Reply to thread

Message

<blockquote data-quote="Andy Ful" data-source="post: 952781" data-attributes="member: 32260">Fuzzy hashes as words and &quot;Block at first sight&quot;I noticed an interesting article about deep learning where segments of fuzzy hashes are used as words. Next, the ML models are trained on these &quot;words&quot; to recognize malicious patterns, similarly to ML models in language recognition. This can help to find the previously undetected files and can be used for malware classification according to type, family, malicious behavior, or threat actor.From the Microsoft article, it follows that this technique is used in the &quot;Block at first sight&quot; feature. Fuzzy hashes are also used in AMSI-based script detection.[URL unfurl=&quot;true&quot;]https://www.microsoft.com/security/blog/2021/07/27/combing-through-the-fuzz-using-fuzzy-hashing-and-deep-learning-to-counter-malware-detection-evasion-techniques/[/URL]</blockquote>

[QUOTE="Andy Ful, post: 952781, member: 32260"] [B][SIZE=5]Fuzzy hashes as words and "Block at first sight"[/SIZE][/B] [SIZE=4]I noticed an interesting article about deep learning where segments of fuzzy hashes are used as words. Next, the ML models are trained on these "words" to recognize malicious patterns, similarly to ML models in language recognition. This can help to find the previously undetected files and can be used for malware classification according to type, family, malicious behavior, or threat actor. From the Microsoft article, it follows that this technique is used in the "Block at first sight" feature. Fuzzy hashes are also used in AMSI-based script detection. [URL unfurl="true"]https://www.microsoft.com/security/blog/2021/07/27/combing-through-the-fuzz-using-fuzzy-hashing-and-deep-learning-to-counter-malware-detection-evasion-techniques/[/URL][/SIZE] [/QUOTE]

Verification