YARWEB WEB-BASED GENERIC YARA RULE GENERATOR

Abstract

In the modern 21st century, surfing the internet has become difficult due to the rise of malware and adware. Sensitive information is often a risk to be stored without encryption. If malware does infiltrate, devising a solution to mitigate the risks is difficult and tiresome. The proposed framework presents a web-based approach to automatically generate a YARA rule for a malicious file uploaded by the user. Since it is a search engine-based model, it becomes extremely portable and useful. The testing of this prototype depicts that it is fully capable of detecting malicious samples with an average accuracy of 0.80.