{"status":"ok","message-type":"work","message-version":"1.0.0","message":{"indexed":{"date-parts":[[2026,5,1]],"date-time":"2026-05-01T23:13:55Z","timestamp":1777677235341,"version":"3.51.4"},"publisher-location":"Cham","reference-count":24,"publisher":"Springer Nature Switzerland","isbn-type":[{"value":"9783031976315","type":"print"},{"value":"9783031976322","type":"electronic"}],"license":[{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"tdm","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"},{"start":{"date-parts":[[2025,1,1]],"date-time":"2025-01-01T00:00:00Z","timestamp":1735689600000},"content-version":"vor","delay-in-days":0,"URL":"https:\/\/www.springernature.com\/gp\/researchers\/text-and-data-mining"}],"content-domain":{"domain":["link.springer.com"],"crossmark-restriction":false},"short-container-title":[],"published-print":{"date-parts":[[2025]]},"DOI":"10.1007\/978-3-031-97632-2_2","type":"book-chapter","created":{"date-parts":[[2025,7,4]],"date-time":"2025-07-04T00:42:30Z","timestamp":1751589750000},"page":"17-32","update-policy":"https:\/\/doi.org\/10.1007\/springer_crossmark_policy","source":"Crossref","is-referenced-by-count":0,"title":["A Robust Ensemble Malware Detector Against Powerful Adversaries"],"prefix":"10.1007","author":[{"given":"Shangyuan","family":"Zhuang","sequence":"first","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Zhang","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Fengqi","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Jiyan","family":"Sun","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Yinlong","family":"Liu","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Liru","family":"Geng","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]},{"given":"Wei","family":"Ma","sequence":"additional","affiliation":[],"role":[{"role":"author","vocabulary":"crossref"}]}],"member":"297","published-online":{"date-parts":[[2025,7,5]]},"reference":[{"key":"2_CR1","unstructured":"https:\/\/datacon.qianxin.com\/opendata\/maliciousstream"},{"key":"2_CR2","unstructured":"https:\/\/github.com\/trusted-ai\/adversarial-robustness-toolbox"},{"key":"2_CR3","doi-asserted-by":"crossref","unstructured":"Dou, Y., Ma, G., Yu, P.S., Xie, S.: Robust spammer detection by nash reinforcement learning. In: Proceedings of the 26th ACM SIGKDD International Conference on Knowledge Discovery & Data Mining, pp. 924\u2013933 (2020)","DOI":"10.1145\/3394486.3403135"},{"key":"2_CR4","doi-asserted-by":"publisher","first-page":"100","DOI":"10.1016\/j.cose.2014.05.011","volume":"45","author":"S Garcia","year":"2014","unstructured":"Garcia, S., Grill, M., Stiborek, J., Zunino, A.: An empirical comparison of botnet detection methods. Comput. Secur. 45, 100\u2013123 (2014)","journal-title":"Comput. Secur."},{"key":"2_CR5","unstructured":"Huang, Z., Zhang, T.: Black-box adversarial attack with transferable model-based embedding. arXiv preprint arXiv:1911.07140 (2019)"},{"key":"2_CR6","unstructured":"Ilyas, A., Engstrom, L., Athalye, A., Lin, J.: Black-box adversarial attacks with limited queries and information. In: International Conference on Machine Learning, pp. 2137\u20132146. PMLR (2018)"},{"key":"2_CR7","unstructured":"Kariyappa, S., Qureshi, M.K.: Improving adversarial robustness of ensembles with diversity training. arXiv preprint arXiv:1901.09981 (2019)"},{"key":"2_CR8","first-page":"3886","volume":"15","author":"D Li","year":"2020","unstructured":"Li, D., Li, Q.: Adversarial deep ensemble: evasion attacks and defenses for malware detection. IEEE TIFS 15, 3886\u20133900 (2020)","journal-title":"IEEE TIFS"},{"issue":"4","key":"2_CR9","doi-asserted-by":"publisher","first-page":"2833","DOI":"10.1109\/TII.2020.3008010","volume":"17","author":"Y Li","year":"2020","unstructured":"Li, Y., Song, Y., Jia, L., Gao, S., Li, Q., Qiu, M.: Intelligent fault diagnosis by fusing domain adversarial training and maximum mean discrepancy via ensemble learning. IEEE Trans. Ind. Inf. 17(4), 2833\u20132841 (2020)","journal-title":"IEEE Trans. Ind. Inf."