Malware Detection on Drebin
100AccuracyMalPurifier
Evaluation Results
| Method | Links | |||||||
|---|---|---|---|---|---|---|---|---|
| MalPurifierAttack=Salt & Pepper2023.12 | 100 | — | — | — | — | — | — | |
| FD-VAEAttack=Salt & Pepper2023.12 | 100 | — | — | — | — | — | — | |
| PAD-SMAAttack=Salt & Pepper2023.12 | 100 | — | — | — | — | — | — | |
| MalPurifierAttack=Salt & Pepper2023.12 | 100 | — | — | — | — | — | — | |
| MalPurifierAttack=Pointwise2023.12 | 100 | — | — | — | — | — | — | |
| MalPurifierAttack=PGD-ℓ12023.12 | 99.72 | — | — | — | — | — | — | |
| MalPurifierAttack=Pointwise2023.12 | 99.72 | — | — | — | — | — | — | |
| AT-AdamAttack=Salt & Pepper2023.12 | 99.07 | — | — | — | — | — | — | |
| DNNTraining time (s)=5922023.12 | 98.72 | — | — | 93.58 | 0.51 | 8.07 | 95.71 | |
| DNN+Training time (s)=15592023.12 | 98.72 | — | — | 93.6 | 0.54 | 7.79 | 95.83 | |
| VGAE-MalGANBenign/Malware APKs=50,901/5,6002025.12 | 98.68 | 95.27 | 91.08 | 93.13 | — | — | — | |
| KDETraining time (s)=5922023.12 | 98.67 | — | — | 93.53 | 0.53 | 8.1 | 95.68 | |
| AT-rFGSM^kAttack=Salt & Pepper2023.12 | 97.96 | — | — | — | — | — | — | |
| PAD-SMATraining time (s)=216272023.12 | 97.87 | — | — | 89.93 | 1.7 | 5.94 | 96.18 | |
| AT-rFGSMkTraining time (s)=6162023.12 | 97.33 | — | — | 87.77 | 2.35 | 5.47 | 96.09 | |
| MalPurifierTraining time (s)=7502023.12 | 97 | — | — | 86.23 | 2.55 | 7.05 | 95.2 | |
| MalPurifierAttack=AutoAttack2023.12 | 96.94 | — | — | — | — | — | — | |
| MalPurifierAttack=AutoAttack2023.12 | 96.94 | — | — | — | — | — | — | |
| MalPurifierAttack=MaxMA2023.12 | 96.66 | — | — | — | — | — | — | |
| MalPurifierAttack=iMaxMA2023.12 | 96.66 | — | — | — | — | — | — | |
| MalPurifierAttack=StepwiseMA2023.12 | 96.66 | — | — | — | — | — | — | |
| FD-VAETraining time (s)=10212023.12 | 96.62 | — | — | 82.12 | 1.14 | 23.3 | 87.79 | |
| Zhang et al. (2019)Benign/Malware APKs=5,900/5,6002025.12 | 96 | 90.07 | 95 | 96 | — | — | — | |
| Bai et al. (2020)Benign/Malware APKs=5,900/5,5602025.12 | 96 | 97 | 95 | 96 | — | — | — | |
| AT-AdamTraining time (s)=13412023.12 | 95.84 | — | — | 82.14 | 4.01 | 5.47 | 95.26 | |
| PAD-SMAAttack=Salt & Pepper2023.12 | 95.55 | — | — | — | — | — | — | |
| MalPurifierAttack=rFGSM2023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=PGD-ℓ22023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=PGD-ℓ∞2023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=MaxMA2023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=iMaxMA2023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=StepwiseMA2023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=Orth PGD-ℓ12023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=Orth PGD-ℓ22023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=Orth PGD-ℓ∞2023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=Orth MaxMA2023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=Orth iMaxMA2023.12 | 95.08 | — | — | — | — | — | — | |
| MalPurifierAttack=No Attack2023.12 | 95.08 | — | — | — | — | — | — | |
| AT-AdamAttack=Pointwise2023.12 | 94.53 | — | — | — | — | — | — | |
| AT-rFGSM^kAttack=Pointwise2023.12 | 94.43 | — | — | — | — | — | — | |
| PAD-SMAAttack=rFGSM2023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=PGD-ℓ∞2023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=Orth PGD-ℓ12023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=Orth PGD-ℓ22023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=Orth PGD-ℓ∞2023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=Orth MaxMA2023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=Orth iMaxMA2023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=MaxMA2023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=iMaxMA2023.12 | 94.25 | — | — | — | — | — | — | |
