{"authors":[{"id":"orcid_______::8c67f6b4f01c9f6aaa92918d5a46ff52","fullName":"Marco Rando","name":null,"surname":null,"rank":1,"pid":{"id":{"scheme":"orcid","value":"0009-0008-3839-1429"},"provenance":null}},{"id":"orcid_______::9d20a81354bf3bd785d6189bc73fa3cd","fullName":"Luca Demetrio","name":null,"surname":null,"rank":2,"pid":{"id":{"scheme":"orcid","value":"0000-0001-5104-1476"},"provenance":null}},{"id":null,"fullName":"Lorenzo Rosasco","name":null,"surname":null,"rank":3,"pid":{"id":{"scheme":"orcid_pending","value":"0000-0003-3098-383x"},"provenance":null}},{"id":"orcid_______::8c8ac3b95372eb225ccc3e3bd65a4fb3","fullName":"Fabio Roli","name":null,"surname":null,"rank":4,"pid":{"id":{"scheme":"orcid","value":"0000-0003-4103-9190"},"provenance":null}}],"openAccessColor":null,"publiclyFunded":false,"eoscIfGuidelines":null,"type":"publication","language":{"code":"und","label":"Undetermined"},"countries":[{"code":"IT","label":"Italy","provenance":null}],"subjects":[{"subject":{"scheme":"keyword","value":"Machine Learning"},"provenance":null},{"subject":{"scheme":"keyword","value":"FOS: Computer and information sciences"},"provenance":null},{"subject":{"scheme":"keyword","value":"Adversarial Machine Learning; Malware Detection; Security Evaluations; Zeroth-Order Optimization"},"provenance":null},{"subject":{"scheme":"FOS","value":"0202 electrical engineering, electronic engineering, information engineering"},"provenance":null},{"subject":{"scheme":"FOS","value":"02 engineering and technology"},"provenance":null},{"subject":{"scheme":"keyword","value":"Machine Learning (cs.LG)"},"provenance":null}],"mainTitle":"A New Formulation for Zeroth-Order Optimization of Adversarial EXEmples in Malware Detection","subTitle":null,"descriptions":["Machine learning malware detectors are vulnerable to adversarial EXEmples, i.e., carefully-crafted Windows programs tailored to evade detection. Unlike other adversarial problems, attacks in this context must be functionality-preserving, a constraint that is challenging to address. As a consequence, heuristic algorithms are typically used, which inject new content, either randomly-picked or harvested from legitimate programs. In this paper, we show how learning malware detectors can be cast within a zeroth-order optimization framework, which allows incorporating functionality-preserving manipulations. This permits the deployment of sound and efficient gradient-free optimization algorithms, which come with theoretical guarantees and allow for minimal hyper-parameters tuning. As a by-product, we propose and study ZEXE, a novel zeroth-order attack against Windows malware detection. Compared to state-of-the-art techniques, ZEXE provides improvement in the evasion rate, reducing to less than one third the size of the injected content.","17 pages, 6 tables"],"publicationDate":"2026-01-01","publisher":"Institute of Electrical and Electronics Engineers (IEEE)","embargoEndDate":"2024-05-01","sources":["Crossref","IEEE Transactions on Information Forensics and Security"],"formats":null,"contributors":null,"coverages":null,"bestAccessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/"},"container":{"name":"IEEE Transactions on Information Forensics and Security","issnPrinted":"1556-6013","issnOnline":"1556-6021","issnLinking":null,"ep":"515","iss":null,"sp":"506","vol":"21","edition":null,"conferencePlace":null,"conferenceDate":null},"documentationUrls":null,"codeRepositoryUrl":null,"programmingLanguage":null,"contactPeople":null,"contactGroups":null,"tools":null,"size":null,"version":null,"geoLocations":null,"id":"doi_dedup___::1234f6f06e6b16ffe5cf1eb36eb7604a","originalIds":["10.1109/tifs.2025.3648867","50|doiboost____|7e779a232c1b7d2e296acacc5830187e","50|datacite____::1234f6f06e6b16ffe5cf1eb36eb7604a","10.48550/arxiv.2405.14519","oai:arXiv.org:2405.14519","50|od________18::6ff30323edf573ad48a9cc7149c9a21d","50|dblp________::2a151366bcad19c3c8115767fd16f61d","50|dblp________::c201e424f8725c7ca680dedb702b8316","50|od______3710::abacb84813349604b729d013dd83c90c","oai:unige.iris.cineca.it:11567/1282696","50|r3c4b2081b22::7e779a232c1b7d2e296acacc5830187e","50|r3c