This is something we are looking at! It is a harder problem to create adversarial examples in the malware space, because you can't make arbitrary changes and ha

This is something we are looking at! It is a harder problem to create adversarial examples in the malware space, because you can't make arbitrary changes and have the code still work. Endgame has a great paper on this problem, and showed how they can defeat regular AVs with some fairly simple modifications that don't impact the malware's execution. https://www.blackhat.com/docs/us-17/thursday/us-17-Anderson-Bot-Vs-Bot-Evading-Machine-Learning-Malware-Detection-wp.pdf https://www.blackhat.com/docs/us-17/thursday/us-17-Anderson-...