24 citations · 24 across the 13 of their papers we have counts for
8 papers · 1 filter
When LLM Decompilers Recompile More and Preserve Less
Chang Liu, Edward Raff, Kristopher Micinski
Decompilation recovers high-level source from compiled machine code and serves as a foundation for security tasks such as vulnerability detection and malware analysis. Traditional…
Why Is SHAP Not a Reliable Standalone Explanation Framework for Malware Detection?
Seyedreza Mohseni, Edward Raff, Manas Gaur
Machine learning is widely used for malware detection, but its decisions must be explained. An analyst needs to know whether a model has learned genuine malicious behavior or only…
Hamm-Grams: An Algorithm for Mining Regular Expressions of Bytes
Derek Everett, Edward Raff, James Holt
Malware poses a critical and ever-evolving threat, and robust and effective systems for detecting and classifying malware are of essential importance. -grams features are among…
Large Byte Model: Teaching Language Models About Compiled Code
Florian Störtz, Catalin-Andrei Stan, Alexandru Dinu +4
Malware analysis starts with the raw bytes of an executable program, and tools to "lift" these to higher-level representations, such as assembly, are expensive and subject to error…
ASSEMBLAGE-DEEPHISTORY: A Cross-Build Binary Dataset with Temporal Coverage
Chang Liu, Noah Fleischmann, Nicolò Altamura +3
Existing binary corpora typically capture only one or two axes of binary variation: they either provide cross-compiler builds without a temporal axis, or CVE labels for single-buil…
McNdroid: A Longitudinal Multimodal Benchmark for Robust Drift Detection in Android Malware
Md Mahmuduzzaman Kamol, Jesus Lopez, Saeefa Rubaiyet Nowmi +5
Machine learning (ML) in real-world systems must contend with concept drift, adversarial actors, and a spectrum of potential features with varying costs and benefits. Malware natur…