You're reading from Data Science for Malware Analysis A comprehensive guide to using AI in detection, analysis, and compliance

Product type Paperback

Published in Dec 2023

Publisher Packt

ISBN-13 9781804618646

Length 230 pages

Edition 1st Edition

Concepts

Threat Hunting

Author (1):

Shane Molinari

View More author details

Table of Contents (14) Chapters

Preface

1. Part 1– Introduction

2. Chapter 1: Malware Science Life Cycle Overview FREE CHAPTER

3. Chapter 2: An Overview of the International History of Cyber Malware Impacts

4. Part 2 – The Current State of Key Malware Science AI Technologies

5. Chapter 3: Topological Data Analysis for Malware Detection and Analysis

6. Chapter 4: Artificial Intelligence for Malware Data Analysis and Detection

7. Chapter 5: Behavior-Based Malware Data Analysis and Detection

8. Part 3 – The Future State of AI’s Use for Malware Science

9. Chapter 6: The Future State of Malware Data Analysis and Detection

10. Chapter 7: The Future State of Key International Compliance Requirements

11. Chapter 8: Epilogue – A Harmonious Overture to the Future of Malware Science and Cybersecurity

12. Other Books You May Enjoy

Appendix: Index

Why subscribe?

Behavior-based malware data analysis

Behavior-based malware data analysis is a proactive approach to cybersecurity that focuses on the actions that are performed by a piece of software rather than its static attributes, such as its code signature. This shift in focus enables us to detect previously unknown or evolved threats that might not have a known signature but exhibit malicious behavior. The approach can be divided into two main stages:

Data collection
Behavior analysis

Let’s take a closer look.

Data collection

In this stage, software behavior is monitored and recorded. This can be done through various methods, such as system call tracing, API function call tracking, memory and CPU usage monitoring, network traffic analysis, and more. The objective is to capture as much relevant behavior data as possible without overly impacting system performance.