4b2081b22::d671124f510337745d7e8dd12ecf6f86","10.48550/ARXIV.2405.14519","50|sygma_______::7e779a232c1b7d2e296acacc5830187e"],"pids":[{"scheme":"doi","value":"10.1109/tifs.2025.3648867"},{"scheme":"doi","value":"10.48550/arxiv.2405.14519"},{"scheme":"arXiv","value":"2405.14519"},{"scheme":"handle","value":"11567/1282696"}],"dateOfCollection":null,"lastUpdateTimeStamp":null,"indicators":{"citationImpact":{"citationCount":0.0,"influence":2.2251732E-9,"popularity":2.7165745E-9,"impulse":0.0,"citationClass":"C5","influenceClass":"C5","impulseClass":"C5","popularityClass":"C5"}},"projects":[{"id":"corda_____he::bc62cf9ec83e55f81eb4bf9b1676a450","code":"101120237","acronym":"ELIAS","title":"European Lighthouse of AI for Sustainability","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/101120237"}]},{"id":"corda__h2020::9664fa751718bff0a4cf6c6d57971b05","code":"819789","acronym":"SLING","title":"Efficient algorithms for sustainable machine learning","funder":"European Commission","pids":[{"scheme":"doi","value":"10.3030/819789"}]},{"id":"nsf_________::5749eb113b5f6f7651c468c1ebada596","code":"1231216","acronym":null,"title":"A Center for Brains, Minds and Machines: the Science and the Technology of Intelligence","funder":"National Science Foundation","pids":null}],"organizations":[{"legalName":"University of Geneva","acronym":"UNIGE","id":"openorgs____::322ff2a6524820640bc5d1311871585e","pids":[{"scheme":"FundRef","value":"501100020971"},{"scheme":"wikidata","value":"Q503473"},{"scheme":"ISNI","value":"0000000123224988"},{"scheme":"Wikidata","value":"Q503473"},{"scheme":"PIC","value":"999974650"},{"scheme":"mag_id","value":"114457229"},{"scheme":"GRID","value":"grid.8591.5"},{"scheme":"fundref","value":"501100006389"},{"scheme":"OrgRef","value":"47003041"},{"scheme":"fundref","value":"501100020971"},{"scheme":"ISNI","value":"0000000121752154"},{"scheme":"ROR","value":"https://ror.org/01swzsf04"},{"scheme":"OrgRef","value":"342348"},{"scheme":"OrgReg","value":"CH0004"},{"scheme":"FundRef","value":"501100006389"}]},{"legalName":"UNIVERSITY OF GENEVA","acronym":null,"id":"nih_________::3044125116b99b2937f9e581efe6aa5f","pids":null},{"legalName":"French National Centre for Scientific Research","acronym":"CNRS","id":"openorgs____::7fbdf9cd4423c4604745a16afe728bc7","pids":[{"scheme":"FundRef","value":"501100004794"},{"scheme":"Wikidata","value":"Q39411466"},{"scheme":"fundref","value":"501100004794"},{"scheme":"wikidata","value":"Q280413"},{"scheme":"Wikidata","value":"Q280413"},{"scheme":"ROR","value":"https://ror.org/02feahw73"},{"scheme":"ISNI","value":"0000000121129282"},{"scheme":"ISNI","value":"0000000122597504"},{"scheme":"wikidata","value":"Q39411466"},{"scheme":"OrgRef","value":"144610"},{"scheme":"GRID","value":"grid.4444.0"}]},{"legalName":"University of Genoa","acronym":"UniGe","id":"openorgs____::53df715e03d652944df3d336afe1181a","pids":[{"scheme":"PIC","value":"999976687"},{"scheme":"OrgReg","value":"IT0028"},{"scheme":"ISNI","value":"0000000121513065"},{"scheme":"Wikidata","value":"Q593321"},{"scheme":"ROR","value":"https://ror.org/0107c5v14"},{"scheme":"FundRef","value":"501100004702"},{"scheme":"mag_id","value":"83816512"},{"scheme":"fundref","value":"501100004702"},{"scheme":"wikidata","value":"Q593321"},{"scheme":"GRID","value":"grid.5606.5"},{"scheme":"OrgRef","value":"456119"}]},{"legalName":"Massachusetts Institute of Technology","acronym":"MIT","id":"openorgs____::8924df083daef755c7e64b207514a5ad","pids":[{"scheme":"FundRef","value":"100019800"},{"scheme":"fundref","value":"100019800"},{"scheme":"fundref","value":"100012631"},{"scheme":"fundref","value":"100007187"},{"scheme":"FundRef","value":"100020637"},{"scheme":"wikidata","value":"Q49108"},{"scheme":"FundRef","value":"100006919"},{"scheme":"FundRef","value":"100012631"},{"scheme":"FundRef","value":"100014580"},{"scheme":"Wikidata","value":"Q49108"},{"scheme":"RRID","value":"RRID:nlx_32884"},{"scheme":"PIC","value":"998096827"},{"scheme":"fundref","value":"100013439"},{"scheme":"ROR","value":"https://ror.org/042nb2s44"},{"scheme":"FundRef","value":"100012519"},{"scheme":"OrgRef","value":"18879"},{"scheme":"RRID","value":