by 28 octobre 2016 gif sur yvette
play

by 28 Octobre 2016 Gif sur Yvette - PowerPoint PPT Presentation

by 28 Octobre 2016 Gif sur Yvette Disassemble Analyse Traitement 1 Traitement 2 Disassemble ... Traitement 1: Extraction sections delimited by blocks


  1. by 28 Octobre 2016 Gif sur Yvette

  2. • • • • • •

  3. • • •

  4. • • •

  5. ❏ ❏

  6. Disassemble Analyse

  7. • • •

  8. Traitement 1 Traitement 2 Disassemble ... Traitement 1: ● Extraction sections delimited by blocks of zero. Traitement 2: Analyse ● Eliminate low entropy section using Shannon’s Entropy

  9. ● ■

  10. ● ■ ■ ■ ●

  11. • – • – • – • – •

  12. • • • • • •

  13. • – • •

  14. ❏ ❏ ❏ ❏

  15. Training Instances Learning Algorithm Trained for task (T) Evaluation (P) ● ● ● ● Ask

  16. Type: • •

  17. Good feature selection Bad feature selection

  18. Split data into k samples Training Data feffff <= 0 Learn model on every sample ARM 4e5e4e<= 0 000001 <= 0 IA64 SPARC Model 2 Model 3 Model 1 Test Data Final predictions voting Combine predictions using votes

  19. Model building Feature extraction Learning Engine Feature generate extraction

  20. Binary Generate .text + .data .text Section Section

  21. • •

  22. • • • • •

  23. • • • • • •

  24. • • •

Recommend


More recommend