Adapter-Based Few-Shot Continual Learning for Malicious Packet Recognition
[Kryptografia i bezpieczeństwo] Autorzy: Kyle Stein, Guillermo Francia, III Eman El-Sheikh i 1 więcej
The continual evolution of malware variants necessitates detection systems that can adapt to new threats without retraining from scratch. However, continually updating models on new data often leads to catastrophic forgetting, where previously learned knowledge is overwritten. While continual learning has been increasingly explored for malware detection, the specific setting of Few-Shot Class-Incremental Learning (FSCIL), where new malware classes must be learned from only a small number of labeled examples, remains comparatively underexplored. Therefore, this work investigates the FSCIL setting for malware classification. To address the stability-plasticity dilemma, we propose a hybrid framework that leverages a Self-Supervised Learning (SSL) backbone initialized through domain-specific pre-training on malware packets. Our method incorporates Low-Rank Adaptation (LoRA) to efficiently a…
- Kategoria arxiv
- cs.CR
- Kategoria
- Kryptografia i bezpieczeństwo