GitHub - nastya/morphdetect: Similarity-based polymorphic shellcode detector. Addresses the problem of detection of polymorphic and metamorphic shellcode in the network traffic. Input: dataset of known shellcodes and bytes sequence to analyze. Output: information of attack detected.

Branches Tags

Name		Name	Last commit message	Last commit date
Latest commit History 77 Commits
distrib		distrib
.gitignore		.gitignore
Makefile		Makefile
analyzer.cpp		analyzer.cpp
analyzer.h		analyzer.h
analyzerCFG.cpp		analyzerCFG.cpp
analyzerCFG.h		analyzerCFG.h
analyzerDiff.cpp		analyzerDiff.cpp
analyzerDiff.h		analyzerDiff.h
analyzerNgram.cpp		analyzerNgram.cpp
analyzerNgram.h		analyzerNgram.h
analyzerTrace.cpp		analyzerTrace.cpp
analyzerTrace.h		analyzerTrace.h
block.cpp		block.cpp
block.h		block.h
cache.cpp		cache.cpp
cache.h		cache.h
changedmemory.cpp		changedmemory.cpp
changedmemory.h		changedmemory.h
compareUtils.cpp		compareUtils.cpp
compareUtils.h		compareUtils.h
detectSimilar.cpp		detectSimilar.cpp
detectSimilar.h		detectSimilar.h
instructionInfo.cpp		instructionInfo.cpp
instructionInfo.h		instructionInfo.h
instructionQueue.cpp		instructionQueue.cpp
instructionQueue.h		instructionQueue.h
main.cpp		main.cpp
memoryBlock.cpp		memoryBlock.cpp
memoryBlock.h		memoryBlock.h
normalizer.cpp		normalizer.cpp
normalizer.h		normalizer.h
sample.cpp		sample.cpp
sample.h		sample.h
timer.cpp		timer.cpp
timer.h		timer.h
traceCache.cpp		traceCache.cpp
traceCache.h		traceCache.h

About

Similarity-based polymorphic shellcode detector. Addresses the problem of detection of polymorphic and metamorphic shellcode in the network traffic. Input: dataset of known shellcodes and bytes sequence to analyze. Output: information of attack detected.