Usenix Security 23 - Adversarial Training For Raw-Binary Malware Classifiers