English

Binary-30K: A Heterogeneous Dataset for Deep Learning in Binary Analysis and Malware Detection

Cryptography and Security 2025-12-01 v1 Artificial Intelligence

Abstract

Deep learning research for binary analysis faces a critical infrastructure gap. Today, existing datasets target single platforms, require specialized tooling, or provide only hand-engineered features incompatible with modern neural architectures; no single dataset supports accessible research and pedagogy on realistic use cases. To solve this, we introduce Binary-30K, the first heterogeneous binary dataset designed for sequence-based models like transformers. Critically, Binary-30K covers Windows, Linux, macOS, and Android across 15+ CPU architectures. With 29,793 binaries and approximately 26.93% malware representation, Binary-30K enables research on platform-invariant detection, cross-target transfer learning, and long-context binary understanding. The dataset provides pre-computed byte-level BPE tokenization alongside comprehensive structural metadata, supporting both sequence modeling and structure-aware approaches. Platform-first stratified sampling ensures representative coverage across operating systems and architectures, while distribution via Hugging Face with official train/validation/test splits enables reproducible benchmarking. The dataset is publicly available at https://huggingface.co/datasets/mjbommar/binary-30k, providing an accessible resource for researchers, practitioners, and students alike.

Keywords

Cite

@article{arxiv.2511.22095,
  title  = {Binary-30K: A Heterogeneous Dataset for Deep Learning in Binary Analysis and Malware Detection},
  author = {Michael J. Bommarito},
  journal= {arXiv preprint arXiv:2511.22095},
  year   = {2025}
}

Comments

35 pages, 7 figures, 11 tables, 4 appendices. Dataset available at https://huggingface.co/datasets/mjbommar/binary-30k

R2 v1 2026-07-01T07:57:28.404Z