StratDef: a strategic defense against adversarial attacks in malware
  detection
  Over the years, most research towards defenses against adversarial attacks on
machine learning models has been in the image processing domain. The malware
detection domain has received less attention despite its importance. Moreover,
most work exploring defenses focuses on feature-based, gradient-based or
randomized methods but with no strategy when applying them. In this paper, we
introduce StratDef, which is a strategic defense system tailored for the
malware detection domain based on a Moving Target Defense and Game Theory
approach. We overcome challenges related to the systematic construction,
selection and strategic use of models to maximize adversarial robustness.
StratDef dynamically and strategically chooses the best models to increase the
uncertainty for the attacker, whilst minimizing critical aspects in the
adversarial ML domain like attack transferability. We provide the first
comprehensive evaluation of defenses against adversarial attacks on machine
learning for malware detection, where our threat model explores different
levels of threat, attacker knowledge, capabilities, and attack intensities. We
show that StratDef performs better than other defenses even when facing the
peak adversarial threat. We also show that, from the existing defenses, only a
few adversarially-trained models provide substantially better protection than
just using vanilla models but are still outperformed by StratDef.
