rieck

Malheur

Malheur is a tool for automatic analysis of program behavior recorded from malicious software (malware). It has been designed to support the regular analysis of malicious software and the development of detection and defense measures. Based on machine learning techniques, Malheur allows for ... [More] identifying novel classes of malware with similar behavior and assigning unknown malware to discovered classes. [Less]

Sally Tool

Sally is a small tool for mapping a set of strings to a set of vectors. This mapping is referred to as embedding and allows for applying techniques of machine learning and data mining for analysis of string data. Sally implements a technique for mapping strings to a vector space that is often ... [More] referred to as vector space model or bag-of-words model. The strings are characterized by a set of string features, where each feature is associated with one dimension of the vector space. Sally proceeds by counting the occurrences of the specified features in each string and generating a sparse vector of count values. Alternatively, binary or TF-IDF values can be computed and stored in the vectors. Sally then normalizes the vector and outputs it in a specified format. [Less]