[37] Luca Demetrio, Battista Biggio, Giovanni Lagorio, Fabio Roli, and Alessandro Armando. Explaining vulnerabilities of deep learning to adversarial malware binaries. In Proceedings of the Third Italian Conference on Cyber Security, ITASEC, 2019.
[38] Dario Nisi, Mariano Graziano, Yanick Fratantonio, and Davide Balzarotti. Lost in the Loader: The Many Faces of the Windows PE File Format. In Proceedings of the 24th International Symposium on Research in Attacks, Intrusions and Defenses, RAID, 2021.
[39] Wei Song, Xuezixiang Li, Sadia Afroz, Deepali Garg, Dmitry Kuznetsov, and Heng Yin. MAB-Malware: A Reinforcement Learning Framework for Blackbox Generation of Adversarial Malware. In Proceedings of the 2022 ACM Asia Conference on Computer and Communications Security, AsiaCCS, 2022.
[40] William Flishman, Edward Raff, Jared Sylvester, Steven Forsyth, and Mark McLean. Nonnegative networks against adversarial attacks, 2019.
[41] Krishnamurthy (Dj) Dvijotham, Jamie Hayes, Borja Balle, Zico Kolter, Chongli Qin, András György, Kai Xiao, Sven Gowal, and Pushmeet Kohli. A framework for robustness certification of smoothed classifiers using f-divergences. In International Conference on Learning Representations, ICLR, 2020.
[42] Jerzy Neyman and Egon Sharpe Pearson. IX. on the problem of the most efficient tests of statistical hypotheses. Philosophical Transactions of the Royal Society of London. Series A, Containing Papers of a Mathematical or Physical Character, 231(694-706):289-337, February 1933.
[43] Robert A. Wagner and Michael J. Fischer. The string-to-string correction problem. Journal of the ACM, 21(1):168-173, January 1974. ISSN 0004-5411.
[44] Microsoft Defender Security Research Team. New machine learning model sifts through the good to unearth the bad in evasive malware, July 2019. URL https://www.microsoft.com/en-us/security/blog/2019/07/25/new-machine-learning-model-sifts-through-the-good-to-unearth-the-bad-in-evasive-malware/.
[45] Kaijun Liu, Shengwei Xu, Guoai Xu, Miao Zhang, Dawei Sun, and Haifeng Liu. A Review of Android Malware Detection Approaches Based on Machine Learning. IEEE Access, 8, 2020.
[46] Kaspersky Lab. Machine Learning for Malware Detection, 2021. URL https://media.kaspersky.com/en/enterprise-security/Kaspersky-Lab-Whitepaper-Machine-Learning.pdf.
[47] Blackberry Limited. Cylance AI from Blackberry, 2022. URL https://www.blackberry.com/us/en/products/cylance-endpoint-security/cylance-ai.
[48] Edward Raff, Jon Barker, Jared Sylvester, Robert Brandon, Bryan Catanzaro, and Charles K. Nicholas. Malware detection by eating a whole EXE. In The Workshops of the Thirty-Second AAAI Conference on Artificial Intelligence, AAAI Workshops, 2018.
[49] Marek Krčál, Ondřej Švec, Martin Bálek, and Otakar Jasek. Deep Convolutional Malware Classifiers Can Learn from Raw Executables and Labels Only. In The Workshops of 6th International Conference on Learning Representations, 2018.
[50] Edward Raff, William Fleshman, Richard Zak, Hyrum S. Anderson, Bobby Filar, and Mark McLean. Classifying Sequences of Extreme Length with Constant Memory Applied to Malware Detection. In Proceedings of the AAAI Conference on Artificial Intelligence, AAAI, 2021.
[51] Octavian Suciu, Scott E. Coull, and Jeffrey Johns. Exploring Adversarial Examples in Malware Detection. In IEEE Security and Privacy Workshops, S&PW, 2019.
[52] Luca Demetrio, Scott E. Coull, Battista Biggio, Giovanni Lagorio, Alessandro Armando, and Fabio Roli. Adversarial examples: A survey and experimental evaluation of practical attacks on machine learning for windows malware detection. ACM Trans. Priv. Secur., 24(4), September 2021. ISSN 2471-2566.