Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses

US8166549B2 · kind B2 · utility

Assignee

• Stragent, LLC · US

Inventors

• Walter Clark Milliken · Dover, US
• William Timothy Strayer · Newton, US
• Stephen D. Milligan · Blaine, US
• Luis A. Sanchez · Fairport, US
• Craig Partridge · Corona, US

Key dates

• Filing date: Apr 18, 2010
• Grant date: Apr 24, 2012
• Expiry date: Apr 18, 2030

Classification

• Technology area (CPC —): General

Abstract

A system (200) detects transmission of potentially malicious packets. The system (200) receives, or otherwise observes, packets and generates hash values based on variable-sized blocks of the packets. The system (200) then compares the generated hash values to hash values associated with prior packets. The system (200) determines that one of the received packets is a potentially malicious packet when one or more of the generated hash values associated with the received packet match one or more of the hash values associated with the prior packets.