},{"key":"2_CR10","doi-asserted-by":"crossref","unstructured":"Novo, C., Morla, R.: Flow-based detection and proxy-based evasion of encrypted malware c2 traffic. In: Proceedings of the 13th ACM Workshop on Artificial Intelligence and Security, pp. 83\u201391 (2020)","DOI":"10.1145\/3411508.3421379"},{"key":"2_CR11","doi-asserted-by":"crossref","unstructured":"Pierazzi, F., Pendlebury, F., Cortellazzi, J., Cavallaro, L.: Intriguing properties of adversarial ml attacks in the problem space. In: 2020 IEEE Symposium on Security and Privacy (SP\u201920), pp. 1332\u20131349. IEEE (2020)","DOI":"10.1109\/SP40000.2020.00073"},{"key":"2_CR12","doi-asserted-by":"crossref","unstructured":"Qiu, H., Dong, T., Zhang, T., et\u00a0al.: Adversarial attacks against network intrusion detection in iot systems. IEEE Internet Things J. (2020)","DOI":"10.1109\/JIOT.2020.3048038"},{"key":"2_CR13","unstructured":"Rigaki, M.: Adversarial deep learning against intrusion detection classifiers (2017)"},{"issue":"1","key":"2_CR14","doi-asserted-by":"publisher","first-page":"1","DOI":"10.1007\/s10664-021-10064-8","volume":"27","author":"R Shu","year":"2022","unstructured":"Shu, R., Xia, T., Williams, L., Menzies, T.: Omni: automated ensemble with unexpected models against adversarial evasion attack. Empir. Softw. Eng. 27(1), 1\u201332 (2022)","journal-title":"Empir. Softw. Eng."},{"issue":"4","key":"2_CR15","doi-asserted-by":"publisher","first-page":"800","DOI":"10.3390\/jcp2040041","volume":"2","author":"U Tayyab","year":"2022","unstructured":"Tayyab, U., Khan, F.B., Durad, M.H., Khan, A., Lee, Y.S.: A survey of the recent trends in deep learning based malware detection. J. Cybersecur. Priv. 2(4), 800\u2013829 (2022)","journal-title":"J. Cybersecur. Priv."},{"key":"2_CR16","unstructured":"Tram\u00e8r, F., Kurakin, A., Papernot, N., et\u00a0al.: Ensemble adversarial training: attacks and defenses. arXiv preprint arXiv:1705.07204 (2017)"},{"key":"2_CR17","doi-asserted-by":"publisher","first-page":"89031","DOI":"10.1109\/ACCESS.2022.3149053","volume":"10","author":"B Urooj","year":"2022","unstructured":"Urooj, B., Shah, M.A., Maple, C., Abbasi, M.K., Riasat, S.: Malware detection: a framework for reverse engineered android applications through machine learning algorithms. IEEE Access 10, 89031\u201389050 (2022)","journal-title":"IEEE Access"},{"key":"2_CR18","unstructured":"Wang, H., Wang, Y.: Self-ensemble adversarial training for improved robustness. In: International Conference on Learning Representations (2021)"},{"key":"2_CR19","doi-asserted-by":"crossref","unstructured":"Wu, D., Fang, B., Wang, J., Liu, Q., Cui, X.: Evading machine learning botnet detection models via deep reinforcement learning. In: ICC 2019-2019 IEEE International Conference on Communications (ICC), pp.\u00a01\u20136. IEEE (2019)","DOI":"10.1109\/ICC.2019.8761337"},{"key":"2_CR20","doi-asserted-by":"crossref","unstructured":"Xie, C., Zhang, Z., Zhou, Y., et\u00a0al.: Improving transferability of adversarial examples with input diversity. