Monday, April 18, 2005

Sisscan, perl virus hash scanner

The scanner is essentially ready, the data is taking longer. I've got most samples except for Hobbes. Detections are compatible with ClamAV simple signatures(MD5). To speed up scans, I've added a stage that checks hashes for pure samples.

So far sisscan is useful for seeing which files to ignore in large collections like Skulls.

Sisscan should be up in the next few days.

Next step after that is graphing SIS files.

No comments:

Auto "Kill Switch", solving the wrong problem?

Consumer Watchdog, a consumer advocacy group, put out a report on the dangers of Internet connected cars. They received coverage on the nigh...