# Defending Malware Classification Networks Against Adversarial Perturbations with Non-Negative Weight Restrictions

Source: [Defending Malware Classification Networks Against Adversarial Perturbations with Non-Negative Weight Restrictions](<https://www.sota2.com/research/paper/68fa647f1e209131cea04dca>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2025-10-25T21:05:03.439Z

Authors: Alex Kouzemtchenko

Published: 2018-06-23T20:46:06.000Z

## Abstract

There is a growing body of literature showing that deep neural networks are vulnerable to adversarial input modification. Recently this work has been extended from image classification to malware classification over boolean features. In this paper we present several new methods for training restricted networks in this specific domain that are highly effective at preventing adversarial perturbations. We start with a fully adversarially resistant neural network that has hard non-negative weight restrictions and is equivalent to learning a monotonic boolean function and then attempt to relax the constraints to improve classifier accuracy.

## Recorded benchmark results

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

## Original sources and implementation

[Original paper](<https://arxiv.org/abs/1806.09035>)

[PDF](<https://arxiv.org/pdf/1806.09035.pdf>)