Postgres Extension for MalwareDB

This is an attempt to use Rust for the similarity functions used by MalwareDB.

The similarity functions:

• SSDeep: provided by the fuzzyhash crate.
• LZJD: provided by the malwaredb-lzjd crate.
• TLSH: provided by the tlsh-fixed crate.

Goals:

• Enable easier deployment of Malware DB.
• Get the benefits Rust has to offer on the Postgres side.
• Ensure the functions work across Postgres versions.

MalwareDB-pg is currently a work-in-progress.

Compiling

This project uses pgrx. Please refer to their project page for prerequisites.

1. Install pgrx: cargo install --locked cargo-pgrx
2. Initialize pgrx: cargo pgrx init
3. Run tests: cargo pgrx test
4. Try the module: cargo pgrx run, then run create extension malwaredb_pg;
5. Package the module: cargo pgrx package