| PAD-SMAAttack=No Attack2023.12 | 94.06 | — | — | — | — | — | — | |
| PAD-SMAAttack=AutoAttack2023.12 | 93.69 | — | — | — | — | — | — | |
| PAD-SMAAttack=AutoAttack2023.12 | 93.69 | — | — | — | — | — | — | |
| John, T. et al. (2021)Benign/Malware APKs=1410/7202025.12 | 92.3 | 91.5 | 93.3 | 92.3 | — | — | — | |
| AT-AdamAttack=PGD-ℓ∞2023.12 | 92.3 | — | — | — | — | — | — | |
| PAD-SMAAttack=PGD-ℓ22023.12 | 92.3 | — | — | — | — | — | — | |
| DNN+Attack=No Attack2023.12 | 92.21 | — | — | — | — | — | — | |
| KDEAttack=rFGSM2023.12 | 91.93 | — | — | — | — | — | — | |
| KDEAttack=PGD-ℓ∞2023.12 | 91.93 | — | — | — | — | — | — | |
| KDEAttack=No Attack2023.12 | 91.93 | — | — | — | — | — | — | |
| KDEAttack=MaxMA2023.12 | 91.93 | — | — | — | — | — | — | |
| KDEAttack=iMaxMA2023.12 | 91.93 | — | — | — | — | — | — | |
| MalPurifierAttack=BCA2023.12 | 90.91 | — | — | — | — | — | — | |
| MalPurifierAttack=Grosse2023.12 | 90.91 | — | — | — | — | — | — | |
| KDEAttack=Orth PGD-ℓ∞2023.12 | 89.98 | — | — | — | — | — | — | |
| PAD-SMAAttack=Pointwise2023.12 | 89.7 | — | — | — | — | — | — | |
| PAD-SMAAttack=StepwiseMA2023.12 | 89.05 | — | — | — | — | — | — | |
| PAD-SMAAttack=StepwiseMA2023.12 | 88.22 | — | — | — | — | — | — | |
| PAD-SMAAttack=Pointwise2023.12 | 87.65 | — | — | — | — | — | — | |
| AT-AdamAttack=PGD-ℓ22023.12 | 86.74 | — | — | — | — | — | — | |
| AT-AdamAttack=rFGSM2023.12 | 85.81 | — | — | — | — | — | — | |
| KDEAttack=AutoAttack2023.12 | 82.93 | — | — | — | — | — | — | |
| KDEAttack=AutoAttack2023.12 | 82.93 | — | — | — | — | — | — | |
| DNN+Attack=AutoAttack2023.12 | 81.35 | — | — | — | — | — | — | |
| DNN+Attack=AutoAttack2023.12 | 81.35 | — | — | — | — | — | — | |
| FD-VAEAttack=Salt & Pepper2023.12 | 80.43 | — | — | — | — | — | — | |
| PAD-SMAAttack=BCA2023.12 | 80.15 | — | — | — | — | — | — | |
| PAD-SMAAttack=Grosse2023.12 | 78.76 | — | — | — | — | — | — | |
| AT-rFGSM^kAttack=AutoAttack2023.12 | 78.39 | — | — | — | — | — | — | |
| PAD-SMAAttack=PGD-ℓ12023.12 | 77.83 | — | — | — | — | — | — | |
| PAD-SMAAttack=iMaxMA2023.12 | 77.83 | — | — | — | — | — | — | |
| PAD-SMAAttack=MaxMA2023.12 | 77.37 | — | — | — | — | — | — | |
| FD-VAEAttack=PGD-ℓ∞2023.12 | 75.97 | — | — | — | — | — | — | |
| FD-VAEAttack=rFGSM2023.12 | 74.4 | — | — | — | — | — | — | |
| FD-VAEAttack=No Attack2023.12 | 73.19 | — | — | — | — | — | — | |
| AT-AdamAttack=AutoAttack2023.12 | 71.71 | — | — | — | — | — | — | |
| FD-VAEAttack=Pointwise2023.12 | 69.46 | — | — | — | — | — | — | |
| FD-VAEAttack=Pointwise2023.12 | 67.97 | — | — | — | — | — | — | |
| KDEAttack=PGD-ℓ22023.12 | 62.06 | — | — | — | — | — | — | |
| DNN+Attack=rFGSM2023.12 | 59.46 | — | — | — | — | — | — | |
| FD-VAEAttack=MaxMA2023.12 | 58.63 | — | — | — | — | — | — | |
| FD-VAEAttack=iMaxMA2023.12 | 58.63 | — | — | — | — | — | — | |
| FD-VAEAttack=Orth PGD-ℓ∞2023.12 | 55.29 | — | — | — | — | — | — | |
| DNN+Attack=PGD-ℓ∞2023.12 | 51.67 | — | — | — | — | — | — | |
| DNN+Attack=Orth PGD-ℓ∞2023.12 | 46.01 | — | — | — | — | — | — | |
| AT-AdamAttack=MaxMA2023.12 | 45.83 | — | — | — | — | — | — | |
| AT-AdamAttack=iMaxMA2023.12 | 45.83 | — | — | — | — | — | — | |
| AT-AdamAttack=StepwiseMA2023.12 | 45.55 | — | — | — | — | — | — | |
| FD-VAEAttack=AutoAttack2023.12 | 42.3 | — | — | — | — | — | — | |
| FD-VAEAttack=AutoAttack2023.12 | 42.3 | — | — | — | — | — | — | |
| AT-AdamAttack=BCA2023.12 | 42.21 | — | — | — | — | — | — |