kaiju
kaiju copied to clipboard
CERT Kaiju function hashing performance and optional hashes
This is a reminder to ourselves that CERT Kaiju function hashing is still a fairly expensive auto-analysis step. For example in one file, we spent 49 seconds in hashing, with the only more expensive analyzer being "x86 Constant Reference Analyzer" at 61 seconds, and our disassembly improvements (now) at 28 seconds.
There are some hashes in the CERT function hashing code that should perhaps be optional, and we should review that code for any obvious opportunities to improve performance.