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 2730\u20132739 (2019)","DOI":"10.1109\/CVPR.2019.00284"},{"key":"2_CR21","doi-asserted-by":"publisher","first-page":"25696","DOI":"10.1109\/ACCESS.2022.3155695","volume":"10","author":"X Xing","year":"2022","unstructured":"Xing, X., Jin, X., Elahi, H., Jiang, H., Wang, G.: A malware detection approach using autoencoder in deep learning. IEEE Access 10, 25696\u201325706 (2022)","journal-title":"IEEE Access"},{"issue":"5","key":"2_CR22","doi-asserted-by":"publisher","first-page":"2957","DOI":"10.1007\/s11280-020-00813-y","volume":"23","author":"F Zhang","year":"2020","unstructured":"Zhang, F., Wang, Y., Liu, S., Wang, H.: Decision-based evasion attacks on tree ensemble classifiers. World Wide Web 23(5), 2957\u20132977 (2020). https:\/\/doi.org\/10.1007\/s11280-020-00813-y","journal-title":"World Wide Web"},{"key":"2_CR23","series-title":"Lecture Notes in Computer Science","doi-asserted-by":"publisher","first-page":"96","DOI":"10.1007\/978-3-030-02922-7_7","volume-title":"Web Information Systems Engineering \u2013 WISE 2018","author":"F Zhang","year":"2018","unstructured":"Zhang, F., Wang, Y., Wang, H.: Gradient correlation: are ensemble classifiers more robust against evasion attacks in practical settings? In: Hacid, H., Cellary, W., Wang, H., Paik, H.-Y., Zhou, R. (eds.) WISE 2018. LNCS, vol. 11233, pp. 96\u2013110. Springer, Cham (2018). https:\/\/doi.org\/10.1007\/978-3-030-02922-7_7"},{"key":"2_CR24","doi-asserted-by":"crossref","unstructured":"Zhou, M., Wu, J., Liu, Y., Liu, S., Zhu, C.: Dast: data-free substitute training for adversarial attacks. In: Proceedings of the IEEE\/CVF Conference on Computer Vision and Pattern Recognition, pp. 234\u2013243 (2020)","DOI":"10.1109\/CVPR42600.2020.00031"}],"container-title":["Lecture Notes in Computer Science","Computational Science \u2013 ICCS 2025"],"original-title":[],"language":"en","link":[{"URL":"https:\/\/link.springer.com\/content\/pdf\/10.1007\/978-3-031-97632-2_2","content-type":"unspecified","content-version":"vor","intended-application":"similarity-checking"}],"deposited":{"date-parts":[[2026,4,29]],"date-time":"2026-04-29T08:23:33Z","timestamp":1777451013000},"score":1,"resource":{"primary":{"URL":"https:\/\/link.springer.com\/10.1007\/978-3-031-97632-2_2"}},"subtitle":[],"short-title":[],"issued":{"date-parts":[[2025]]},"ISBN":["9783031976315","9783031976322"],"references-count":24,"URL":"https:\/\/doi.org\/10.1007\/978-3-031-97632-2_2","relation":{},"ISSN":["0302-9743","1611-3349"],"issn-type":[{"value":"0302-9743","type":"print"},{"value":"1611-3349","type":"electronic"}],"subject":[],"published":{"date-parts":[[2025]]},"assertion":[{"value":"5 July 2025","order":1,"name":"first_online","label":"First Online","group":{"name":"ChapterHistory","label":"Chapter History"}},{"value":"ICCS","order":1,"name":"conference_acronym","label":"Conference Acronym","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"International Conference on Computational Science","order":2,"name":"conference_name","label":"Conference Name","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Singapore","order":3,"name":"conference_city","label":"Conference City","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"Singapore","order":4,"name":"conference_country","label":"Conference Country","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"2025","order":5,"name":"conference_year","label":"Conference Year","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"7 July 2025","order":7,"name":"conference_start_date","label":"Conference Start Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"9 July 2025","order":8,"name":"conference_end_date","label":"Conference End Date","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"25","order":9,"name":"conference_number","label":"Conference Number","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"iccs-computsci2025","order":10,"name":"conference_id","label":"Conference ID","group":{"name":"ConferenceInfo","label":"Conference Information"}},{"value":"https:\/\/www.iccs-meeting.org\/iccs2025\/","order":11,"name":"conference_url","label":"Conference URL","group":{"name":"ConferenceInfo","label":"Conference Information"}}]}}