YARWEB: WEB-BASED GENERIC YARA RULE GENERATOR

Abstract

In the modern 21st century, surfing the internet has become difficult due to the rise of malware and adware. Sensitive information is often a risk to be stored without encryption. If malware does infiltrate, devising a solution to mitigate the risks is difficult and tiresome. The proposed framework presents a web-based approach to automatically generate a YARA rule for a malicious file uploaded by the user. Since it is a search engine-based model, it becomes extremely portable and useful. The testing of this prototype depicts that it is fully capable of detecting malicious samples with an average accuracy of 0.80. KEYWORDS—Malware Analysis, YARA Rules, Generic Rules, Malicious Strings, Fully Automated.