Malware Classification

Introduction

The Malware Classification Package.

An instance of the package must first be created using dca::MalwareClassification::create.

A malware hash can be classified using the dca::MalwareDbClassifier class. A dca::Hash object must first be created from hash data. The MalwareDbClassifer analyses the malware hash and returns a classification as a dca::MalwareClassificationResults object.

A MalwareCategoriesInfo class can be retrieved by using the getCategoriesInfo() function, which is used to enumerate all container objects.

See also

dca::DbConnection, dca_malware::MalwareClassification::createDbClassifier Malware Classification

Classes
class	dca_malware::MalwareCategories
	Definition of a container class for MalwareCategory objects. More...
class	dca_malware::MalwareCategoriesInfo
	Container class for all Malware enumeration objects. More...
class	dca_malware::MalwareCategory
	The MalwareCategory class contains information for a single category. More...
class	dca_malware::MalwareClassification
	Main class for the Malware classification. More...
struct	dca_malware::MalwareClassificationResult
	The result item of a Malware classification. More...
class	dca_malware::MalwareClassificationResults
	Results of a Malware classification. More...
class	dca_malware::MalwareEnum
	The MalwareEnum class describes a single enumerable item (currebtly not used for malware) More...
class	dca_malware::MalwareEnums
	Definition of a container class for MalwareEnum objects. More...
class	dca_malware::Hash
	Definition of the Hash class. More...
class	dca_malware::MalwareLocale
	Encapsulation of a locale class, which allows access to the language id and the display name of locale definitions. More...
class	dca_malware::MalwareLocales
	Definition of a container class for MalwareLocale objects. More...
class	dca_malware::MalwareDbClassifier
	Malware database classifier class. More...

Files
file	malware_base.h
	Contains type definitions used in the Malware package.
file	malware_categories.h
	Container class for MalwareCategory objects.
file	malware_categoriesinfo.h
	Container class for all Malware enumeration objects.
file	malware_category.h
	Definition of the MalwareCategory class.
file	malware_classification.h
	Package header file for the Malware Classification module.
file	malware_classification_result.h
	Definition of a MalwareClassificationResult.
file	malware_classification_results.h
	Results of an Malware classification.
file	malware_enum.h
	Definition of the MalwareEnum class.
file	malware_enums.h
	Container class for MalwareEnum objects.
file	malware_hashdata.h
	Definition of the Hash class.
file	malware_locale.h
	Encapsulates a single Locale as defined in the Malware categories XML schema.
file	malware_locales.h
	Container class for Malware locale objects.

Typedefs
typedef int	dca_malware::DCA_ENUM_ID_TYPE
	Id type for MalwareEnum class.

Functions
bool	dca_malware::operator== (const MalwareClassificationResult &aMalwareClassificationResult, const MalwareClassificationResult &bMalwareClassificationResult)
	Definition of the comparision operator as an external function. More...
bool	dca_malware::operator!= (const MalwareClassificationResult &aMalwareClassificationResult, const MalwareClassificationResult &bMalwareClassificationResult)
	Definition of the inequality operator as an external function. More...

Variables
const DbType	dca_malware::DBT_Malware
	Used to specify an Malware Classification database when creating a dca::DbConnection instance.
MalwareCategory	dca_malware::NullMalwareCategory
	Defines a constant unassigned MalwareCategory you can use for checks. if( myMalwareCategory == NullMalwareCategory ) --> myMalwareCategory is not assigned yet!
MalwareEnum	dca_malware::NullMalwareEnum
	Defines a constant unassigned MalwareEnum you can use for checks. if( myMalwareEnum == NullMalwareEnum ) --> myMalwareEnum is not assigned yet!

Function Documentation

operator==()

bool dca_malware::operator==	(	const MalwareClassificationResult &	aMalwareClassificationResult,
		const MalwareClassificationResult &	bMalwareClassificationResult
	)

Definition of the comparision operator as an external function.

Parameters

[in]	aMalwareClassificationResult	First value to compare.
[in]	bMalwareClassificationResult	Second value to compare

Returns

true if categoryId and value of the two parameters are identical

operator!=()

bool dca_malware::operator!=	(	const MalwareClassificationResult &	aMalwareClassificationResult,
		const MalwareClassificationResult &	bMalwareClassificationResult
	)

Definition of the inequality operator as an external function.

Parameters

[in]	aMalwareClassificationResult	First value to compare.
[in]	bMalwareClassificationResult	Second value to compare

Returns

true if categoryId and value of the two parameters are not identical