# Malware Similarity Search on EMBERSim (Malicious)

Source: [Malware Similarity Search on EMBERSim (Malicious)](<https://www.sota2.com/research/sota/malware-similarity-search-on-embersim-malicious>)

Collection index: [llms.txt](<https://www.sota2.com/research/llms.txt>)

Data updated: 2026-02-26T06:09:31.755Z

Evaluation of model performance on searching for similar malware samples using the EMBERSim (Malicious) dataset, typically measured by Mean Average Precision (mAP).

A research result applies to its stated dataset, split, metric and evaluation configuration. Compare like-for-like settings, preserve the metric's unit and direction, and distinguish paper-reported results from independent reproduction. The best result recorded here is not a claim of exhaustive, current global coverage.

| Scope | Recorded value |
| --- | --- |
| Task | Malware Similarity Search |
| Dataset (including any stated split) | EMBERSim (Malicious) |
| Metric | mAP |
| Unit | SCALAR |
| Direction | Higher is better |
| Results loaded | 8 of 8 |
| Coverage | All results currently returned for this benchmark |

Evaluation settings may differ between results. The original papers and recorded configurations are needed to establish comparability. A shared metric name alone does not establish an identical protocol.

## Metrics

- [mAP](<https://www.sota2.com/research/sota/malware-similarity-search-on-embersim-malicious.md?metric=mAP>): Higher is better; unit: SCALAR.

## Recorded results

| Method | mAP | Result date | Report paper |
| --- | --- | --- | --- |
| leaf similarity | 0.96 | Not recorded | 68fa70b91e209131cea4cd58 |
| leaf similarity | 0.895 | Not recorded | 68fa70b91e209131cea4cd58 |
| leaf similarity | 0.812 | Not recorded | 68fa70b91e209131cea4cd58 |
| leaf similarity | 0.783 | Not recorded | 68fa70b91e209131cea4cd58 |
| leaf similarity | 0.753 | Not recorded | 68fa70b91e209131cea4cd58 |
| leaf similarity | 0.716 | Not recorded | 68fa70b91e209131cea4cd58 |
| leaf similarity | 0.714 | Not recorded | 68fa70b91e209131cea4cd58 |
| leaf similarity | 0.698 | Not recorded | 68fa70b91e209131cea4cd58 |

### leaf similarity

mAP: 0.96. Result ID: 699155cd3a6c31484907670f.

[Reporting paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Implementation](<https://github.com/CrowdStrike/embersim-databank>)

Recorded evaluation configuration: {"Top-K":"1","Evaluation Protocol":"Counterfactual Analysis"}. This record does not assert independent reproduction.

### leaf similarity

mAP: 0.895. Result ID: 699155cd3a6c314849076710.

[Reporting paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Implementation](<https://github.com/CrowdStrike/embersim-databank>)

Recorded evaluation configuration: {"Top-K":"10","Evaluation Protocol":"Counterfactual Analysis"}. This record does not assert independent reproduction.

### leaf similarity

mAP: 0.812. Result ID: 699155cd3a6c314849076711.

[Reporting paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Implementation](<https://github.com/CrowdStrike/embersim-databank>)

Recorded evaluation configuration: {"Top-K":"50","Evaluation Protocol":"Counterfactual Analysis"}. This record does not assert independent reproduction.

### leaf similarity

mAP: 0.783. Result ID: 699155cd3a6c314849076712.

[Reporting paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Implementation](<https://github.com/CrowdStrike/embersim-databank>)

Recorded evaluation configuration: {"Top-K":"100","Evaluation Protocol":"Counterfactual Analysis"}. This record does not assert independent reproduction.

### leaf similarity

mAP: 0.753. Result ID: 699155cd3a6c31484907670c.

[Reporting paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Implementation](<https://github.com/CrowdStrike/embersim-databank>)

Recorded evaluation configuration: {"Top-K":"10","Evaluation Protocol":"Unsupervised Labelling"}. This record does not assert independent reproduction.

### leaf similarity

mAP: 0.716. Result ID: 699155cd3a6c31484907670b.

[Reporting paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Implementation](<https://github.com/CrowdStrike/embersim-databank>)

Recorded evaluation configuration: {"Top-K":"1","Evaluation Protocol":"Unsupervised Labelling"}. This record does not assert independent reproduction.

### leaf similarity

mAP: 0.714. Result ID: 699155cd3a6c31484907670d.

[Reporting paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Implementation](<https://github.com/CrowdStrike/embersim-databank>)

Recorded evaluation configuration: {"Top-K":"50","Evaluation Protocol":"Unsupervised Labelling"}. This record does not assert independent reproduction.

### leaf similarity

mAP: 0.698. Result ID: 699155cd3a6c31484907670e.

[Reporting paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Method origin paper](<https://www.sota2.com/research/paper/68fa70b91e209131cea4cd58.md>)

[Implementation](<https://github.com/CrowdStrike/embersim-databank>)

Recorded evaluation configuration: {"Top-K":"100","Evaluation Protocol":"Unsupervised Labelling"}. This record does not assert independent reproduction.

Page 1 of 1. This is an index page, not the full collection.