Master of Science (MS)
Fabio di Troia
index of coincidence, malware, machine learning
In this research, we apply the Index of Coincidence (IC) to problems in malware analysis. The IC, which is often used in cryptanalysis of classic ciphers, is a technique for measuring the repeat rate in a string of symbols. A score based on the IC is applied to a variety of challenging malware families. We nd that this relatively simple IC score performs surprisingly well, with superior results in comparison to various machine learning based scores, at least in some cases.
Gurnani, Bhavna, "Malware Detection using the Index of Coincidence" (2017). Master's Projects. 507.