Malware Activity Labels For APT Detection

MALS provides labeled data for detecting Advanced Persistent Threats. The dataset was uploaded by author 'tuandunghcmut' to HuggingFace in December 2024 after preprocessing into a standard format. Its original source is the APTM project codebase on GitHub.

Use Cases

• Train a classifier to predict the provided label column using features extracted from malware samples.
• Benchmark APT detection algorithms against the standardized label schema defined in the APTM source code.
• Analyze patterns in the label distribution to understand commonalities in advanced threat activity.

Strengths

• Preprocessed into the standard HuggingFace Dataset format for immediate use.
• Labels are defined with reference to the original APTM project source code for consistency.

Limitations

• Unknown sample size and number of features limit assessment of statistical power.
• Lack of column descriptions and sample data obscures the data structure and content.

Provenance

Source

Originally from a Google Drive source linked to the APTM GitHub repository (https://github.com/Shuyu-XJTU/APTM).

Collection Method

Downloaded and preprocessed by the HuggingFace uploader into a standard dataset format.

Freshness

Last updated on the HuggingFace platform in December 2024.