Demonstration venue · read-only. Every page can be browsed; the buttons that would change it are switched off. Create an account to run TaxoReview on your own data. A simulation from public publication records: the people listed were not invited and did not agree to review.
? Tutorial for this page

Yayuan Zhang

dblp:231/3981 · DBLP profile ↗
← Back
1ranked-venue papers
0as first author
1since 2021 · last 2025
—ORCID · unresolved

Domains — the database's venue-derived domains; a paper can count in several

Artificial intelligence and machine learning · 1 · 1 since 2021Graphics, computer vision, multimedia, augmented reality and games · 1 · 1 since 2021

Expertise — from the expertise taxonomy: the topics of the expert's papers under the CCF categories. A weight counts papers with recency: 1 for a paper about the topic, 0.3 when the topic is its context, halved every five years.

Network and information security
1 paper
Security and privacy of machine learning · 67% Malware analysis · 33%

Topics — the 3 heaviest of 3, each with the papers that count most for it

TopicWeightPapersLastEvidence papers
Security and privacy of machine learning
adversarial attack
0.912025
MiniMal: Hard-Label Adversarial Attack Against Static Malware Detection with Minimal Perturbation · IJCAI 2025
Security and privacy of machine learning › adversarial attack › textual adversarial attack
hard-label black-box attack
0.912025
MiniMal: Hard-Label Adversarial Attack Against Static Malware Detection with Minimal Perturbation · IJCAI 2025
Malware analysis › malware detection
static malware detection
0.912025
MiniMal: Hard-Label Adversarial Attack Against Static Malware Detection with Minimal Perturbation · IJCAI 2025

Methods — techniques the papers use, named apart from their topics

particle swarm optimization · 0.9control flow graph comparison · 0.9binary search · 0.9
YearPublicationVenuePosition
2025 MiniMal: Hard-Label Adversarial Attack Against Static Malware Detection with Minimal Perturbation
abstract
Static malware detectors based on machine learning are integral to contemporary antivirus systems, but they are vulnerable to adversarial attacks. While existing research has demonstrated success with adversarial attacks in black-box hard-label scenarios, challenges such as high perturbation rates and incomplete retention of functional integrity remain. To address these issues, we propose a novel black-box hard-label attack method, MiniMal. MiniMal begins with initialized adversarial examples and utilizes binary search and particle swarm optimization algorithms to streamline the perturbation content, significantly reducing the perturbation rate of the adversarial examples. Furthermore, we propose a functionality verification method grounded in file format parsing and control flow graph comparisons to ensure the functional integrity of the adversarial examples. Experimental results indicate that MiniMal achieves an attack success rate of over 98% against three leading machine learning detectors, improving performance by approximately 4.8% to 7.1% compared to state-of-the-art methods. MiniMal reduces perturbation rates to below 40%, making them 9 to 11 times lower than those of previous methods. Additionally, functional verification via Cuckoo Sandbox revealed that the adversarial examples generated by MiniMal retained 100% functional integrity, even with various modifications applied.
Chengyi Li, Zhiyuan Jiang, Yayuan Zhang, Yuhang Mao
IJCAI5