The latest articles on DEV Community by Tejas (@tejas_yaml). https://dev.to/tejas_yaml https://media2.dev.to/dynamic/image/width=90,height=90,fit=cover,gravity=auto,format=auto/https:%2F%2Fdev-to-uploads.s3.us-east-2.amazonaws.com%2Fuploads%2Fuser%2Fprofile_image%2F3990640%2Fd48128ba-a82e-47a4-9c56-95ad13a57e6b.jpg https://dev.to/tejas_yaml en Tejas Sun, 05 Jul 2026 12:47:34 +0000 https://dev.to/tejas_yaml/tracetree-mapping-malware-behavior-to-catch-supply-chain-attacks-13p9 https://dev.to/tejas_yaml/tracetree-mapping-malware-behavior-to-catch-supply-chain-attacks-13p9 <p>We just released an important update: retraining our Random Forest model on real malware behavior from the CIC-MalMem-2022 dataset. The challenge was mapping 58,000 complex memory dump traces into a clean 10-feature vector space that our syscall graph extractor produces.</p> <h2> How it works: </h2> <ul> <li>Sandbox target in Docker (network dropped)</li> <li>Trace every syscall with strace -t -f</li> <li>Parse into a NetworkX directed graph</li> <li>Extract 10 features (process count, network connections, file operations, severity scores, etc.)</li> <li>Feed into RandomForest for classification</li> </ul> <p>We also resolved module-level import cycles and pinned skops for safer model deserialization in production.</p> <p>Looking for collaborators who understand malware behavior, syscall parsing, or want to contribute detection rules. Open to issues and PRs.</p> <p><a href="https://github.com/tejasprasad2008-afk/TraceTree" rel="noopener noreferrer">https://github.com/tejasprasad2008-afk/TraceTree</a></p> ai opensource security cybersecurity