{"id":5606,"date":"2021-02-14T17:45:23","date_gmt":"2021-02-14T16:45:23","guid":{"rendered":"https:\/\/kinit.sk\/member\/martin-mocko\/"},"modified":"2026-01-12T17:03:06","modified_gmt":"2026-01-12T16:03:06","slug":"martin-mocko","status":"publish","type":"member","link":"https:\/\/kinit.sk\/sk\/clen\/martin-mocko\/","title":{"rendered":"Martin Mocko"},"content":{"rendered":"
\n

Martin is a research assistant focusing on information security, in particular malware analysis and detection, phishing and malicious behavior. He is also interested in data analysis, machine learning and deep learning. His research currently focuses on clustering of executable files and creating useful representations for machine learning models. <\/p>\n<\/div>\n\n

\n

He holds a Master\u2019s degree in Intelligent Systems from the Slovak University of Technology. During his studies, he received the Institute of Informatics at the Slovak Academy of Sciences award for excellent study performance. He is currently a PhD student at KInIT, doing his PhD at the Faculty Of Information Technology, Brno University of Technology.<\/p>\n<\/div>\n\n

\n

He has co-operated in research projects with \u010cSOB bank and CEAi. His Master\u2019s thesis focused on anomaly detection in the bank domain. He is a former member of PeWe (Personalized Web) research group. Currently he’s cooperating with an industry partner, ESET, to bring academic research closer to industry’s needs. In his free time he enjoys going to the gym, sauna, and various events that facilitate self-improvement in multiple aspects of life.<\/p>\n<\/div>\n\n

\n

PhD topic: Malware clustering Using Machine Learning<\/h3>\n<\/div>\n\n
\n

Supervising team:<\/strong> Daniela Chud\u00e1<\/a> (KInIT), Eset<\/a> (industry partner)<\/p>\n<\/div>\n\n

\n

Every day, hundreds of thousands of malicious software samples are created with the goal of either harming the victim\u2019s computer, stealing their data, or causing financial damages. To be able to combat the ever-evolving landscape of malware, we need to utilize machine learning solutions to achieve the desired speed, accuracy and scalability of protection. One particular problem in this domain where millions of binary files reside is clustering of existing and newly arriving samples while maintaining an acceptable level of speed and accuracy. <\/p>\n<\/div>\n\n

\n

In our proposal, we formulate the reasons for the large heterogeneity of malware samples, analyze the state of the art in malware clustering, and identify shortcomings of the state of the art research works. Very small and custom collected datasets, labeling problems, lack of consensus on how clustering solutions should be set up, different evaluation metrics and evaluation methodologies that lack addressing cluster size bias (random chance of achieving a good clustering) are all factors that contribute to wildly different conclusions. Furthermore, in the past few years, deep clustering and contrastive learning has been gaining a lot of attention in the research community, while the research works in the malware field have yet to catch up. We address some of the identified issues in our research questions and present the plan of our experiments which will provide answers to these questions.<\/p>\n<\/div>\n\n

\n
\n