24 citations · 46 across the 8 of their papers we have counts for
8 papers · 1 filter
MASCOT-Android: A Curated Dataset and Automated Collection Pipeline for Android Malware Source Code Specimens
Bojing Li, Duo Zhong, Prajna Bhandary +4
Compared with binaries and decompiled code, malware source code more directly reflects the attackers' original intent. However, the scarcity of source code and the high cost of man…
Zipf-Gramming: Scaling Byte N-Grams Up to Production Sized Malware Corpora
Edward Raff, Ryan R. Curtin, Derek Everett +2
A classifier using byte n-grams as features is the only approach we have found fast enough to meet requirements in size (sub 2 MB), speed (multiple GB/s), and latency (sub 10 ms) f…
EMBER2024 -- A Benchmark Dataset for Holistic Evaluation of Malware Classifiers
Robert J. Joyce, Gideon Miller, Phil Roth +5
A lack of accessible data has historically restricted malware analysis research, and practitioners have relied heavily on datasets provided by industry sources to advance. Existing…
ClarAVy: A Tool for Scalable and Accurate Malware Family Labeling
Robert J. Joyce, Derek Everett, Maya Fuchs +2
Determining the family to which a malicious file belongs is an essential component of cyberattack investigation, attribution, and remediation. Performing this task manually is time…
MalDICT: Benchmark Datasets on Malware Behaviors, Platforms, Exploitation, and Packers
Robert J. Joyce, Edward Raff, Charles Nicholas +1
Existing research on malware classification focuses almost exclusively on two tasks: distinguishing between malicious and benign files and classifying malware by family. However, m…
Semi-supervised Classification of Malware Families Under Extreme Class Imbalance via Hierarchical Non-Negative Matrix Factorization with Automatic Model Selection
Maksim E. Eren, Manish Bhattarai, Robert J. Joyce +3
Identification of the family to which a malware specimen belongs is essential in understanding the behavior of the malware and developing mitigation strategies. Solutions proposed…
AVScan2Vec: Feature Learning on Antivirus Scan Data for Production-Scale Malware Corpora
Robert J. Joyce, Tirth Patel, Charles Nicholas +1
When investigating a malicious file, searching for related files is a common task that malware analysts must perform. Given that production malware corpora may contain over a billi…
Rank-1 Similarity Matrix Decomposition For Modeling Changes in Antivirus Consensus Through Time
Robert J. Joyce, Edward Raff, Charles Nicholas
Although groups of strongly correlated antivirus engines are known to exist, at present there is limited understanding of how or why these correlations came to be. Using a corpus o…