Alpha Presentation Defeating Malware Payload Obfuscation The - - PowerPoint PPT Presentation

alpha presentation
SMART_READER_LITE
LIVE PREVIEW

Alpha Presentation Defeating Malware Payload Obfuscation The - - PowerPoint PPT Presentation

Alpha Presentation Defeating Malware Payload Obfuscation The Capstone Experience Team Proofpoint Adam Johanknecht Nick Lojewski Vivian Qian Derek Renusch Dan Somary Department of Computer Science and Engineering Michigan State University


slide-1
SLIDE 1

From Students… …to Professionals

The Capstone Experience

Alpha Presentation

Defeating Malware Payload Obfuscation

Department of Computer Science and Engineering Michigan State University Spring 2019

Team Proofpoint

Adam Johanknecht Nick Lojewski Vivian Qian Derek Renusch Dan Somary

slide-2
SLIDE 2

Project Overview

  • Create a machine learning system to classify

files as malicious or benign

▪ Accuracy goal: have at least the same accuracy as sandbox detonation ▪ Performance goal: be at least 50% faster than detonation in Cuckoo

  • Display information in web dashboard

▪ High level system information ▪ Ability to look at details for individual files

The Capstone Experience Team Proofpoint Alpha Presentation 5

slide-3
SLIDE 3

System Architecture

The Capstone Experience Team Proofpoint Alpha Presentation 6

slide-4
SLIDE 4

Dashboard

The Capstone Experience Team Proofpoint Alpha Presentation 7

slide-5
SLIDE 5

File Drill Down – Malicious File

The Capstone Experience Team Proofpoint Alpha Presentation 8

slide-6
SLIDE 6

File Drill Down – Benign File

The Capstone Experience Team Proofpoint Alpha Presentation 9

slide-7
SLIDE 7

File Upload

The Capstone Experience Team Proofpoint Alpha Presentation 10

slide-8
SLIDE 8

What’s left to do?

  • Handle additional file types
  • Create feedback loops for Machine Learning
  • Send low confidence files to Cuckoo
  • Display system health information
  • Improve main dashboard

The Capstone Experience Team Proofpoint Alpha Presentation 11

slide-9
SLIDE 9

Questions?

The Capstone Experience Team Proofpoint Alpha Presentation 12

? ? ? ? ? ? ? ? ?