Malware Detection on MB-24+ PGD ε=8/255
12.1ASRDART (adv)
Evaluation Results
| Method | Links | |
|---|---|---|
| DART (adv)Training Perturbation Budget (ε)=8/255, Cost (h)=0.90±0.022026.04 | 12.1 | |
| DART (kl)Training Perturbation Budget (ε)=8/255, Cost (h)=1.08±0.022026.04 | 15.6 | |
| DART (adv)Training Perturbation Budget (ε)=2/255, Cost (h)=0.90±0.022026.04 | 75.9 | |
| DART (clean)Training Perturbation Budget (ε)=8/255, Cost (h)=0.71±0.022026.04 | 79.5 | |
| DART (kl)Training Perturbation Budget (ε)=2/255, Cost (h)=1.08±0.022026.04 | 86.7 | |
| DART (clean)Training Perturbation Budget (ε)=2/255, Cost (h)=0.71±0.022026.04 | 99.9 | |
| AdvDA (no defense)Cost (h)=0.24±0.012026.04 | 100 | |
| MalGuise (clean)Cost (h)=0.76±0.022026.04 | 100 | |
| MalGuise (adv)Cost (h)=18.40±1.962026.04 | 100 |