Binary File Fixing and Wavelet Processing for Uniform Feature Extraction
Find Innovative SolutionsGenerate Solutions
Solution Overview
Problem
Existing methods struggle to extract uniform feature information from binary files of varying sizes and structures, particularly when packed or obfuscated, limiting effective malicious code detection.
Innovation Solution
A method involving converting binary files into fixed-size data using techniques like padding, slicing, and hidden Markov models, followed by wavelet signal processing to extract feature information uniformly across different operating systems.
Engineering Contradictions & Design Principles
Engineering Contradiction Analysis
1Measurement precision
If different feature information extraction processes are used for different binary file structures (PE, ELF), then extraction accuracy is improved, but device complexity increases
Solution Approach 1:
The patent applies universality by creating a single feature information extraction process that works across all binary file structures (PE, ELF, and others). Instead of maintaining separate extraction processes for each file type, the invention uses one unified process that adapts to handle different binary formats, thereby reducing device complexity while maintaining extraction accuracy.
2Reliability
If feature information is extracted from packed or obfuscated binary files, then detection capability is improved, but extraction reliability deteriorates
Solution Approach 1:
The patent applies preliminary action by performing unpacking or deobfuscation processing on binary files before feature information extraction. This preliminary step restores the binary file to a more readable state, allowing the subsequent extraction process to obtain meaningful feature information even from packed or obfuscated files, thereby maintaining both detection capability and information quality.
3Adaptability or versatility
If binary files are converted without fixed size, then conversion flexibility is improved, but feature information uniformity deteriorates
Solution Approach 1:
The patent applies parameter changes by introducing a fixed size parameter during the conversion process. Binary files are converted into fixed-size data structures (such as fixed-size matrices or arrays), which standardizes the output format regardless of the original file size. This parameter change enables uniform feature information extraction while maintaining flexibility in handling various input file sizes through appropriate padding or truncation.
4Measurement precision
If wavelet signal processing is applied to binary files of different sizes, then feature extraction capability is improved, but result consistency deteriorates
Solution Approach 1:
The patent applies preliminary action by converting binary files into fixed-size data structures before applying wavelet signal processing. This preprocessing step ensures that all input data to the wavelet transform has uniform dimensions, which guarantees consistent feature extraction results regardless of the original binary file sizes, thereby maintaining both extraction capability and result consistency.
Data Source
Figure 1
Figure 2
Figure 3
AI summary
Disclosed is a method of extracting file feature information, the method being performed by a computing device including at least one processor, the method including: converting input data in a form of a binary file into data with a preset size; and extracting feature information of the input data from the data with the preset size. The representative drawing may be FIG. 2.