Why aren't malware analysis practitioners making more use academic research results? In this webcast, we suggest that one reason is the general difficulty of replicating and reproducing research results in this field. We randomly selected 100 papers on "malware classification" from Google Scholar results and attempted to replicate each one. We were only able to find released code for 6 of these 100 papers, and what's worse, only 6 of the 88 remaining papers contained a specific listing for the algorithm. We offer suggestions for improving the state of the field and end with a call to action for researchers to improve their methods so that their work will be useful for everyone.

What Attendees Will Learn:

• Why replication and reproduction are important topics in malware research
• The problems with data in malware research and suggestions to fix them
• The basics of using science in the field

Who Should Attend?

• Funders of malware research
• Malware reverse engineers and practitioners
• Malware researchers
• People who want to use malware research to protect their systems