Hardware_Performance_Counters_Can_Detect_Malware_Myth_or_Fact

This repository contains data, codes, explanations of experimental setups for paper published in Proceedings of the 2018 on Asia Conference on Computer and Communications Security Hardware Performance Counters Can Detect Malware: Myth or Fact? [Best Paper Award]

Citation

Please use the following bibtex for citation:

@inproceedings{zhou2018hardware,
  title={Hardware Performance Counters Can Detect Malware: Myth or Fact?},
  author={Zhou, Boyou and Gupta, Anmol and Jahanshahi, Rasoul and Egele, Manuel and Joshi, Ajay},
  booktitle={Proceedings of the 2018 on Asia Conference on Computer and Communications Security},
  pages={457--468},
  year={2018},
  organization={ACM}
}

Resources Links

The following links are for the paper: PDF 1 PDF 2 PDF 3 and slides for the presentation.

Folder Organization

The folder organization is listed below.

.
|-- data_analysis       # data processing after sampling HPCs
|-- experiment_setup    # experimental setups for sampling HPC on target programs
|-- 	|--master_node  # set up the master node for job distribution
|-- 	|--slave_node   # set up the slave node for program monitoring
|-- results_for_ML      # machine learning data processing
|-- hpc_present.pdf     # slides for presentation
|-- malware_hashes.txt  # the hashes of our malware experiments from virustotal