Machine Learning for Cybersecurity Simplified Notes (1)
Machine Learning for Cybersecurity Simplified Notes (1)
Malware analysis is the process of studying harmful software to understand what it does, where it came from,
Understanding Malware:
- Software is usually written in high-level code (like Python or Java) but malware is often found in low-level
- Since we rarely have the original source code, we need to reverse engineer the binary to understand it.
- Malware can also hide in documents like PDFs or Word files using macros.
Malware Classification:
- Grouping malware samples into families helps track their evolution and find related threats.
- Traditional antivirus tools use signature matching (looking for known patterns).