Product detail

GenRex: Generator of Regular Expressions

KOLÁŘ, D. MILKOVIČ, M. REGÉCIOVÁ, D.

Product type

software

Abstract

GenRex is a unique tool for detecting similarities in artifacts (extracted data) from executable files and for generating regular expressions from them. It implements an advanced algorithm to create regular expressions, improves state-of-the-art algorithms, and includes domain-specific optimizations and pattern detections for optimal results. Generated regular expressions can be used for malware detections, for example, with YARA or any other pattern-matching tool. We also tested GenRex on publicly available behavioral reports and achieved a  high True Positive Rate of 92.34% and a low False Positive Rate of 0.01%.

Keywords

Malware detection, dynamic analysis, pattern generation algorithm, regular expressions, rules generation algorithm, YARA, GenRex

Create date

14. 2. 2024

Location

https://github.com/avast/genrex

Possibilities of use

K využití výsledku jiným subjektem je vždy nutné nabytí licence

Licence fee

Poskytovatel licence na výsledek nepožaduje licenční poplatek

www