malware-modeler 0.0.5

Train logisitic regression models for benign vs. malicious files based on byte n-grams and publish research, plus related tools.
Documentation 
1
2
3
4
5
6
7
8
9
10
11
12
13
14
15
16
17
18
19
20
21
22
23
24
25
26
27
28
29
30
31
32
33
34
35
36
37
38
39
40
41
42
43
44
45
46
47
48
49
50
51
52
53
54
55
56
57
58
59
60

[package]
name = "malware-modeler"
edition = "2024"
version = "0.0.5"
license = "Apache-2.0"
rust-version = "1.88"
homepage = "https://github.com/rjzak/malware-modeler-rs"
repository = "https://github.com/rjzak/malware-modeler-rs"
authors = ["Richard Zak <richard.j.zak@gmail.com>"]
categories = ["artificial-intelligence", "command-line-utilities", "security"]
keywords = ["cybersecurity", "machine-learning", "malware", "research"]
description = "Train logisitic regression models for benign vs. malicious files based on byte n-grams and publish research, plus related tools."
publish = true

[features]
default = []

# Enables bit array
experimental = []

# Use libmagic to identify unknown files when looking at Zip archives.
libmagic = ["dep:magic"]

# Use a smaller array (100k instead of 2m) for finding n-grams, resulting in slightly more hash collisions and therefore
# more n-grams, but unneeded n-grams should be removed thanks to the model's use of L1 regularlization.
low-memory = []

[dependencies]
anyhow = { version = "1.0", features = ["std"], default-features = false }
app-memory-usage-fetcher = { version = "0.3.0", default-features = false }
clap = { version = "4.6", features = ["color", "derive", "help", "std", "suggestions", "usage"], default-features = false }
clap_complete = { version = "4.6", default-features = false }
dashmap = { version = "6.1", features = ["inline", "rayon"], default-features = false }
goblin = { version = "0.10", features = ["pe32"], default-features = false }
hex = { version = "0.4", features = ["alloc"], default-features = false }
indicatif = { version = "0.18", default-features = false }
magic = { version = "0.16.7", default-features = false, optional = true }
malwaredb-lzjd = { version = "0.1", default-features = false }
num_cpus = { version = "1.17.0", default-features = false }
rand = { version = "0.10.0", features = ["thread_rng"], default-features = false }
rayon = { version = "1.11", default-features = false }
serde = { version = "1.0", features = ["derive"], default-features = false }
serde_json = { version = "1.0", features = ["std"], default-features = false }
sha2 = { version = "0.10", features = ["asm-aarch64", "asm", "sha2-asm", "std"] }
toml = { version = "1.1", features = ["display", "parse", "serde"], default-features = false }
walkdir = { version = "2.5", default-features = false }
zip = { version = "8.4", features = ["aes-crypto", "bzip2", "deflate", "deflate64", "lzma", "ppmd", "xz", "zstd"], default-features = false }

[build-dependencies]
chrono = { version = "0.4.44", features = ["now"], default-features = false }

[package.metadata.docs.rs]
all-features = true
rustdoc-args = ["--cfg", "docsrs"]
targets = ["x86_64-unknown-linux-gnu"]

[profile.release]
codegen-units = 1
lto = true
strip = "symbols"