Investigators at George Mason University have invented software that detects malware by grouping similar malware (based on malware instructions) into single families and creating a single signature for that family using blockmodeling.