https://github.com/ffri/packerdetectorconsideration
Consideration of packer detection tool for FFRI Dataset scripts
Science Score: 13.0%
This score indicates how likely this project is to be science-related based on various indicators:
-
○CITATION.cff file
-
✓codemeta.json file
Found codemeta.json file -
○.zenodo.json file
-
○DOI references
-
○Academic publication links
-
○Committers with academic emails
-
○Institutional organization owner
-
○JOSS paper metadata
-
○Scientific vocabulary similarity
Low similarity (5.0%) to scientific vocabulary
Repository
Consideration of packer detection tool for FFRI Dataset scripts
Basic Info
- Host: GitHub
- Owner: FFRI
- License: apache-2.0
- Language: Jupyter Notebook
- Default Branch: master
- Size: 207 KB
Statistics
- Stars: 0
- Watchers: 1
- Forks: 0
- Open Issues: 0
- Releases: 0
Metadata Files
README.md
Evaluation of packer detection tool for FFRI Dataset scripts
About this repository
In order to resolve the issue of FFRI Dataset scripts, we evaluated some existing OSS packer detection tools.
In this repository, we compare the performance of tools that provide heuristic packer detections (e.g., few import APIs, existence of sections with high entropy, broken rich header, ...).
Note that we previously published similar repository PackerDetectionToolEvaluation, but it focused on the evaluation of signature-based packer detection tools.
Targets
Dataset
We use PackingData dataset for this evaluation.
Note that we fixed the issue of PackingData for this evaluation.
Result
TPR is almost the same between PyPacker and Manalyze; its value is about 94%. The performance of pypeid is slightly lower than these two tools.
On the other hand, FPR was much lower when using PyPacker or pypeid compared with Manalyze.
| | TPR | FPR | |:-:|:-:|:-:| | PyPackerDetect | 94.6% | 2.2% | | Manalyze | 95.0% | 41.0% | | pypeid | 84.9% | 5.6%|
See Jupyter Notebook for more details.
Author
Koh M. Nakagawa. © FFRI Security, Inc. 2020
License
Owner
- Name: FFRI Security, Inc.
- Login: FFRI
- Kind: organization
- Location: Tokyo, Japan
- Website: https://www.ffri.jp/
- Repositories: 12
- Profile: https://github.com/FFRI
Next Generation Security
GitHub Events
Total
Last Year
Committers
Last synced: about 1 year ago
Top Committers
| Name | Commits | |
|---|---|---|
| Koh Nakagawa | t****9@g****m | 3 |
Issues and Pull Requests
Last synced: 11 months ago
All Time
- Total issues: 0
- Total pull requests: 0
- Average time to close issues: N/A
- Average time to close pull requests: N/A
- Total issue authors: 0
- Total pull request authors: 0
- Average comments per issue: 0
- Average comments per pull request: 0
- Merged pull requests: 0
- Bot issues: 0
- Bot pull requests: 0
Past Year
- Issues: 0
- Pull requests: 0
- Average time to close issues: N/A
- Average time to close pull requests: N/A
- Issue authors: 0
- Pull request authors: 0
- Average comments per issue: 0
- Average comments per pull request: 0
- Merged pull requests: 0
- Bot issues: 0
- Bot pull requests: 0