<?xml version="1.0" encoding="utf-8" standalone="yes"?><rss version="2.0" xmlns:atom="http://www.w3.org/2005/Atom"><channel><title>Malware-Research on CuraSec</title><link>https://curasec.metacog.co.kr/tags/malware-research/</link><description>Recent content in Malware-Research on CuraSec</description><generator>Hugo</generator><language>en-us</language><lastBuildDate>Mon, 26 Oct 2026 18:39:19 +0000</lastBuildDate><atom:link href="https://curasec.metacog.co.kr/tags/malware-research/index.xml" rel="self" type="application/rss+xml"/><item><title>SEMPRE: LLM-Driven Automated Protocol Reverse Engineering Framework</title><link>https://curasec.metacog.co.kr/insights/2026-10-26-sempre-semantic-aware-protocol-reverse-engineering-via-consi/</link><pubDate>Mon, 26 Oct 2026 18:39:19 +0000</pubDate><guid>https://curasec.metacog.co.kr/insights/2026-10-26-sempre-semantic-aware-protocol-reverse-engineering-via-consi/</guid><description>&lt;ul>
&lt;li>&lt;strong>Engineer — Learn:&lt;/strong> Novel automated approach to reversing undocumented binary protocols using LLM reasoning plus taint-flow analysis — worth tracking for teams that need to analyze proprietary or malware-related protocol formats, but no shipping tool or immediate engineering action yet.&lt;/li>
&lt;li>&lt;strong>SOC/IR — Learn:&lt;/strong> The framework&amp;rsquo;s demonstrated utility against real-world botnet C2 protocols is relevant to analysts who reverse-engineer malware traffic, but this is academic research without a released tool or ready-to-use detection artifacts today.&lt;/li>
&lt;li>&lt;strong>Leader — Skip&lt;/strong>&lt;/li>
&lt;/ul></description></item></channel></rss>