Co-evolving Adversaries for Online Robust Malware Detection

Abstract

Adversarial robustness remains a significant challenge in machine-learning malware detection. We propose a co-evolutionary adversarial training framework that integrates gradient-based adversarial attacks with evolutionary controllers to improve robustness. A hybrid Convolutional Neural Network (CNN-MLP) processes spatial and vector-based features, while evolved controllers adaptively guide Projected Gradient Descent (PGD) using gradient statistics, optimizing adversarial effectiveness while respecting feature constraints. This online, co-evolutionary process exposes the classifier to increasingly adaptive attacks. Experimental results demonstrate that the proposed approach enhances adversarial robustness relative to standard training while maintaining clean accuracy, exemplifying a co-evolutionary arms-race framework for realistic, feature-constrained malware detection.