{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,9,23]],"date-time":"2026-09-23T17:11:15Z","timestamp":1790183475006,"version":"4.1.0"},"publisher-location":"Cham","reference-count":59,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031708787","type":"print"},{"value":"9783031708794","type":"electronic"}],"license":[{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2024,1,1]],"date-time":"2024-01-01T00:00:00Z","timestamp":1704067200000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2024]]},"DOI":"10.1007\/978-3-031-70879-4_3","type":"book-chapter","created":{"date-parts":[[2024,9,4]],"date-time":"2024-09-04T19:02:20Z","timestamp":1725476540000},"page":"45-65","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":5,"title":["Bayesian Learned Models Can Detect Adversarial Malware for Free"],"prefix":"10.1007","author":[{"given":"Bao Gia","family":"Doan","sequence":"first","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Dang Quang","family":"Nguyen","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Paul","family":"Montague","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Tamas","family":"Abraham","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Olivier","family":"De Vel","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Seyit","family":"Camtepe","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Salil S.","family":"Kanhere","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Ehsan","family":"Abbasnejad","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]},{"given":"Damith C.","family":"Ranasinghe","sequence":"additional","affiliation":[],"role":[{"vocabulary":"crossref","role":"author"}]}],"member":"297","published-online":{"date-parts":[[2024,9,5]]},"reference":[{"key":"3_CR1","doi-asserted-by":"crossref","unstructured":"Al-Dujaili, A., Huang, A., Hemberg, E., O\u2019Reilly, U.M.: Adversarial deep learning for robust detection of binary encoded malware. In: IEEE Security and Privacy Workshops (S &PW) (2018)","DOI":"10.1109\/SPW.2018.00020"},{"key":"3_CR2","unstructured":"Anderson, H.S., Roth, P.: Ember: an open dataset for training static PE malware machine learning models. arXiv preprint arXiv:1804.04637 (2018)"},{"key":"3_CR3","unstructured":"Anderson, R., et al.: Measuring the changing cost of cybercrime. In: Workshop on the Economics of Information Security (WEIS) (2019)"},{"key":"3_CR4","doi-asserted-by":"crossref","unstructured":"Arp, D., Spreitzenbarth, M., Hubner, M., Gascon, H., Rieck, K., Siemens, C.: Drebin: effective and explainable detection of android malware in your pocket. In: Network and Distributed System Security Symposium (NDSS) (2014)","DOI":"10.14722\/ndss.2014.23247"},{"key":"3_CR5","unstructured":"Athalye, A., Carlini, N., Wagner, D.: Obfuscated gradients give a false sense of security: Circumventing defenses to adversarial examples. In: International Conference on Machine Learning (ICML) (2018)"},{"key":"3_CR6","doi-asserted-by":"crossref","unstructured":"Backes, M., Nauman, M.: LUNA: Quantifying and Leveraging Uncertainty in Android Malware Analysis through Bayesian Machine Learning. In: IEEE European Symposium on Security and Privacy (Euro S &P) (2017)","DOI":"10.1109\/EuroSP.2017.24"},{"key":"3_CR7","unstructured":"Biggio, B., et al.: Evasion attacks against machine learning at test time. In: Joint European Conference on Machine Learning and Knowledge Discovery in Databases (ECML PKDD) (2013)"},{"issue":"4","key":"3_CR8","doi-asserted-by":"publisher","first-page":"984","DOI":"10.1109\/TKDE.2013.57","volume":"26","author":"B Biggio","year":"2013","unstructured":"Biggio, B., Fumera, G., Roli, F.: Security evaluation of pattern classifiers under attack. IEEE Trans. Knowl. Data Eng. 26(4), 984\u2013996 (2013)","journal-title":"IEEE Trans. Knowl. Data Eng."},{"key":"3_CR9","doi-asserted-by":"publisher","first-page":"317","DOI":"10.1016\/j.patcog.2018.07.023","volume":"84","author":"B Biggio","year":"2018","unstructured":"Biggio, B., Roli, F.: Wild patterns: ten years after the rise of adversarial machine learning. Pattern Recogn. 84, 317\u2013331 (2018)","journal-title":"Pattern Recogn."