Mandiant, Inc.
System and method to extract and utilize disassembly features to classify software intent

Abstract:

A system and method operable to identify malicious software by extracting one or more features disassembled from software suspected to be malicious software and employing one or more of those features in a machine-learning algorithm to classify such software.