Malware Data Science: Attack Detection and Attribution
- 4h 20m
- Hillary Sanders, Joshua Saxe
- No Starch Press
- 2018
Malware Data Science explains how to identify, analyze, and classify large-scale malware using machine learning and data visualization.
Security has become a "big data" problem. The growth rate of malware has accelerated to tens of millions of new files per year while our networks generate an ever-larger flood of security-relevant data each day. In order to defend against these advanced attacks, you'll need to know how to think like a data scientist.
In Malware Data Science, security data scientist Joshua Saxe introduces machine learning, statistics, social network analysis, and data visualization, and shows you how to apply these methods to malware detection and analysis.
You'll learn how to:
- Analyze malware using static analysis
- Observe malware behavior using dynamic analysis
- Identify adversary groups through shared code analysis
- Catch 0-day vulnerabilities by building your own machine learning detector
- Measure malware detector accuracy
- Identify malware campaigns, trends, and relationships through data visualization
Whether you're a malware analyst looking to add skills to your existing arsenal, or a data scientist interested in attack detection and threat intelligence, Malware Data Science will help you stay ahead of the curve.
About the Authors
Joshua Saxe is Chief Data Scientist at major security vendor, Sophos, where he leads a security data science research team. He's also a principal inventor of Sophos' neural network-based malware detector, which defends tens of millions of Sophos customers from malware infections. Before joining Sophos, Joshua spent 5 years leading DARPA funded security data research projects for the US government.
Hillary Sanders leads the infrastructure data science team at Sophos, which develops the frameworks used to build Sophos' deep learning models. Before joining Sophos, Hillary created a recipe web app and spent three years as a data scientist at Premise Data Corporation.
In this Book
-
Basic Static Malware Analysis
-
Beyond Basic Static Analysis: X86 Disassembly
-
A Brief Introduction to Dynamic Analysis
-
Identifying Attack Campaigns Using Malware Networks
-
Shared Code Analysis
-
Understanding Machine Learning–Based Malware Detectors
-
Evaluating Malware Detection Systems
-
Building Machine Learning Detectors
-
Visualizing Malware Trends
-
Deep Learning Basics
-
Building A Neural Network Malware Detector With Keras
-
Becoming A Data Scientist
