Malware Classification Using Machine Learning and Deep Learning

A malware classification system that uses machine learning and deep learning to identify the family of a malicious file.

A malware classification system that uses machine learning and deep learning to identify the family of a malicious file. As a reference project it shows how a system like this is put together in practice, which parts matter and how they are tested, so that a developer can learn from it and build on it.

It suits learners who want practical security experience: understanding the threat, building the defence or detector, testing it against realistic attacks and reporting the results.

The main parts are a realistic threat model, the detection or protection mechanism itself, testing against sample attacks, and reporting and alerting of findings. The reference build uses TensorFlow, Python, scikit-learn, Wireshark, and OpenSSL, with a clear project structure, setup instructions and sample data so that it can be run and extended.