Trust Under Siege: Label Spoofing Attacks against Machine Learning for Android Malware Detection

arXiv:2503.11841 · cs.CR, cs.LG · Submitted 2025-03-14 · Read on arXiv

cs.CR, cs.LG

Submitted: 2025-03-14

Updated: 2026-08-31

Project page: https://virustotal.github.io/yara

Terminology

• False Positive Rate — 19× in this paper
• Machine Learning — 19× in this paper
• True Positive Rate — 19× in this paper
• Accuracy — 9× in this paper · explained in 1 episode
• Denial of Service — 8× in this paper
• Attack Success Rate — 5× in this paper
• Attack Success Rate (ASR) — 4× in this paper · explained in 2 episodes
• Neural Network — 3× in this paper
• Robustness — 3× in this paper · explained in 5 episodes
• Active Learning — 2× in this paper · explained in 6 episodes
• Adam — 2× in this paper · explained in 2 episodes
• Adversarial Attacks — 2× in this paper · explained in 1 episode
• Aggregation — 2× in this paper · explained in 1 episode
• Core — 2× in this paper · explained in 2 episodes
• Feature Extraction — 2× in this paper · explained in 2 episodes
• Transferability — 2× in this paper · explained in 4 episodes
• Verification — 2× in this paper · explained in 2 episodes
• Abstraction — 1× in this paper · explained in 1 episode
• Abundance — 1× in this paper · explained in 1 episode
• Activation Function — 1× in this paper · explained in 1 episode
• Actor — 1× in this paper · explained in 3 episodes
• Alignment — 1× in this paper · explained in 1 episode
• Clustering — 1× in this paper · explained in 2 episodes
• Differential Privacy — 1× in this paper · explained in 4 episodes
• Elias — 1× in this paper · explained in 2 episodes
• Federated Learning — 1× in this paper · explained in 15 episodes
• Gradient Boosted Trees — 1× in this paper
• Linear Support Vector Machine — 1× in this paper
• Loss Function — 1× in this paper · explained in 2 episodes
• Multipurpose Internet Mail Extensions — 1× in this paper
• Random Forest — 1× in this paper
• Receiver Operating Characteristic — 1× in this paper
• Regularization — 1× in this paper · explained in 3 episodes
• Sparsity — 1× in this paper · explained in 4 episodes

Sources

• Poisoning Attacks against Support Vector Machines
• EMBER: An Open Dataset for Training Static PE Malware Machine Learning Models
• Deep Partition Aggregation: Provable Defense against General Poisoning Attacks

Related papers

• SoK: AI-Augmented Binary Reversing
• Relaxed Sender Anonymity for CBDC Interbank Settlement: A Zero-Knowledge Approach on Permissioned EVM
• Calibration-Family Overfit: Why Trusted Sabotage Monitors Don't Transfer Across Lineages
• Efficient Fuzzy PSI under One-Sided Assumptions
• Sealing the Audit-Runtime Gap for LLM Skills
• Token Composition: A Graph Based on EVM Logs