SYSTEM AND METHOD OF IDENTIFYING MALICIOUS FILES USING LEARNING MODEL TRAINED ON MALICIOUS FILE

摘要

To provide a system and a method for identifying malicious files using a learning model trained on a malicious file.SOLUTION: A method includes the steps of: selecting a malicious file; selecting a plurality of safe files from a set of safe files that are known to be safe; generating, using a hardware processor, a learning model by training a neural network with the malicious file and the plurality of safe files; generating, using the hardware processor, rules for detection of malicious files from the learning model; determining, using the hardware processor, whether attributes of an unknown file fulfill the rules of detection of malicious files using the learning model; and identifying, using the hardware processor, the unknown file as malicious when determining the rules of detection are fulfilled.SELECTED DRAWING: Figure 3