System for automated signature generation and refinement
US10944768B2 · kind B2 · utility
Assignee
Inventors
Key dates
| Filing date | Sep 17, 2018 |
| Grant date | Mar 9, 2021 |
| Priority date | — |
| Expiry date | Aug 7, 2039 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L63/1441
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
Systems and methods are provided for generating samples of network traffic and characterizing the samples to easily identify exploits. A first embodiment of the present disclosure can generate traffic between a sample generator and the target computing device based on a particular exploit. The traffic can be a plurality of samples of the exploit using an exploit script. The method can provide for collecting and storing the plurality of samples. These samples can then be used to characterize the exploit by identifying invariant portions and variable portions of the samples. The method can further provide for removing any artifacts from the samples. Regular expressions can be constructed based on the samples. Each regular expression can be tested and ranked according to metrics of efficiency and accuracy.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.