CryptoKnight:generating and modelling compiled cryptographic primitives

Cryptovirological augmentations present an immediate, incomparable threat. Over the last decade, the substantial proliferation of crypto-ransomware has had widespread consequences for consumers and organisations alike. Established preventive measures perform well, however, the problem has not ceased. Reverse engineering potentially malicious software is a cumbersome task due to platform eccentricities and obfuscated transmutation mechanisms, hence requiring smarter, more efficient detection strategies. The following manuscript presents a novel approach for the classification of cryptographic primitives in compiled binary executables using deep learning. The model blueprint, a Dynamic Convolutional Neural Network (DCNN), is fittingly configured to learn from variable-length control flow diagnostics output from a dynamic trace. To rival the size and variability of equivalent datasets, and to adequately train our model without risking adverse exposure, a methodology for the procedural generation of synthetic cryptographic binaries is defined, using core primitives from OpenSSL with multivariate obfuscation, to draw a vastly scalable distribution. The library, CryptoKnight, rendered an algorithmic pool of AES, RC4, Blowfish, MD5 and RSA to synthesise combinable variants which automatically fed into its core model. Converging at 96% accuracy, CryptoKnight was successfully able to classify the sample pool with minimal loss and correctly identified the algorithm in a real-world crypto-ransomware applicatio

A Gas Giant Circumbinary Planet Transiting the F Star Primary of the Eclipsing Binary Star KIC 4862625 and the Independent Discovery and Characterization of the two transiting planets in the Kepler-47 System

We report the discovery of a transiting, gas giant circumbinary planet orbiting the eclipsing binary KIC 4862625 and describe our independent discovery of the two transiting planets orbiting Kepler-47 (Orosz et al. 2012). We describe a simple and semi-automated procedure for identifying individual transits in light curves and present our follow-up measurements of the two circumbinary systems. For the KIC 4862625 system, the 0.52+/-0.018 RJup radius planet revolves every ~138 days and occults the 1.47+/-0.08 MSun, 1.7 +/-0.06 RSun F8 IV primary star producing aperiodic transits of variable durations commensurate with the configuration of the eclipsing binary star. Our best-fit model indicates the orbit has a semi-major axis of 0.64 AU and is slightly eccentric, e=0.1. For the Kepler-47 system, we confirm the results of Orosz et al. (2012). Modulations in the radial velocity of KIC 4862625A are measured both spectroscopically and photometrically, i.e. via Doppler boosting, and produce similar results.Comment: 40 pages, 17 figure

SXP 7.92: A Recently Rediscovered Be/X-ray Binary in the Small Magellanic Cloud, Viewed Edge On

We present a detailed optical and X-ray study of the 2013 outburst of the Small Magellanic Cloud Be/X-ray binary SXP 7.92, as well as an overview of the last 18 years of observations from OGLE (Optical Gravitational Lensing Experiment), RXTE, Chandra and XMM-Newton. We revise the position of this source to RA(J2000) = 00:57:58.4, Dec(J2000) = −72:22:29.5 with a 1σ uncertainty of 1.5 arcsec, correcting the previously reported position by Coe et al. by more than 20 arcmin. We identify and spectrally classify the correct counterpart as a B1Ve star. The optical spectrum is distinguished by an uncharacteristically deep narrow Balmer series, with the Hα line in particular having a distinctive shell profile, i.e. a deep absorption core embedded in an emission line. We interpret this as evidence that we are viewing the system edge on and are seeing self-obscuration of the circumstellar disc. We derive an optical period for the system of 40.0 ± 0.3 d, which we interpret as the orbital period, and present several mechanisms to describe the X-ray/optical behaviour in the recent outburst, in particular the ‘flares'and ‘dips’ seen in the optical light curve, including a transient accretion disc and an elongated precessing disc

Phase resolved X-ray spectroscopy of HDE228766: Probing the wind of an extreme Of+/WNLha star

HDE228766 is a very massive binary system hosting a secondary component, which is probably in an intermediate evolutionary stage between an Of supergiant and an WN star. The wind of this star collides with the wind of its O8 II companion, leading to relatively strong X-ray emission. Measuring the orbital variations of the line-of-sight absorption toward the X-ray emission from the wind-wind interaction zone yields information on the wind densities of both stars. X-ray spectra have been collected at three key orbital phases to probe the winds of both stars. Optical photometry has been gathered to set constraints on the orbital inclination of the system. The X-ray spectra reveal prominent variations of the intervening column density toward the X-ray emission zone, which are in line with the expectations for a wind-wind collision. We use a toy model to set constraints on the stellar wind parameters by attempting to reproduce the observed variations of the relative fluxes and wind optical depths at 1 keV. The lack of strong optical eclipses sets an upper limit of about 68 degrees on the orbital inclination. The analysis of the variations of the X-ray spectra suggests an inclination in the range 54 - 61 degrees and indicates that the secondary wind momentum ratio exceeds that of the primary by at least a factor 5. Our models further suggest that the bulk of the X-ray emission arises from the innermost region of the wind interaction zone, which is from a region whose outer radius, as measured from the secondary star, lies between 0.5 and 1.5 times the orbital separation