"RRID:SCR_000977"},{"scheme":"fundref","value":"100020637"},{"scheme":"FundRef","value":"100013439"},{"scheme":"FundRef","value":"100012741"},{"scheme":"FundRef","value":"100007187"},{"scheme":"fundref","value":"100006919"},{"scheme":"FundRef","value":"100005781"},{"scheme":"mag_id","value":"63966007"},{"scheme":"fundref","value":"100006507"},{"scheme":"GRID","value":"grid.116068.8"},{"scheme":"fundref","value":"100012741"},{"scheme":"FundRef","value":"100006507"},{"scheme":"fundref","value":"100012519"},{"scheme":"fundref","value":"100005781"},{"scheme":"fundref","value":"100014580"},{"scheme":"ISNI","value":"0000000123412786"}]},{"legalName":"Université Côte d'Azur","acronym":"UCA","id":"openorgs____::8b6e6d0d54aabca98cd7b4cf62ae190e","pids":[{"scheme":"wikidata","value":"Q19370961"},{"scheme":"fundref","value":"501100013371"},{"scheme":"OrgRef","value":"47001065"},{"scheme":"Wikidata","value":"Q19370961"},{"scheme":"FundRef","value":"501100013371"},{"scheme":"ISNI","value":"0000000449106551"},{"scheme":"GRID","value":"grid.460782.f"},{"scheme":"ROR","value":"https://ror.org/019tgvf94"}]},{"legalName":"University of Geneva","acronym":"University of Geneva","id":"pending_org_::baa275bcfa0edc2d64165418493c5095","pids":null}],"communities":null,"collectedFrom":[{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"},{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"},{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"},{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"},{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"},{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}],"instances":[{"pids":[{"scheme":"doi","value":"10.1109/tifs.2025.3648867"}],"license":"IEEE Copyright","accessRight":{"code":"c_14cb","label":"CLOSED","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1109/tifs.2025.3648867"],"publicationDate":"2026-01-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::0dcb0a14d03dff2915d2254c5fc77c10","value":"IEEE Transactions on Information Forensics and Security"},"collectedFrom":{"key":"openaire____::081b82f96300b6a6e3d282bad31cb6e2","value":"Crossref"}},{"pids":[{"scheme":"doi","value":"10.48550/arxiv.2405.14519"}],"license":"arXiv Non-Exclusive Distribution","type":"Article","urls":["https://dx.doi.org/10.48550/arxiv.2405.14519"],"publicationDate":"2024-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::55045bd2a65019fd8e6741a755395c8c","value":"Unknown Repository"},"collectedFrom":{"key":"openaire____::9e3be59865b2c1c335d32dae2fe7b254","value":"Datacite"}},{"pids":[{"scheme":"arXiv","value":"2405.14519"}],"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/tifs.2025.3648867"}],"accessRight":{"code":"c_abf2","label":"OPEN","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Preprint","urls":["http://arxiv.org/abs/2405.14519"],"publicationDate":"2024-05-23","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"},"collectedFrom":{"key":"opendoar____::6f4922f45568161a8cdf4ad2299f6d23","value":"arXiv.org e-Print Archive"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.48550/arxiv.2405.14519"}],"type":"Preprint","urls":["https://doi.org/10.48550/arXiv.2405.14519"],"publicationDate":"2024-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/tifs.2025.3648867"}],"type":"Article","urls":["https://doi.org/10.1109/TIFS.2025.3648867"],"publicationDate":"2026-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"},"collectedFrom":{"key":"openaire____::d8b68cc0a53121f6f896883a7d60c1db","value":"DBLP"}},{"pids":[{"scheme":"handle","value":"11567/1282696"}],"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/tifs.2025.3648867"},{"scheme":"urn","value":"2-s2.0-105025747295"}],"accessRight":{"code":"c_14cb","label":"CLOSED","scheme":"http://vocabularies.coar-repositories.org/documentation/access_rights/","openAccessRoute":null},"type":"Article","urls":["https://doi.org/10.1109/TIFS.2025.3648867","https://hdl.handle.net/11567/1282696"],"publicationDate":"2025-01-01","refereed":"nonPeerReviewed","hostedBy":{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"},"collectedFrom":{"key":"opendoar____::5505712229fb1eb500efadddc0353264","value":"Archivio