Sophos/ReversingLabs 20 Million malware detection dataset

Description

A dataset intended to support research on machine learning techniques for detecting malware. It includes metadata and EMBER-v2 features for approximately 10 million benign and 10 million malicous Portable Executable files, with disarmed but otherwise complete files for all malware samples. All samples are labeled using Sophos in-house labeling methods, have features extracted using the EMBER-v2 feature set, well as metadata obtained via the pefile python library, detection counts obtained via ReversingLabs telemetry, and additional behavioral tags that indicate the rough behavior of the samples.

Update Frequency

At most annually

License

See the Terms of Use

Documentation

https://github.com/sophos-ai/SOREL-20M/blob/master/README.md

Managed By

Sophos AI

See all datasets managed by Sophos AI.

Contact

sorel-dataset@sophos.com

Usage Examples

Tutorials

• SOREL-20M quickstart by Richard Harang
  S3EC2

Tools & Applications

• SOREL-20M dataset interface code by Richard Harang and Ethan M Rudd
  

Publications

• SOREL-20M: A Large Scale Benchmark Dataset for Malicious PE Detection by Richard Harang and Ethan M Rudd