Automatic malware signature extraction from runtime information
Number of patents in Portfolio can not be more than 2000
United States of America Patent
Stats
-
Jan 23, 2018
Issued Date -
N/A
app pub date -
Oct 31, 2016
filing date -
May 29, 2015
priority date (Note) -
In Force
status (Latency Note)
Importance
Abstract
A computer system receives a file and instruments an original code of the file in memory. The resulting instrumented code allows for collection of runtime information of the original code. An unpacking routine that includes one or more instructions that execute several times, modify memory locations, and execute instructions in the modified memory locations is identified. The unpacking routine is deemed a malware signature and incorporated into a malware pattern. An unpacking behavior diagram can also be generated from the runtime information.
First Claim
Family
International Classification(s)
Cited Art Landscape
Patent Citation Ranking
Recipient Email Address
Recipient Email Address
Comment
Recipient Email Address
Add to Portfolio(s)
To add this patent to one, or more, of your portfolios, simply click the add button.
This Patent is in these Portfolios:
Add to additional portfolios:
Last Refreshed On:
Changes done successfully