Inline malware detection

US11336664B2 · kind B2 · utility

Assignee

• Palo Alto Networks, Inc. · US

Inventors

• William Redington Hewlett, II · Mountain View, US
• Suiqiang Deng · Fremont, US
• Sheng Yang · Santa Clara, US
• Ho Yu Lam · Santa Clara, US

Key dates

• Filing date: Jul 19, 2019
• Grant date: May 17, 2022
• Expiry date: Jan 4, 2040

Classification

• Technology area (CPC —): General

Abstract

Detection of malicious files is disclosed. A set comprising one or more sample classification models is stored on a networked device. N-gram analysis is performed on a sequence of received packets associated with a received file. Performing the n-gram analysis includes using at least one stored sample classification model. A determination is made that the received file is malicious based at least in part on the n-gram analysis of the sequence of received packets. In response to determining that the file is malicious, propagation of the received file is prevented.