Creating generic rules in a high dimensional sparse feature space using negative feedback
US11550910B2 · kind B2 · utility
Assignee
Inventor
Key dates
| Filing date | Sep 30, 2019 |
| Grant date | Jan 10, 2023 |
| Priority date | — |
| Expiry date | May 11, 2041 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F16/285
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Systems and methods use negative feedback to create generic rules for a high dimensional sparse feature space. A system receives a set of fingerprints, where a fingerprint can be a set of features of a file. The fingerprints can be clustered according to similarity. For each cluster, a proto-rule is created that has a condition for each feature. The proto-rule is simplified using negative feedback to create a well-formed rule having a comparatively small subset of the conditions in the proto-rule that are useful in determining malware. The well-formed rule can be added to a set of rules used in a malware detection system.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.