首页> 外国专利> Leveraging behavior-based rules for malware family classification

Leveraging behavior-based rules for malware family classification

机译:利用基于行为的规则进行恶意软件家族分类

摘要

According to one embodiment, a malware classification scheme operating with an electronic device, configured with one or more hardware processors and a memory that stores the software handling the malware classification scheme that is conducted through analysis of behavior-based rules, is described. This malware classification scheme (i) conducts a determination whether a sequence of rules correspond to potential malicious behaviors detected during analysis of a malware sample within one or more virtual machines, and in response to determining that the sequence of rules corresponds to potential malicious behaviors, (ii) conducts an attempt to classify the malware sample to at least one known malware family based on an analysis of the sequence of rules.
机译:根据一个实施例,描述了一种与电子设备一起操作的恶意软件分类方案,该恶意软件分类方案配置有一个或多个硬件处理器以及存储通过基于行为的规则的分析而进行的处理该恶意软件分类方案的软件的存储器。此恶意软件分类方案(i)确定规则序列是否对应于在一个或多个虚拟机中分析恶意软件样本期间检测到的潜在恶意行为,并响应于确定规则序列对应于潜在恶意行为, (ii)基于对规则序列的分析,尝试将恶意软件样本分类为至少一个已知的恶意软件家族。

著录项

  • 公开/公告号US10176321B2

    专利类型

  • 公开/公告日2019-01-08

    原文格式PDF

  • 申请/专利权人 FIREEYE INC.;

    申请/专利号US201514967180

  • 申请日2015-12-11

  • 分类号G06F21/00;G06F21/56;

  • 国家 US

  • 入库时间 2022-08-21 12:04:23

相似文献

  • 专利
  • 外文文献
  • 中文文献
获取专利

客服邮箱:kefu@zhangqiaokeyan.com

京公网安备:11010802029741号 ICP备案号:京ICP备15016152号-6 六维联合信息科技 (北京) 有限公司©版权所有
  • 客服微信

  • 服务号