adulau/MalwareClassifier
1
0
Fork 0
mirror of https://github.com/adulau/MalwareClassifier.git synced 2024-12-22 08:46:04 +00:00
Code Issues Projects Releases Packages Wiki Activity

Requirements added

Browse source
This commit is contained in:
Alexandre Dulaunoy 2015-01-10 23:15:22 +01:00
parent ffe19b07fa
commit 411e39b501
1 changed files with 7 additions and 0 deletions
Show stats Download patch file Download diff file Expand all files Collapse all files

7
README.md
View file

@ -2,6 +2,13 @@
*Malware Classifier* is a simple free software project done during an [university workshop of 4 hours](http://www.foo.be/cours/dess-20142015/Redis-Introduction.pdf). The objective of the 4 hours workshop was to introduce network forensic and simple techniques to classify malware network capture (from their execution in a virtual machine). So the software was kept very simple while using and learning existing tools ([networkx](https://networkx.github.io/), [redis](http://www.redis.io/) and [Gephi](http://gephi.github.io/)). *Malware Classifier* is a simple free software project done during an [university workshop of 4 hours](http://www.foo.be/cours/dess-20142015/Redis-Introduction.pdf). The objective of the 4 hours workshop was to introduce network forensic and simple techniques to classify malware network capture (from their execution in a virtual machine). So the software was kept very simple while using and learning existing tools ([networkx](https://networkx.github.io/), [redis](http://www.redis.io/) and [Gephi](http://gephi.github.io/)).
## Requirements
* Python 2.7
* networkx and redis modules (pip install -r REQUIREMENTS)
* tshark (part of Wireshark)
* a Redis server
# How to use the Malware Classifier # How to use the Malware Classifier
You'll need of a set of network packet captures. In the workshop, we use a dataset with more than 5000 pcap files generated from the execution of malware in virtual machines. You'll need of a set of network packet captures. In the workshop, we use a dataset with more than 5000 pcap files generated from the execution of malware in virtual machines.