In this paper, we propose a bidirectional universal adversarial learning method for effective binary OpCode perturbation from both benign and malicious perspectives.  ...  Binary n -gram OpCode features are commonly used for malicious code identification and classification with high accuracy.  ...  In this paper, we propose BMOP, a bidirectional universal adversarial learning method for effective binary OpCode perturbation from both benign and malicious perspectives.  ...