asm_to_csv/json_feature2json.py

94 lines
4.1 KiB
Python
Raw Normal View History

2024-04-17 15:54:00 +08:00
import os
2024-04-20 18:20:20 +08:00
from my_utils import save_json, load_json, setup_logger, multi_thread_order, THREAD_HALF, THREAD_FULL, continuation_json
2024-04-17 15:54:00 +08:00
from bert.obtain_inst_vec import bb2vec
import multiprocessing
from tqdm import tqdm
import warnings
2024-04-18 16:44:31 +08:00
from datetime import datetime
2024-04-20 13:20:21 +08:00
import concurrent.futures
2024-04-17 15:54:00 +08:00
2024-04-20 13:20:21 +08:00
warnings.filterwarnings("ignore")
2024-04-17 15:54:00 +08:00
2024-04-20 13:39:14 +08:00
def addr2vec(base_file_path, index):
2024-04-17 15:54:00 +08:00
# 从路径拆分文件名与路径
file_name = str(os.path.basename(base_file_path))
file_path = str(os.path.dirname(base_file_path))
# 如果不是路径则开始转化
if file_name:
2024-04-20 13:20:21 +08:00
# 忽略已生成的文件
if os.path.exists(os.path.join(file_path, 'final', file_name)):
return
2024-04-17 15:54:00 +08:00
file_json = load_json(base_file_path)
# 确保存在基础文件而不存在特征文件的情况
feature_json = load_json(os.path.join(file_path, 'feature', file_name)) if os.path.exists(
os.path.join(file_path, 'feature', file_name)) else None
if feature_json is not None:
2024-04-20 18:20:20 +08:00
# 对于长度过长的文件先不处理
if len(feature_json) > 10000:
data = {
'file_name': file_name,
'feature_len': len(feature_json)
}
continuation_json(os.path.join(f'./out/json/too_long_{sample_type}.json'), data)
return
2024-04-20 13:20:21 +08:00
# 多线程预测bert
2024-04-20 18:20:20 +08:00
feature_set = {}
# with multiprocessing.Pool(processes=os.cpu_count()) as pool:
2024-04-20 13:20:21 +08:00
# try:
2024-04-20 18:20:20 +08:00
# results = list(tqdm(pool.imap_unordered(bb2vec, [item for item in feature_json]),
# total=len(feature_json),
# desc=f'{file_name} Progress:{index}/{json_files_len} ',
# leave=True,
# dynamic_ncols=True))
# for result in results:
2024-04-20 13:20:21 +08:00
# feature_set[result[0]] = result[1]
# except Exception as e:
# logger.error(f"bert 解析出错 {file_name}{e}")
2024-04-20 18:20:20 +08:00
# debug
try:
for index, feature in tqdm(enumerate(feature_json), total=len(feature_json)):
addr, feature = bb2vec(feature)
feature_set[addr] = feature
except Exception as e:
print(index)
print(e)
print(feature['opcode'])
2024-04-20 13:20:21 +08:00
try:
for item in file_json['acfg_list']:
bb_feature_addr_list = item['block_features']
item['block_features'] = [feature_set[key] for key in bb_feature_addr_list]
except Exception as e:
logger.error(f"地址对应出错{file_name}, {e}")
2024-04-20 18:20:20 +08:00
return
2024-04-17 15:54:00 +08:00
save_json(os.path.join(file_path, 'final', file_name), file_json)
2024-04-20 13:20:21 +08:00
2024-04-17 15:54:00 +08:00
else:
logger.error(f'文件{file_name}不存在特征文件')
return
if __name__ == '__main__':
logger = setup_logger('feature2json', './log/feature2json.log')
2024-04-20 13:20:21 +08:00
sample_type = 'benign'
2024-04-18 16:44:31 +08:00
# json_path = os.path.join(f'./out/json/{sample_type}')
2024-04-17 15:54:00 +08:00
json_path = os.path.join(f'./out/json/{sample_type}')
2024-04-20 18:20:20 +08:00
# json_files = os.listdir(json_path)
json_files = ['1710ae16c54ac149f353ba58e752ba7069f88326e6b71107598283bd0fffcbd6.jsonl']
2024-04-20 13:39:14 +08:00
json_files_len = len(json_files)
2024-04-18 16:44:31 +08:00
now = datetime.now()
formatted_now = now.strftime("%Y-%m-%d %H:%M:%S")
print("start time:", formatted_now)
# with multiprocessing.Pool(processes=os.cpu_count()) as pool:
# result = list(tqdm(pool.imap_unordered(addr2vec, [os.path.join(json_path, file) for file in json_files[:1] if os.path.isfile(os.path.join(json_path, file))]),
# total=len(json_files)))
2024-04-20 13:20:21 +08:00
# multi_thread_order(addr2vec, [os.path.join(json_path, file) for file in json_files if
# os.path.isfile(os.path.join(json_path, file))], thread_num=THREAD_FULL)
2024-04-20 13:39:14 +08:00
for index, json_file in enumerate(json_files):
2024-04-20 13:20:21 +08:00
if os.path.isfile(os.path.join(json_path, json_file)):
2024-04-20 13:39:14 +08:00
addr2vec(os.path.join(json_path, json_file), index)