Classifying malware by order of network behavior artifacts
US9489514B2 · kind B2 · utility
12Cited by
9References
20Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Oct 6, 2014 |
| Grant date | Nov 8, 2016 |
| Priority date | — |
| Expiry date | Jan 17, 2035 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F2221/034
- WIPO fieldDigital communication
- WIPO sectorElectrical engineering
Abstract
The present invention generally relates to systems and methods for classifying executable files as likely malware or likely benign. The techniques utilize temporally-ordered network behavioral artifacts together with machine learning techniques to perform the classification. Because they rely on network behavioral artifacts, the disclosed techniques may be applied to executable files with obfuscated code.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.