Hash-based systems and methods for detecting and preventing transmission of polymorphic network worms and viruses
US8272060B2 · kind B2 · utility
15Cited by
723References
38Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Apr 18, 2010 |
| Grant date | Sep 18, 2012 |
| Priority date | — |
| Expiry date | Apr 18, 2030 |
Classification
- Technology area (CPC H)Electricity
- CPC primaryH04L51/212
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
A system (200) detects transmission of potentially malicious packets. The system (200) receives, or otherwise observes, packets and generates hash values based on variable-sized blocks of the packets. The system (200) then compares the generated hash values to hash values associated with prior packets. The system (200) determines that one of the received packets is a potentially malicious packet when one or more of the generated hash values associated with the received packet match one or more of the hash values associated with the prior packets.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.