Detecting Malware with Information Complexity

Nadia Alshahwan, Earl T. Barr, David Clark +1

This work focuses on a specific front of the malware detection arms-race, namely the detection of persistent, disk-resident malware. We exploit normalised compression distance (NCD…