Demo Data from EDBT 2026 / reviewers in the wild / expert
Yayuan Zhang
dblp:231/3981
· DBLP profile ↗
1ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · unresolved
Domains — the database's venue-derived domains; a paper can count in several
Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021
Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.
| Network and information security
1 paper |
Security and privacy of machine learning · 67% Malware analysis · 33% |
Topics — the 3 heaviest of 3, each with the papers that count most for it
| Topic | Weight | Papers | Last | Evidence papers |
|---|---|---|---|---|
Security and privacy of machine learning
adversarial attack |
0.9 | 1 | 2025 | MiniMal: Hard-Label Adversarial Attack Against Static Malware Detection with Minimal Perturbation · IJCAI 2025 |
Security and privacy of machine learning › adversarial attack › textual adversarial attack
hard-label black-box attack |
0.9 | 1 | 2025 | MiniMal: Hard-Label Adversarial Attack Against Static Malware Detection with Minimal Perturbation · IJCAI 2025 |
Malware analysis › malware detection
static malware detection |
0.9 | 1 | 2025 | MiniMal: Hard-Label Adversarial Attack Against Static Malware Detection with Minimal Perturbation · IJCAI 2025 |
Methods — techniques the papers use, named apart from their topics
particle swarm optimization · 0.9control flow graph comparison · 0.9binary search · 0.9
| Year | Publication | Venue | Position |
|---|---|---|---|
| 2025 | MiniMal: Hard-Label Adversarial Attack Against Static Malware Detection with Minimal PerturbationabstractStatic malware detectors based on machine learning are integral to contemporary antivirus systems, but they are vulnerable to adversarial attacks. While existing research has demonstrated success with adversarial attacks in black-box hard-label scenarios, challenges such as high perturbation rates and incomplete retention of functional integrity remain. To address these issues, we propose a novel black-box hard-label attack method, MiniMal. MiniMal begins with initialized adversarial examples and utilizes binary search and particle swarm optimization algorithms to streamline the perturbation content, significantly reducing the perturbation rate of the adversarial examples. Furthermore, we propose a functionality verification method grounded in file format parsing and control flow graph comparisons to ensure the functional integrity of the adversarial examples. Experimental results indicate that MiniMal achieves an attack success rate of over 98% against three leading machine learning detectors, improving performance by approximately 4.8% to 7.1% compared to state-of-the-art methods. MiniMal reduces perturbation rates to below 40%, making them 9 to 11 times lower than those of previous methods. Additionally, functional verification via Cuckoo Sandbox revealed that the adversarial examples generated by MiniMal retained 100% functional integrity, even with various modifications applied. Chengyi Li, Zhiyuan Jiang, Yayuan Zhang, Yuhang Mao |
IJCAI | 5 |