prikaz prve stranice dokumenta Metrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata
No public access
master's thesis
Metrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata
Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing, 2021. urn:nbn:hr:168:143634
Zeba, Borna
University of Zagreb
Faculty of Electrical Engineering and Computing

Institutional repository: FER Repository

Cite this document

Zeba, B. (2021). Metrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata (Master's thesis). Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing. Retrieved from https://urn.nsk.hr/urn:nbn:hr:168:143634

Zeba, Borna. "Metrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2021. https://urn.nsk.hr/urn:nbn:hr:168:143634

Zeba, Borna. "Metrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata." Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, 2021. https://urn.nsk.hr/urn:nbn:hr:168:143634

Zeba, B. (2021). 'Metrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata', Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, accessed 16 June 2024, https://urn.nsk.hr/urn:nbn:hr:168:143634

Zeba B. Metrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata [Master's thesis]. Zagreb: University of Zagreb, Faculty of Electrical Engineering and Computing; 2021 [cited 2024 June 16] Available at: https://urn.nsk.hr/urn:nbn:hr:168:143634

B. Zeba, "Metrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata", Master's thesis, University of Zagreb, Faculty of Electrical Engineering and Computing, Zagreb, 2021. Available at: https://urn.nsk.hr/urn:nbn:hr:168:143634

Metadata
TitleMetrika za ocjenu kvalitete pravila i uzoraka za detekciju zloćudnih programskih objekata
Title (english)Metrics for quality evaluation of rules and patterns for malicious object detection
AuthorBorna Zeba
MentorJosip Knezović (mentor)
Committee memberJosip Knezović (predsjednik povjerenstva)
Committee memberHrvoje Mlinarić (član povjerenstva)
Committee memberDaniel Hofman (član povjerenstva)
GranterUniversity of Zagreb
Faculty of Electrical Engineering and Computing
Zagreb
Defense date and country2021-07-15, Croatia
Scientific / art field,
discipline and subdiscipline		TECHNICAL SCIENCES
Computing
Abstract
Detekcija temeljena na uzorcima i pravilima čini temelj obrane od zloćudnih programskih objekata. Iako je većina takvih rješenja zatvorenog kôda, alat za istraživanje zloćudnog softvera YARA pokazao se dominantnom tehnologijom u svijetu otvorenog kôda. YARA pravila često su korištena, a nerijetko su loše kvalitete i uzrokuju lažno pozitivne detekcije. U ovom radu predložen je algoritam za ocjenu kvalitete pravila te je ispitana njegova učinkovitost na velikoj količini javno dostupnih pravila. Predložena su buduća poboljšanja algoritma i uočene njegove mane.
Abstract (english)
Rule-based detection is one of the cornerstones of malware prevention. Although most such solutions are proprietary, malware research tool YARA proved prevalent in the open-source space. YARA rules are widely used and shared, however low-quality rules producing false detections are often encountered. This thesis presents a rule grading algorithm producing quality evaluation metrics that rate rules and patterns in regard to potential false positive detections. The algorithm is evaluated on a large corpus of publicly available rules and its shortcomings and future improvements are discussed.
Keywords
Keywords (english)
Languageenglish
URN:NBNurn:nbn:hr:168:143634
Study programmeTitle: Computing
Study programme type: university
Study level: graduate
Academic / professional title: magistar/magistra inženjer/inženjerka računarstva (magistar/magistra inženjer/inženjerka računarstva)
Type of resourceText
File originBorn digital
Access conditionsClosed access
Terms of useLicence In copyright icon
Public note
Created on2023-01-13 10:54:28