BSidesSF 2026 - Demystifying File Similarity for Malware Detection (Udbhav Prasad)

This talk, presented by Udbhav Prasad, explores file similarity techniques that play a critical role in detecting polymorphic malware threats which traditional exact-matching methods often fail to identify. The speaker demonstrates the effectiveness of various similarity algorithms, including TLSH, ssdeep, and XGBoost, using practical examples that feature real modification techniques and malware families. The session provides valuable insights into enhancing malware detection strategies through advanced analytical methods.