[53] VirusTotal. Yara: The pattern matching swiss knife for malware researchers, 2022. URL https://virustotal.github.io/yara/. Accessed: 2023-10-12.
[54] Abdullah Al-Dujaili, Alex Huang, Erik Hemberg, and Una-May O'Reilly. Adversarial Deep Learning for Robust Detection of Binary Encoded Malware. In IEEE Security and Privacy Workshops, S&PW, 2018.
[55] Klas Leino, Zifan Wang, and Matt Fredrikson. Globally-robust neural networks. In International Conference on Machine Learning, ICML, 2021.
[56] Zayd Hammoudeh and Daniel Lowd. Feature partition aggregation: A fast certified defense against a union of sparse adversarial attacks, 2023.
[57] Marc Fischer, Maximilian Baader, and Martin Vechev. Certified Defense to Image Transformations via Randomized Smoothing. In Advances in Neural Information Processing Systems, NeurIPS, 2020.
[58] Linyi Li, Maurice Weber, Xiaojun Xu, Luka Rimanic, Bhavya Kailkhura, Tao Xie, Ce Zhang, and Bo Li. Tss: Transformation-specific smoothing for robustness certification. In ACM SIGSAC Conference on Computer and Communications Security, CCS, 2021.
[59] Zhongkai Hao, Chengyang Ying, Yinpeng Dong, Hang Su, Jian Song, and Jun Zhu. Gsmooth: Certified robustness against semantic transformations via generalized randomized smoothing. In International Conference on Machine Learning, ICML, 2022.
[60] Jiehang Zeng, Jianhan Xu, Xiaqing Zheng, and Xuanjing Huang. Certified robustness to text adversarial attacks by randomized [mask]. Computational Linguistics, 49:395-427, 2023.
[61] Jan Schuchardt, Yan Scholten, and Stephan Gunnemann. (Provable) adversarial robustness for group equivariant tasks: Graphs, point clouds, molecules, and more. In Advances in Neural Information Processing Systems, NeurIPS, 2023.
[62] Aleksandar Bojchevski, Johannes Gasteiger, and Stephan Gunnemann. Efficient robustness certificates for discrete data: Sparsity-aware randomized smoothing for graphs, images and more. In International Conference on Machine Learning, ICML, 2020.
[63] Ambra Demontis, Marco Melis, Battista Biggio, Davide Maiorca, Daniel Arp, Konrad Rieck, Igino Corona, Giorgio Giacinto, and Fabio Roli. Yes, Machine Learning Can Be More Secure! A Case Study on Android Malware Detection. IEEE Transactions on Dependable and Secure Computing, 16(4):711-724, 2019.
[64] Erwin Quiring, Lukas Pirch, Michael Reimsbach, Daniel Arp, and Konrad Rieck. Against All Odds: Winning the Defense Challenge in an Evasion Competition with Diversification. arXiv preprint:2010.09569, 2020.
[65] Yizheng Chen, Shiqi Wang, Yue Qin, Xiaojing Liao, Suman Jana, and David Wagner. Learning security classifiers with verified global robustness properties. In ACM SIGSAC Conference on Computer and Communications Security, CCS, 2021.
[66] Eric Wong, Frank Schmidt, Jan Hendrik Metzen, and J. Zico Kolter. Scaling provable adversarial defenses. In Advances in Neural Information Processing Systems, NeurIPS, 2018.
[67] Jeet Mohapatra, Ching-Yun Ko, Lily Weng, Pin-Yu Chen, Sijja Liu, and Luca Daniel. Hidden cost of randomized smoothing. In Proceedings of The 24th International Conference on Artificial Intelligence and Statistics, AISTATS, 2021.
[68] Panagiotis Charalampopoulos, Solon P. Pissis, Jakub Radoszewski, Tomasz Waleń, and Wiktor Zuba. Unary Words Have the Smallest Levenshtein k-Neighbourhoods. In 31st Annual Symposium on Combinatorial Pattern Matching, CPM, 2020.
[69] Spark Tsao. Faster and More Accurate Malware Detection Through Predictive Machine Learning, November 2019. URL https://www.trendmicro.com/vinfo/pl/security/news/security-technology/faster-and-more-accurate-malware-detection-through-predictive-machine-learning-correlating-static-and-behavioral-features.