In order to show how machine learning fits into the big picture of malware analysis, we obviously need to first know what this picture is.  While there are many different ways of looking at it, I am going to approach it by first defining who the various classes of “analysts” are (the reason for the quotes will become apparent shortly), the tasks they perform, and the knowledge they need to generate.

Continue reading →