4 papers
MASCOT-Android: A Curated Dataset and Automated Collection Pipeline for Android Malware Source Code Specimens
Bojing Li, Duo Zhong, Prajna Bhandary +4
Compared with binaries and decompiled code, malware source code more directly reflects the attackers' original intent. However, the scarcity of source code and the high cost of man…
Zipf-Gramming: Scaling Byte N-Grams Up to Production Sized Malware Corpora
Edward Raff, Ryan R. Curtin, Derek Everett +2
A classifier using byte n-grams as features is the only approach we have found fast enough to meet requirements in size (sub 2 MB), speed (multiple GB/s), and latency (sub 10 ms) f…
EMBER2024 -- A Benchmark Dataset for Holistic Evaluation of Malware Classifiers
Robert J. Joyce, Gideon Miller, Phil Roth +5
A lack of accessible data has historically restricted malware analysis research, and practitioners have relied heavily on datasets provided by industry sources to advance. Existing…
ClarAVy: A Tool for Scalable and Accurate Malware Family Labeling
Robert J. Joyce, Derek Everett, Maya Fuchs +2
Determining the family to which a malicious file belongs is an essential component of cyberattack investigation, attribution, and remediation. Performing this task manually is time…