},{"key":"3_CR10","unstructured":"Blundell, C., Cornebise, J., Kavukcuoglu, K., Wierstra, D.: Weight uncertainty in neural network. In: International Conference on Machine Learning (ICML) (2015)"},{"key":"3_CR11","doi-asserted-by":"crossref","unstructured":"Carlini, N., Wagner, D.: Towards evaluating the robustness of neural networks. In: IEEE Symposium on Security and Privacy (S &P) (2017)","DOI":"10.1109\/SP.2017.49"},{"key":"3_CR12","doi-asserted-by":"publisher","first-page":"987","DOI":"10.1109\/TIFS.2019.2932228","volume":"15","author":"X Chen","year":"2019","unstructured":"Chen, X., et al.: Android HIV: a study of repackaging malware for evading machine-learning detection. IEEE Trans. Inf. Forensics Secur. 15, 987\u20131001 (2019)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"key":"3_CR13","unstructured":"Chen, Y., Wang, S., She, D., Jana, S.: On training robust PDF malware classifiers. In: USENIX Conference on Security Symposium (2020)"},{"key":"3_CR14","doi-asserted-by":"crossref","unstructured":"Croce, F., Andriushchenko, M., Singh, N.D., Flammarion, N., Hein, M.: Sparse-rs: a versatile framework for query-efficient sparse black-box adversarial attacks. In: AAAI Conference on Artificial Intelligence (AAAI) (2022)","DOI":"10.1609\/aaai.v36i6.20595"},{"key":"3_CR15","unstructured":"D\u2019Angelo, F., Fortuin, V., Wenzel, F.: On stein variational neural network ensembles. In: International Conference on Machine Learning (ICML) Workshop on Uncertainty and Robustness in Deep Learning (2021)"},{"key":"3_CR16","unstructured":"DEFCON: Machine learning static evasion competition. https:\/\/www.elastic.co\/blog\/machine-learning-static-evasion-competition (2019). Accessed 9 Aug 2022"},{"key":"3_CR17","doi-asserted-by":"crossref","unstructured":"Demetrio, L., Biggio, B.: Secml-malware: Pentesting windows malware classifiers with adversarial exemples in python. arXiv preprint arXiv:2104.12848 (2021)","DOI":"10.2139\/ssrn.4066509"},{"issue":"4","key":"3_CR18","doi-asserted-by":"publisher","first-page":"711","DOI":"10.1109\/TDSC.2017.2700270","volume":"16","author":"A Demontis","year":"2019","unstructured":"Demontis, A., et al.: Yes, machine learning can be more secure! a case study on android malware detection. IEEE Trans. Dependable Secure Comput. 16(4), 711\u2013724 (2019)","journal-title":"IEEE Trans. Dependable Secure Comput."},{"key":"3_CR19","unstructured":"Detommaso, G., Gasparin, A., Wilson, A., Archambeau, C.: Uncertainty calibration in bayesian neural networks via distance-aware priors. arXiv preprint arXiv:2207.08200 (2022)"},{"key":"3_CR20","unstructured":"Doan, B.G., Abbasnejad, E.M., Shi, J.Q., Ranasinghe, D.C.: Bayesian learning with information gain provably bounds risk for a robust adversarial defense. In: International Conference on Machine Learning (ICML) (2022)"},{"key":"3_CR21","doi-asserted-by":"crossref","unstructured":"Doan, B.G., et al.: Feature-space Bayesian adversarial learning improved malware detector robustness. In: AAAI Conference on Artificial Intelligence (AAAI) (2023)","DOI":"10.1609\/aaai.v37i12.26727"},{"key":"3_CR22","unstructured":"Eddy, M., Perlroth, N.: (Sep 2020). https:\/\/www.nytimes.com\/2020\/09\/18\/world\/europe\/cyber-attack-germany-ransomeware-death.html. Accessed 1 Dec 2022"},{"key":"3_CR23","unstructured":"Erdemir, E., Bickford, J., Melis, L., Aydore, S.: Adversarial robustness with non-uniform perturbations. In: Advances in Neural Information Processing Systems (NeurIPS) (2021)"},{"key":"3_CR24","unstructured":"Feinman, R., Curtin, R.R., Shintre, S., Gardner, A.B.: Detecting adversarial samples from artifacts. arXiv preprint arXiv:1703.00410 (2017)"},{"key":"3_CR25","unstructured":"Fleshman: Evading machine learning malware classifiers. https:\/\/towardsdatascience.com\/evading-machine-learning-malware-classifiers-ce52dabdb713 (2019), accessed: 2022-08-09"},{"key":"3_CR26","unstructured":"Foong, A., Burt, D., Li, Y., Turner, R.: On the expressiveness of approximate inference in bayesian neural networks. In: Advances in Neural Information Processing Systems (NeurIPS), pp. 15897\u201315908 (2020)"},{"key":"3_CR27","unstructured":"Foong, A.Y., Li, Y., Hern\u00e1ndez-Lobato, J.M., Turner, R.E.: \u2018In-Between\u2019 Uncertainty in Bayesian Neural Networks. arXiv preprint arXiv:1906.11537 (2019)"},{"key":"3_CR28","unstructured":"Gal, Y., et\u00a0al.: Uncertainty in deep learning (2016)"},{"key":"3_CR29","unstructured":"Goodfellow, I.J., Shlens, J., Szegedy, C.: Explaining and harnessing adversarial examples. In: International Conference on Learning Representations (ICLR) (2015)"},{"key":"3_CR30","doi-asserted-by":"crossref","unstructured":"Grosse, K., Papernot, N., Manoharan, P., Backes, M., McDaniel, P.: