4IDENTIFYING ATTACK CAMPAIGNS USING MALWARE NETWORKS
Malware network analysis can turn malware datasets into valuable threat intelligence, revealing adversarial attack campaigns, common malware tactics, and sources of malware samples. This approach consists of analyzing the ways in which groups of malware samples are connected by their shared attributes, whether those are embedded IP addresses, hostnames, strings of printable characters, graphics, or similar.
For example, Figure 4-1 shows an example of the power of malware network analysis in a chart that took only seconds to generate with the techniques you’ll learn in this chapter.
Figure 4-1: ...
Get Malware Data Science now with the O’Reilly learning platform.
O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.
