Instruct: Identify the main and secondary category of Arxiv papers based on the titles and abstracts
Query: Enhancing Robustness of Deep Neural Networks Against Adversarial Malware
  Samples: Principles, Framework, and AICS'2019 Challenge   Malware continues to be a major cyber threat, despite the tremendous effort
that has been made to combat them. The number of malware in the wild steadily
increases over time, meaning that we must resort to automated defense
techniques. This naturally calls for machine learning based malware detection.
However, machine learning is known to be vulnerable to adversarial evasion
attacks that manipulate a small number of features to make classifiers wrongly
recognize a malware sample as a benign one. The state-of-the-art is that there
are no effective countermeasures against these attacks. Inspired by the
AICS'2019 Challenge, we systematize a number of principles for enhancing the
robustness of neural networks against adversarial malware evasion attacks. Some
of these principles have been scattered in the literature, but others are
proposed in this paper for the first time. Under the guidance of these
principles, we propose a framework and an accompanying training algorithm,
which are then applied to the AICS'2019 challenge. Our experimental results
have been submitted to the challenge organizer for evaluation.

7
The categories of this paper are: hep-th
23
The categories of this paper are: solv-int
15
The categories of this paper are: nucl-ex
37
The categories of this paper are: supr-con
32
The categories of this paper are: atom-ph
31
The categories of this paper are: ao-sci
24
The categories of this paper are: dg-ga
4
The categories of this paper are: cond-mat
14
The categories of this paper are: math-ph
16
The categories of this paper are: stat
25
The categories of this paper are: patt-sol
3
The categories of this paper are: physics
28
The categories of this paper are: alg-geom
12
The categories of this paper are: nucl-th
19
The categories of this paper are: eess
6
The categories of this paper are: astro-ph