Building an Adversarial Malware Dataset by Family and Type: Generation, Evasion, and Poisoning Evaluation

David Košťál, Martin Jureček
5/25/2026
cs.CRcs.LG

No confident code implementation found for this paper.

Abstract

We present a dataset of adversarial malware samples derived from the public RawMal-TF collection of real-world malware binaries. Using a suite of adversarial malware generators, we construct two sets of adversarial PE files: 44,347 family-labelled samples and 33,596 type-labelled samples, achieving evasion rates of 98.35 % and 92.20 % against the EMBER classifier, respectively. Each adversarial binary is accompanied by detailed metadata, including EMBER scores and VirusTotal classifications. We further demonstrate the susceptibility of malware classification pipelines to data poisoning attacks through a series of training experiments. Injecting fully mislabelled adversarial samples representing only 0.5 % of the training data in the family-labelled dataset increases the evasion rate against the re-trained classifier from 26.1 % to 92.8 %. The dataset is publicly released to facilitate future research on adversarial malware, poisoning attacks, and the robustness of machine-learning-based malware detection systems.

View on arXivView PDF

Code Implementations

No confident code match yet

We couldn't find an author-owned or strongly-evidenced community implementation for this paper. Any repos shown below are weak matches — verify before relying on them.

No code implementations found yet.

Know of an implementation? Let us know in the comments below!

Similar Papers

A Comparison of Adversarial Learning Techniques for Malware Detection

89% match2023

Combining Generators of Adversarial Malware Examples to Increase Evasion Rate

88% match1 repo52023

MalPurifier: Enhancing Android Malware Detection with Adversarial Purification against Evasion Attacks

87% match1 repo322023

The Power of MEME: Adversarial Malware Creation with Model-Based Reinforcement Learning

87% match1 repo62023

Decoding the Secrets of Machine Learning in Malware Classification: A Deep Dive into Datasets, Feature Extraction, and Model Performance

86% match1 repo182023

LLM-Driven Feature-Level Adversarial Attacks on Android Malware Detectors

86% match2025

Cite this paper

@article{kol2026building,
  title  = {Building an Adversarial Malware Dataset by Family and Type: Generation, Evasion, and Poisoning Evaluation},
  author = {David Košťál and Martin Jureček},
  year   = {2026},
  eprint = {2605.25937},
  archivePrefix = {arXiv},
  url    = {http://arxiv.org/abs/2605.25937v1}
}

Add a badge to your README

Shows whether official code is linked for this paper.

Code of Paper badge
[![Code of Paper](https://codeofpaper.com/badge/2605.25937.svg)](https://codeofpaper.com/paper/2605.25937)

Discussion