SYSTEMS AND METHODS FOR DATA DRIVEN MALWARE TASK IDENTIFICATION

摘要

Embodiments of a system and method for identifying malware tasks using a controlled environment to run malicious software to generate analysis reports, a parser to extract features from the analysis reports and a cognitively inspired learning algorithm to predict tasks associated with the malware are disclosed.

主权项

1. A method for estimating a task of a malware program, the method comprising:
receiving an instance of malware at a computing device; extracting a set of attributes of the received instance of malware; applying an Adaptive Control of Thought-Rational (ACT-R) machine learning technique to the extracted set of attributes; and estimating one or more tasks of the received instance of malware based at least on the application of the ACT-R machine learning technique.