I am extracting strings from malware samples and I would like to build an algorithm to tell from which family of malware a string is (most probably) coming.

I thought about using a string for the network's input either using a feature vector (hashing?) and the output being the probability of belonging to one of the predefined families.

Which kind of model should I use? How can I send strings as the network's input?

I found that a "sequence to sequence" model should fit my requirements or a LSTM model, but to be honest I am a bit lost.



Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Browse other questions tagged or ask your own question.