495 citations · 752 across the 7 of their papers we have counts for
4 papers · 1 filter
Automatic Yara Rule Generation Using Biclustering
Edward Raff, Richard Zak, Gary Lopez Munoz +5
Yara rules are a ubiquitous tool among cybersecurity practitioners and analysts. Developing high-quality Yara rules to detect a malware family of interest can be labor- and time-in…
ProblemChild: Discovering Anomalous Patterns based on Parent-Child Process Relationships
Bobby Filar, David French
It is becoming more common that adversary attacks consist of more than a standalone executable or script. Often, evidence of an attack includes conspicuous process heritage that ma…
Learning to Evade Static PE Machine Learning Malware Models via Reinforcement Learning
Hyrum S. Anderson, Anant Kharkar, Bobby Filar +2
Machine learning is a popular approach to signatureless malware detection because it can generalize to never-before-seen malware families and polymorphic strains. This has resulted…
DeepDGA: Adversarially-Tuned Domain Generation and Detection
Hyrum S. Anderson, Jonathan Woodbridge, Bobby Filar
Many malware families utilize domain generation algorithms (DGAs) to establish command and control (C&C) connections. While there are many methods to pseudorandomly generate domain…