Adversarial perturbations against deep neural networks for malware classification. arXiv preprint arXiv:1606.04435 (2016)","DOI":"10.1109\/SP.2016.41"},{"key":"3_CR31","doi-asserted-by":"crossref","unstructured":"Grosse, K., Papernot, N., Manoharan, P., Backes, M., McDaniel, P.: Adversarial examples for malware detection. In: European Symposium on Research in Computer Security (ESORICS) (2017)","DOI":"10.1007\/978-3-319-66399-9_4"},{"key":"3_CR32","unstructured":"Harang, R., Rudd, E.M.: SOREL-20M: A large scale benchmark dataset for malicious pe detection (2021)"},{"key":"3_CR33","unstructured":"KasperskyLab: Cybercriminals attack users with 411,000 new malicious files daily. https:\/\/www.kaspersky.com\/about\/press-releases\/2023_rising-threats-cybercriminals-unleash-411000-malicious-files-daily-in-2023 (2023). Accessed 9 Jan 2024"},{"key":"3_CR34","doi-asserted-by":"crossref","unstructured":"Kolosnjaji, B., et al.: Adversarial malware binaries: evading deep learning for malware detection in executables. In: European Signal Processing Conference (EUSIPCO) (2018)","DOI":"10.23919\/EUSIPCO.2018.8553214"},{"key":"3_CR35","unstructured":"Kreuk, F., Barak, A., Aviv-Reuven, S., Baruch, M., Pinkas, B., Keshet, J.: Deceiving end-to-end deep learning malware detectors using adversarial examples. arXiv preprint arXiv:1802.04528 (2018)"},{"key":"3_CR36","unstructured":"Krishnan, R., Esposito, P., Subedar, M.: Bayesian-torch: Bayesian neural network layers for uncertainty estimation. https:\/\/github.com\/IntelLabs\/bayesian-torch (2022)"},{"key":"3_CR37","doi-asserted-by":"publisher","first-page":"3886","DOI":"10.1109\/TIFS.2020.3003571","volume":"15","author":"D Li","year":"2020","unstructured":"Li, D., Li, Q.: Adversarial deep ensemble: evasion attacks and defenses for malware detection. IEEE Trans. Inf. Forensics Secur. 15, 3886\u20133900 (2020)","journal-title":"IEEE Trans. Inf. Forensics Secur."},{"issue":"1","key":"3_CR38","doi-asserted-by":"publisher","first-page":"736","DOI":"10.1109\/TNSE.2021.3051354","volume":"8","author":"D Li","year":"2021","unstructured":"Li, D., Li, Q., Ye, Y., Xu, S.: A framework for enhancing deep neural networks against adversarial malware. IEEE Trans. Netw. Sci. Eng. 8(1), 736\u2013750 (2021)","journal-title":"IEEE Trans. Netw. Sci. Eng."},{"key":"3_CR39","doi-asserted-by":"crossref","unstructured":"Li, D., Qiu, T., Chen, S., Li, Q., Xu, S.: Can we leverage predictive uncertainty to detect dataset shift and adversarial examples in android malware detection? In: Annual Computer Security Applications Conference(ACSAC) (2021)","DOI":"10.1145\/3485832.3485916"},{"key":"3_CR40","unstructured":"Li, Y., Gal, Y.: Dropout inference in bayesian neural networks with alpha-divergences. In: International Conference on Machine Learning (ICML) (2017)"},{"key":"3_CR41","unstructured":"Liu, Q., Wang, D.: Stein variational gradient descent: a general purpose bayesian inference algorithm. In: Advances in Neural Information Processing Systems (NeurIPS) (2016)"},{"key":"3_CR42","doi-asserted-by":"crossref","unstructured":"MacKay, D.J.C.: A practical Bayesian framework for backpropagation networks. Neural Comput.4(3), 448\u2013472 (05 1992)","DOI":"10.1162\/neco.1992.4.3.448"},{"key":"3_CR43","unstructured":"Maddox, W.J., Izmailov, P., Garipov, T., Vetrov, D.P., Wilson, A.G.: A simple baseline for Bayesian uncertainty in deep learning. In: Advances in Neural Information Processing Systems (NeurIPS) (2019)"},{"key":"3_CR44","unstructured":"Madry, A., Makelov, A., Schmidt, L., Tsipras, D., Vladu, A.: Towards deep learning models resistant to adversarial attacks. In: International Conference on Learning Representations (ICLR) (2018)"},{"key":"3_CR45","unstructured":"Melis, M., Demontis, A., Pintor, M., Sotgiu, A., Biggio, B.: Secml: A python library for secure and explainable machine learning. arXiv preprint arXiv:1912.10013 (2019)"},{"key":"3_CR46","unstructured":"Nguyen, A.T., Raff, E., Nicholas, C., Holt, J.: Leveraging uncertainty for improved static malware detection under extreme false positive constraints. In: International Joint Conferences on Artificial Intelligence (IJCAI) Workshop (2021)"},{"key":"3_CR47","unstructured":"Parkour, M.: 16,800 clean and 11,960 malicious files for signature testing and