Instructions to use dev9269/ember-malware-rf with libraries, inference providers, notebooks, and local apps. Follow these links to get started.
- Libraries
- Scikit-learn
How to use dev9269/ember-malware-rf with Scikit-learn:
from huggingface_hub import hf_hub_download import joblib model = joblib.load( hf_hub_download("dev9269/ember-malware-rf", "sklearn_model.joblib") ) # only load pickle files from sources you trust # read more about it here https://skops.readthedocs.io/en/stable/persistence.html - Notebooks
- Google Colab
- Kaggle
Add ember model file + comprehensive model card
Browse files- README.md +38 -0
- ember_model.pkl +3 -0
README.md
ADDED
|
@@ -0,0 +1,38 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
---
|
| 2 |
+
license: mit
|
| 3 |
+
library_name: sklearn
|
| 4 |
+
tags:
|
| 5 |
+
- malware-detection
|
| 6 |
+
- ember
|
| 7 |
+
- cybersecurity
|
| 8 |
+
- random-forest
|
| 9 |
+
- pe-files
|
| 10 |
+
- security
|
| 11 |
+
---
|
| 12 |
+
|
| 13 |
+
# EMBER Malware Random Forest
|
| 14 |
+
|
| 15 |
+
A Random Forest classifier trained on the **EMBER** (Elastic Malware Benchmark for Empowering Researchers) dataset for PE malware detection.
|
| 16 |
+
|
| 17 |
+
## Model Details
|
| 18 |
+
|
| 19 |
+
- **Model Type**: Random Forest Classifier
|
| 20 |
+
- **Framework**: scikit-learn
|
| 21 |
+
- **Dataset**: EMBER v2 (1M+ PE samples)
|
| 22 |
+
- **Input**: 2381-dimension feature vector
|
| 23 |
+
- **Output**: Malicious / Benign classification
|
| 24 |
+
|
| 25 |
+
## Performance
|
| 26 |
+
|
| 27 |
+
Trained on the standard EMBER training split with optimized hyperparameters.
|
| 28 |
+
|
| 29 |
+
| Metric | Score |
|
| 30 |
+
|--------|-------|
|
| 31 |
+
| AUC-ROC | ~0.99 |
|
| 32 |
+
| Accuracy | ~97% |
|
| 33 |
+
| F1 Score | ~0.96 |
|
| 34 |
+
|
| 35 |
+
## Related
|
| 36 |
+
|
| 37 |
+
- [malware-detector-rf](https://huggingface.co/dev9269/malware-detector-rf) - Production variant
|
| 38 |
+
- [malware-detector-demo](https://huggingface.co/spaces/dev9269/malware-detector-demo) - Interactive demo
|
ember_model.pkl
ADDED
|
@@ -0,0 +1,3 @@
|
|
|
|
|
|
|
|
|
|
|
|
|
| 1 |
+
version https://git-lfs.github.com/spec/v1
|
| 2 |
+
oid sha256:7a802805356064f38359681bc3a8b7b914a507936e47630954d1edb0059f96fb
|
| 3 |
+
size 8471529
|