#binary-analysis

4 pages tagged with "binary-analysis"

models

classifying packet payloads with mimelens — how to identify file content type from a tcpdump pcap — including from a single 1.4 kb udp datagram — using the mimelens-medium-byte encoder.
mimelens: small encoders for content-type detection on any byte window — pretrained byte-level and bpe BERT encoders that classify file content from a 4 kb chunk anywhere inside a file — including a single 1.4 kb udp packet.

infosec

glaurung windows driver findings — a running catalog of windows kernel-driver bugs found with glaurung, the binary-analysis toolkit — what each bug is, how the tool surfaced it, and an honest read on why microsoft did or did not act on it.

programming

tokenizing raw executables for malware analysis with bbpe — pretrained huggingface-compatible bpe tokenizers for raw binaries — use them for malware classification, binary similarity, and reverse engineering with transformers