DeepMalwareDetector
strelka
| DeepMalwareDetector | strelka | |
|---|---|---|
| 1 | 1 | |
| 65 | 800 | |
| - | 1.4% | |
| 0.0 | 9.3 | |
| about 1 year ago | 5 days ago | |
| Python | Python | |
| - | GNU General Public License v3.0 or later |
Stars - the number of stars that a project has on GitHub. Growth - month over month growth in stars.
Activity is a relative number indicating how actively a project is being developed. Recent commits have higher weight than older ones.
For example, an activity of 9.0 indicates that a project is amongst the top 10% of the most actively developed projects that we are tracking.
DeepMalwareDetector
-
Looking for insight on labelling portable executable (PE) malware files using a VirusTotal API response report.
What brought me to this research was these studies [1] [2], which demonstrates how image-based malware classification can be done using a CNN (convolutional neural network). Since I had a bit of a background with malware, and I recently completed a CNN model, I figured I would try to do something similar. It was only after investigating different materials I hit a bit of a roadblock. I found this one dataset, malimg [3], which is made up of PE files that have been converted into images already. I didn't want to just use the images, I wanted to demonstrate how to get them, only the method used to classify them turned out to be a bit out of my depth, kind of like this whole project, it's discussed in Section 4.2 of this paper [4] . There's also this set [5], which contains the pixel content for each file record. And as for the static disassembly you mention, I think you are right, the training data might not exist. During my investigation the best I could find was this study [6].
strelka
What are some alternatives?
avclass - AVClass malware labeling tool
uzen - Website crawler with YARA detection
deepNOID - deepNOID, the binary music genre classifier which determines if what you're listening to really is NOIDED
halogen - Automatically create YARA rules from malicious documents.
tinysleepnet - TinySleepNet: An Efficient Deep Learning Model for Sleep Stage Scoring based on Raw Single-Channel EEG by Akara Supratak and Yike Guo from The Faculty of ICT, Mahidol University and Imperial College London respectively
labelImg - LabelImg is now part of the Label Studio community. The popular image annotation tool created by Tzutalin is no longer actively being developed, but you can check out Label Studio, the open source data labeling tool for images, text, hypertext, audio, video and time-series data.
Unredactor - In this project we are tryinbg to create unredactor. Unredactor will take a redacted document and the redacted flag as input, inreturn it will give the most likely candidates to fill in redacted location. In this project we are only considered about unredacting names only. The data that we are considering is imdb data set with many review files. These files are used to buils corpora for finding tfidf score. Few files are used to train and in these files names are redacted and written into redacted folder. These redacted files are used for testing and different classification models are built to predict the probabilies of each class. Top 5 classes i.e names similar to the test features are written at the end of text in unreddacted foleder.
gateCracker
easyesn - Python library for Reservoir Computing using Echo State Networks
apooxml - Generate YARA rules for OOXML documents.
MDML - Malware Detection using Machine Learning (MDML)
yara-endpoint - Yara-Endpoint is a tool useful for incident response as well as anti-malware enpoint base on Yara signatures.