SOURCE-LINKED INTELLIGENCE

REPLICANT: Learning Policies for Evading and Hardening Malware Detectors

arXiv · AI, language, vision and robotics · article · Aug 28, 2026 · UTC

To determine the real-world effectiveness of machine learning based malware detection, it is vital to evaluate its robustness against highly capable adversaries. However, state-of-the-art attacks do not effectively model realistic adversaries, as they often assume access to privileged information such as the training data, feature space, or confidence scores of the target. In this work, we present Replicant, a deep reinforcement learning framework that learns the realistic task of evasion under a strict label-only black-box threat model. Replicant learns a reusable policy on how to modify a ma

Read original source ↗ Open in workspace

recordType

paper

region

Global