research, https:\/\/contagiodump.blogspot.com\/2013\/03\/16800-clean-and-11960-malicious-files.html"},{"key":"3_CR48","unstructured":"Paszke, A., et\u00a0al.: Pytorch: an imperative style, high-performance deep learning library (2019)"},{"key":"3_CR49","doi-asserted-by":"crossref","unstructured":"Peng, H., et al.: Using probabilistic generative models for ranking risks of android apps. In: ACM Conference on Computer and Communications Security (CCS) (2012)","DOI":"10.1145\/2382196.2382224"},{"key":"3_CR50","doi-asserted-by":"crossref","unstructured":"Pierazzi, F., Pendlebury, F., Cortellazzi, J., Cavallaro, L.: Intriguing properties of adversarial ml attacks in the problem space. In: IEEE Symposium on Security and Privacy (S &P) (2020)","DOI":"10.1109\/SP40000.2020.00073"},{"key":"3_CR51","unstructured":"Raff, E., Barker, J., Sylvester, J., Brandon, R., Catanzaro, B., Nicholas, C.K.: Malware detection by eating a whole exe. In: AAAI Conference on Artificial Intelligence Workshop (AAAIW) (2018)"},{"key":"3_CR52","unstructured":"Rawat, A., Wistuba, M., Nicolae, M.I.: Adversarial phenomenon in the eyes of bayesian deep learning. arXiv preprint arXiv:1711.08244 (2017)"},{"key":"3_CR53","unstructured":"Ritter, H., Botev, A., Barber, D.: A scalable laplace approximation for neural networks. In: International Conference on Learning Representations (ICLR) (2018)"},{"key":"3_CR54","unstructured":"Smith, L., Gal, Y.: Understanding measures of uncertainty for adversarial example detection. In: Uncertainty in Artificial Intelligence (UAI) (2018)"},{"issue":"1","key":"3_CR55","first-page":"1929","volume":"15","author":"N Srivastava","year":"2014","unstructured":"Srivastava, N., Hinton, G., Krizhevsky, A., Sutskever, I., Salakhutdinov, R.: Dropout: a simple way to prevent neural networks from overfitting. J. Mach. Learn. Res. (JMLR) 15(1), 1929\u20131958 (2014)","journal-title":"J. Mach. Learn. Res. (JMLR)"},{"key":"3_CR56","doi-asserted-by":"crossref","unstructured":"Suciu, O., Coull, S.E., Johns, J.: Exploring adversarial examples in malware detection. In: IEEE Security and Privacy Workshops (S &PW) (2019)","DOI":"10.1109\/SPW.2019.00015"},{"key":"3_CR57","doi-asserted-by":"publisher","first-page":"964","DOI":"10.1007\/s10618-015-0448-4","volume":"30","author":"G Webb","year":"2016","unstructured":"Webb, G., Hyde, R., Cao, H., Nguyen, H.L., Petitjean, F.: Characterizing concept drift. Data Min. Knowl. Disc. 30, 964\u2013994 (2016)","journal-title":"Data Min. Knowl. Disc."},{"key":"3_CR58","doi-asserted-by":"crossref","unstructured":"Yang, W., Kong, D., Xie, T., Gunter, C.A.: Malware detection in adversarial settings: Exploiting feature evolutions and confusions in android apps. In: Annual Computer Security Applications Conference (ACSAC) (2017)","DOI":"10.1145\/3134600.3134642"},{"key":"3_CR59","unstructured":"Yao, J., Pan, W., Ghosh, S., Doshi-Velez, F.: Quality of uncertainty quantification for bayesian neural network inference. In: International Conference on Machine Learning (ICML) Workshop on Uncertainty and Robustness in Deep Learning (2019)"}],"container-title":["Lecture Notes in Computer Science","Computer Security \u2013 ESORICS 2024"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-70879-4_3","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2024,9,4]],"date-time":"2024-09-04T19:03:21Z","timestamp":1725476601000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-70879-4_3"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2024]]},"ISBN":["9783031708787","9783031708794"],"references-count":59,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-70879-4_3","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2024]]},"assertion":[{"value":"5 September 2024","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ESORICS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"European Symposium on Research in Computer Security","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Bydgoszcz","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Poland","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2024","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"16 September 2024","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"20 September 2024","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"29","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"esorics2024","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/esorics2024.org","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}