Heuristic detection of polymorphic computer viruses based on redundancy in viral code
US7266844B2 · kind B2 · utility
19Cited by
5References
21Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Sep 27, 2001 |
| Grant date | Sep 4, 2007 |
| Priority date | — |
| Expiry date | May 24, 2022 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/563
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
Computer programs are analysed for the occurrence of redundant program instructions of program instruction using uninitialised variables. If the number of such instructions exceeds a threshold level, then the computer program is treated as containing a computer virus. This technique is useful in identifying new and polymorphic viruses.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.