Ember
An open dataset and toolkit for training static PE malware machine learning models, featuring extracted features from millions of Windows executable files.
What is Ember?
EMBER is an open-source dataset and toolkit for training static malware detection models on Windows Portable Executable (PE) files. It provides extracted features from millions of PE files, along with scripts to train benchmark machine learning models and classify new samples. The project addresses the need for standardized, reproducible benchmarks in malware research.
Security researchers, data scientists, and malware analysts working on machine learning-based detection systems. It's particularly valuable for academics and industry professionals who need reproducible baselines for comparing malware classification approaches.
EMBER provides a curated, version-controlled dataset with consistent feature extraction, enabling direct comparison of different machine learning techniques. Unlike proprietary datasets, it's fully open and includes tools to reproduce benchmark results, accelerating research in malware detection.
Overview
Elastic Malware Benchmark for Empowering Researchers
Use Cases
Best For
- Training benchmark malware detection models for academic research
Related Projects
Found a gem we're missing?
Open-Awesome is built by the community, for the community. Submit a project, suggest an awesome list, or help improve the catalog on GitHub.
