ColdPress：一个可扩展的威胁情报恶意软件分析平台
ColdPress: An Extensible Malware Analysis Platform for Threat Intelligence
摘要：
恶意软件分析在很大程度上仍然是一项手动任务。这种缓慢而低效的方法无法适应新的独特恶意软件生成率的指数增长。因此，尽可能地自动化该过程变得合乎需要。在本文中，我们提出了ColdPress -一个可扩展的恶意软件分析平台，自动化的恶意软件威胁情报收集集成输出模块的端到端的过程中执行任意文件格式的报告生成。ColdPress将最先进的工具和概念结合到一个模块化系统中，帮助分析人员高效地从恶意软件样本中提取信息。它被设计为一个用户友好和可扩展的平台，可以很容易地扩展用户定义的模块。我们使用复杂的真实恶意软件样本（例如，WannaCry），向安全分析师展示了其效率，性能和实用性。
英文摘要：
Malware analysis is still largely a manual task. This slow and inefficient approach does not scale to the exponential rise in the rate of new unique malware generated. Hence, automating the process as much as possible becomes desirable. In this paper, we present ColdPress - an extensible malware analysis platform that automates the end-to-end process of malware threat intelligence gathering integrated output modules to perform report generation of arbitrary file formats. ColdPress combines state-of-the-art tools and concepts into a modular system that aids the analyst to efficiently and effectively extract information from malware samples. It is designed as a user-friendly and extensible platform that can be easily extended with user-defined modules. We evaluated ColdPress with complex real-world malware samples (e.g., WannaCry), demonstrating its efficiency, performance and usefulness to security analysts.
机构、总结、中文摘要均由AI分析而来，可能存在错误，请以论文正文为准。
