Rendering an object using multiple versions of an application in a single process for dynamic malware analysis
US10803168B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Sep 17, 2019 |
| Grant date | Oct 13, 2020 |
| Priority date | — |
| Expiry date | Sep 17, 2039 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/033
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Techniques for rendering an object using multiple versions of an application in a single process for dynamic malware analysis are disclosed. In some embodiments, a system, process, and/or computer program product for rendering an object using multiple versions of an application in a single process for dynamic malware analysis includes receiving a sample at a cloud security service, in which the sample includes an embedded object; detonating the sample using a browser executed in an instrumented virtual machine environment; and rendering the embedded object using a plurality of versions of an application in a single process during a dynamic malware analysis using the instrumented virtual machine environment.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.