27 citations · 81 across the 32 of their papers we have counts for
6 papers · 1 filter
A Vector Symbolic Approach to Multiple Instance Learning
Ehsan Ahmed Dhrubo, Mohammad Mahmudul Alam, Edward Raff +2
Multiple Instance Learning (MIL) tasks impose a strict logical constraint: a bag is labeled positive if and only if at least one instance within it is positive. While this iff cons…
Zipf-Gramming: Scaling Byte N-Grams Up to Production Sized Malware Corpora
Edward Raff, Ryan R. Curtin, Derek Everett +2
A classifier using byte n-grams as features is the only approach we have found fast enough to meet requirements in size (sub 2 MB), speed (multiple GB/s), and latency (sub 10 ms) f…
EMBER2024 -- A Benchmark Dataset for Holistic Evaluation of Malware Classifiers
Robert J. Joyce, Gideon Miller, Phil Roth +5
A lack of accessible data has historically restricted malware analysis research, and practitioners have relied heavily on datasets provided by industry sources to advance. Existing…
Quick-Draw Bandits: Quickly Optimizing in Nonstationary Environments with Extremely Many Arms
Derek Everett, Fred Lu, Edward Raff +2
Canonical algorithms for multi-armed bandits typically assume a stationary reward environment where the size of the action space (number of arms) is small. More recently developed…
Disassembly as Weighted Interval Scheduling with Learned Weights
Antonio Flores-Montoya, Junghee Lim, Adam Seitz +3
Disassembly is the first step of a variety of binary analysis and transformation techniques, such as reverse engineering, or binary rewriting. Recent disassembly approaches consist…
ClarAVy: A Tool for Scalable and Accurate Malware Family Labeling
Robert J. Joyce, Derek Everett, Maya Fuchs +2
Determining the family to which a malicious file belongs is an essential component of cyberattack investigation, attribution, and remediation. Performing this task manually is time…