EMBER2024 models cannot estimate executable first-seen dates
Machine learning on EMBER2024 features or raw bytes cannot replace external first-seen metadata for malware evaluation splits.
4 stories, newest first · one card per story
Machine learning on EMBER2024 features or raw bytes cannot replace external first-seen metadata for malware evaluation splits.
Under epitope-disjoint tests it led six retrained baselines on every metric, by 0.9 to 14.4% in micro-AUROC.
Researchers show trigger-value choice changes success and detectability of clean-label backdoors in malware classifiers.
arXiv paper shows SHAP gives unreliable standalone explanations for malware detection, with attribution dilution and sign reversal in dependent PE feature spaces.
Today 1.5K readers · 2.4K views · 757 reads · all time 189K views