官术网_书友最值得收藏!

Running the application

With the addition of feature extraction in our pipeline, we first need to perform feature extraction on the files:

  1. Assuming the folder of files called temp_data exists, execute the following command:
PS chapter03-logistic-regression\bin\Debug\netcoreapp3.0> .\chapter03-logistic-regression.exe extract temp_data                                                
Extracted 8 to sampledata.csv

The output shows the count of extracted files and the output sample file.

  1. To train the model using either the included sampledata.csv or one you trained yourself, execute the following command:
PS chapter03-logistic-regression\bin\Debug\netcoreapp3.0> .\chapter03-logistic-regression.exe train ..\..\..\Data\sampledata.csv

The chapter3.mdl model file should exist in the folder executed in once complete.

  1. To run the newly trained model against an existing file such as the compiled chapter3 executable, run the following command:
PS chapter03-logistic-regression\bin\Debug\netcoreapp3.0> .\chapter03-logistic-regression.exe predict .\chapter03-logistic-regression.exe                      
Based on the file (.\chapter03-logistic-regression.exe) the file is classified as benign at a confidence level of 8%
If you are looking for sample files, the c:\Windows and c:\Windows\System32 folders contain numerous Windows Executables and DLLs. In addition, if you are looking to create malicious-looking files that are actually clean, you can create files on the fly on http://cwg.io in various file formats. This is a helpful tool in the cyber-security space where testing new functionality on a development machine is much safer than detonating real zero-day threats on!
主站蜘蛛池模板: 陆河县| 贡山| 台南县| 祥云县| 沾益县| 通河县| 甘肃省| 海兴县| 宁国市| 灵宝市| 庆城县| 中阳县| 卓资县| 武邑县| 松原市| 常州市| 肇东市| 偏关县| 北宁市| 宁陕县| 景东| 阳春市| 汉川市| 松滋市| 阿巴嘎旗| 兴仁县| 郓城县| 建昌县| 嵩明县| 苏尼特右旗| 滨海县| 博野县| 田东县| 全州县| 临夏县| 台州市| 上饶县| 称多县| 灌南县| 昭平县| 五寨县|