Identification of obfuscated computer items using visual algorithms
US9690935B2 · kind B2 · utility
154Cited by
4References
18Claims
0Family size
Assignee
Inventors
Key dates
| Filing date | Aug 19, 2013 |
| Grant date | Jun 27, 2017 |
| Priority date | — |
| Expiry date | Aug 19, 2033 |
Classification
- Technology area (CPC G)Physics
- CPC primaryG06F21/566
- WIPO fieldComputer technology
- WIPO sectorElectrical engineering
Abstract
A method to identify character strings associated with potentially malicious software items. The method includes employing a visual algorithm to translate one or more characters of a character string into corresponding characters in a visual ID for use in grouping and comparing computer items having similar visual IDs, such as a reference ID for a computer item that is known to be non-malicious. The method may, among other things, elucidate an attacker's attempt to obfuscate malicious software by using file names that are very similar to those used for harmless files.
Source: USPTO / EPO open patent data. Objective bibliographic and citation counts.