istituzionale della ricerca - Università di Genova"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/tifs.2025.3648867"}],"type":"Article","urls":["http://dx.doi.org/10.1109/tifs.2025.3648867"],"publicationDate":"2026-01-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::0dcb0a14d03dff2915d2254c5fc77c10","value":"IEEE Transactions on Information Forensics and Security"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.48550/arxiv.2405.14519"}],"type":"Article","urls":["http://dx.doi.org/10.48550/ARXIV.2405.14519"],"publicationDate":"2025-01-01","refereed":"peerReviewed","hostedBy":{"key":"issn___print::0dcb0a14d03dff2915d2254c5fc77c10","value":"IEEE Transactions on Information Forensics and Security"},"collectedFrom":{"key":"re3data_____::c4b2081b224be6b3e79d0e5e5556f631","value":"European Union Open Data Portal"}},{"alternateIdentifiers":[{"scheme":"doi","value":"10.1109/tifs.2025.3648867"}],"license":"IEEE Copyright","type":"Article","urls":["http://dx.doi.org/10.1109/tifs.2025.3648867"],"refereed":"nonPeerReviewed","hostedBy":{"key":"issn___print::0dcb0a14d03dff2915d2254c5fc77c10","value":"IEEE Transactions on Information Forensics and Security"},"collectedFrom":{"key":"openaire____::a8db6f6b2ce4fe72e8b2314a9a93e7d9","value":"Sygma"}}],"links":[{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda_____he::bc62cf9ec83e55f81eb4bf9b1676a450","relatedRecordType":"project","relationProvenance":"iis","trust":"0.897"},"collectedfrom":[{"dsId":"openaire____::3f264f93cf3b0cfc4ede188a6300455c","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon Europe"}],"projectTitle":"European Lighthouse of AI for Sustainability","code":"101120237","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::HE","description":"Horizon Europe Framework Programme","name":"HE"},"level1":{"id":"ec__________::EC::HE::HORIZON-RIA","description":"HORIZON  Research and Innovation Actions","name":"HORIZON-RIA"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2023-09-01","endDate":"2027-08-31"},{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"corda__h2020::9664fa751718bff0a4cf6c6d57971b05","relatedRecordType":"project","relationProvenance":"sysimport:crosswalk","trust":"0.9"},"collectedfrom":[{"dsId":"openaire____::a55eb91348674d853191f4f4fd73d078","dsName":"CORDA - COmmon Research DAta Warehouse - Horizon 2020"}],"projectTitle":"Efficient algorithms for sustainable machine learning","code":"819789","funding":{"funder":{"id":"ec__________::EC","shortname":"EC","name":"European Commission","jurisdiction":{"code":"EU","label":"European Union"},"pid":null},"level0":{"id":"ec__________::EC::H2020","description":"Horizon 2020 Framework Programme","name":"H2020"},"level1":{"id":"ec__________::EC::H2020::ERC","description":"European Research Council","name":"ERC"},"level2":{"id":"ec__________::EC::H2020::ERC::ERC-COG","description":"Consolidator Grant","name":"ERC-COG"}},"startDate":"2019-11-01","endDate":"2025-10-31"},{"header":{"relationType":"resultProject","relationClass":"isProducedBy","relatedIdentifier":"nsf_________::5749eb113b5f6f7651c468c1ebada596","relatedRecordType":"project","relationProvenance":"iis","trust":"0.7348"},"collectedfrom":[{"dsId":"openaire____::dd69b4a1513c9de9f46faf24048da1e8","dsName":"NSF - National Science Foundation"}],"projectTitle":"A Center for Brains, Minds and Machines: the Science and the Technology of Intelligence","code":"1231216","funding":{"funder":{"id":"nsf_________::NSF","shortname":"NSF","name":"National Science Foundation","jurisdiction":{"code":"US","label":"United States"},"pid":null},"level0":{"id":"nsf_________::NSF::CISE/OAD","description":"Directorate for Computer & Information Science & Engineering","name":"Directorate for Computer & Information Science & Engineering"},"level1":{"id":"nsf_________::NSF::CISE/OAD::CISE/CCF","description":"Division of Computing and Communication Foundations","name":"Division of Computing and Communication Foundations"},"level2":{"id":null,"description":null,"name":null}},"startDate":"2013-09-01","endDate":"2018-08-31"}],"otherTitles":null,"inDiamondJournal":false,"green":true,"isGreen":true,"isInDiamondJournal":false}