https://github.com/rushter/hexora
I made a new library to detect malicious and harmful behaviour in Python scripts. It uses static analysis with semantic modeling. Even when the code is pretty obfuscated, it can still detect it.For example, it can infer that getattr(sys.modules["built"+"ins"], "".join(reversed(["al","ev"])))("1+1") Is basically: eval("1+1"). Currently, I'm testing it on public files where some of them...
https://github.com/rushter/hexora
I made a new library to detect malicious and harmful behaviour in Python scripts.There are alternative libraries, but they usually rely on regexes, which can be fragile and tricked. My library uses AST and tracks some of the obfuscation techniques, such as import/call reassignment.Currently, I'm testing it on public files where some of them implement malicious behavior, as well as past...
Most of my posts are about Python's internals and some security stuff
"GET /counter.svg HTTP/1.1" 200 565 "-" "github-camo (62249a1c)"
I also don't have plans to use it in the future. I wanted to demonstrate the concept.
Which framework do you use for deep learning? It can allocate some object on its own.
Can you give me some stats when using a model and after it's no longer in use and can't be accessible? You can get it by calling the sys._debugmallocstats() function.
I don't think system allocators are clever enough to process and allocate 100-500k of very small objects each minute when Python is performing something very intensive.
It's a pretty standard way to speedup allocation for dynamic languages. Game developers use similar techniques as well.
I have some stats on Python's allocator:
https://rushter.com/blog/python-object-allocation-statistics...