yarasafe

YARASAFE - 使用 Yara 进行自动二进制函数相似性检查 SAFE 是一款用于创建二进制函数嵌入的工具，由 Massarelli L.、Di Luna G.A.、Petroni F.、Querzoni L. 和 Baldoni R. 开发。您可以使用 SAFE 创建自己的函数嵌入，并将其应用于 yara 规则中。 如果您有兴趣，请查看我们的研究论文：https://arxiv.org/abs/1811.05296 如果您在研究中使用本工具，请引用： root@kitploit: @inproceedingsmassarelli2018safe, title=SAFE:...

AsmRAG: LLM-Driven Malware Detection by Retrieving Functionally Similar Assembly Code

Deep learning malware detectors achieve high classification accuracy but suffer from severe interpretability limitations, typically returning probabilistic verdicts that lack forensic context. We introduce AsmRAG, a framework performing malware analysis through Assembly-Level Retrieval-Augmented...

KEENHash: Hashing Programs into Function-Aware Embeddings for Large-Scale Binary Code Similarity Analysis

Binary code similarity analysis BCSA is a crucial research area in many fields such as cybersecurity. Specifically, function-level diffing tools are the most widely used in BCSA: they perform function matching one by one for evaluating the similarity between binary programs. However, such methods...