Simple Malware Scanner Using Yara

Abstract

This research intends to design and implement a real-time malware scanning application that uses YARA rules to effectively identify and stop malicious activity in network traffic and various protocols. Recognizing the recent trend of more advanced malware and its threat to cybersecurity underscores the need for effective malware detection and/or remediation systems. The project "Malware Scanner Using YARA" seeks to build an effective application to identify malicious entities in real-time network traffic. The application exploits YARA, an effective pattern-match based classifying and detecting malware tool.The scanner application scans network packets for potential malicious payloads with the use of YARA rules to provide a pro- active approach to threat detection. Because the system utilizes network traffic analysis to identify potential malicious payloads.