Pattern Matching in YARA: Improved Aho-Corasick Algorithm

YARA is a tool for pattern matching used by malware analysts all over the world. YARA can scan files, as well as process memory. It allows us to define sequences of symbols as text strings, hexadecimal strings and regular expressions. However, the use of regular expressions is limited because of the...

Full description

Bibliographic Details
Main Authors: Dominika Regeciova, Dusan Kolar, Marek Milkovic
Format: Article
Language:English
Published: IEEE 2021-01-01
Series:IEEE Access
Subjects:
Online Access:https://ieeexplore.ieee.org/document/9410267/