Skip to content

This project presents an ensemble of models for detecting spyware in Windows Portable Executable (PE) files.

Notifications You must be signed in to change notification settings

Bogdanctx/SpySense

Folders and files

NameName
Last commit message
Last commit date

Latest commit

 

History

17 Commits
 
 
 
 
 
 
 
 
 
 

Repository files navigation

Abstract

This study proposes a multi-judge (ensemble) system for static detection of spyware in Windows executable files. The system combines five classifiers (SVM, Random Forest, XGBoost, Logistic Regression) and deep learning models (1D CNN), each leveraging different representations of Portable Executable (PE) files. The result shows a great performance of this ensemble of judges (models) achieving 97% accuracy.

Run the project

To run the project use python3 server.py inside server directory. Required libraries: uvicorn, torch, numpy, pandas, fastapi, scikit-learn, xgboost, pefile, python-multipart, matplotlib.

About

This project presents an ensemble of models for detecting spyware in Windows Portable Executable (PE) files.

Topics

Resources

Stars

Watchers

Forks

Releases

No releases published

Packages

No packages published