Attacker’s Goal Sample Clauses

Attacker’s Goal. The attacker’s goal is to generate adversarial examples to evade a malware detection classifier. Suppose we have a classifier F, where F : X ∈ {0, 1}M and a function checkF unctionality() to check the functionality of an input sample. Then, this goal can be summarized as: checkF unctionality(X) = checkF unctionality(X′); F(X) = 1; F(X′) = 0 (3.1) In other words, the attacker wants to generate an adversarial example X′ that is functionally-equivalent to the original malware sample X, but is predicted as benign by F. Recall that we use 0 to represent the benign class and 1 for the malware class.‌