Zipf-Gramming: Scaling Byte N-Grams Up to Production Sized Malware Corpora

Edward Raff, Ryan R. Curtin, Derek Everett +2

A classifier using byte n-grams as features is the only approach we have found fast enough to meet requirements in size (sub 2 MB), speed (multiple GB/s), and latency (sub 10 ms) f…