Applications of Graph Integration to Function Comparison and Malware Classification

Michael A. Slawinski, Andy Wortman

We classify .NET files as either benign or malicious by examining directed graphs derived from the set of functions comprising the given file. Each graph is viewed probabilisticall…