Jigsaw Puzzle: Selective Backdoor Attack to Subvert Malware Classifiers. (arXiv:2202.05470v1 [cs.CR])

Malware classifiers are subject to training-time exploitation due to the need
to regularly retrain using samples collected from the wild. Recent work has
demonstrated the feasibility of backdoor attacks against malware classifiers,
and yet the stealthiness of such attacks is not well understood. In this paper,
we investigate this phenomenon under the clean-label setting (i.e., attackers
do not have complete control over the training or labeling process).
Empirically, we show that existing backdoor attacks in malware classifiers are
still detectable …

arxiv jigsaw puzzle