activity
20172021
most citedLearning the PE Header, Malware Detection with Minimal Domain Knowledge

133 citations · 200 across the 6 of their papers we have counts for

collaborators

12 papers

cs.LG202118 cited

A Framework for Cluster and Classifier Evaluation in the Absence of Reference Labels

Robert J. Joyce, Edward Raff, Charles Nicholas

In some problem spaces, the high cost of obtaining ground truth labels necessitates use of lower quality reference datasets. It is difficult to benchmark model performance using th…

cs.LG20219 cited

Leveraging Uncertainty for Improved Static Malware Detection Under Extreme False Positive Constraints

Andre T. Nguyen, Edward Raff, Charles Nicholas +1

The detection of malware is a critical task for the protection of computing environments. This task often requires extremely low false positive rates (FPR) of 0.01% or even lower,…

cs.CR202027 cited

Automatic Yara Rule Generation Using Biclustering

Edward Raff, Richard Zak, Gary Lopez Munoz +5

Yara rules are a ubiquitous tool among cybersecurity practitioners and analysts. Developing high-quality Yara rules to detect a malware family of interest can be labor- and time-in…

cs.IR202011 cited

COVID-19 Kaggle Literature Organization

Maksim Ekin Eren, Nick Solovyev, Edward Raff +2

The world has faced the devastating outbreak of Severe Acute Respiratory Syndrome Coronavirus-2 (SARS-CoV-2), or COVID-19, in 2020. Research in the subject matter was fast-tracked…

cs.CR2020

A Survey of Machine Learning Methods and Challenges for Windows Malware Classification

Edward Raff, Charles Nicholas

Malware classification is a difficult problem, to which machine learning methods have been applied for decades. Yet progress has often been slow, in part due to a number of unique…

cs.CR2019

A New Burrows Wheeler Transform Markov Distance

Edward Raff, Charles Nicholas, Mark McLean

Prior work inspired by compression algorithms has described how the Burrows Wheeler Transform can be used to create a distance measure for bioinformatics problems. We describe issu…