning, machine-written

Related stories

Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection

Regression-aware Continual Learning for Android Malware Detection

Adversarial Agents: Black-Box Evasion Attacks with Reinforcement Learning

Random Logit Scaling: Defending Deep Neural Networks Against Black-Box Score-Based Adversarial Example Attacks

DroidBreaker: Practical and Functional Problem-Space Attacks on Machine-Learning Android Malware Detectors

Diagnosing and Mitigating Domain Shift in Permission-Based Android Malware Detection