csvl/SEMA-ToolChain

SEMA is based on angr, a symbolic execution engine used to extract API calls. Especially, we extend ANGR with strategies to create representative signatures based on System Call Dependency graph (SCDG). Those SCDGs can be exploited in machine learning modules to do classification/detection.

2 best points · 0 comments · 1 Hacker News post · 124 GitHub stars · View on GitHub

Hacker News discussions

• Show HN: SEMA (Symbolic Execution for Malware Analysis/Detection Using Angr) (2 points, 0 comments, by ElNiak, 2024-03-05)