Method of polymorphic detection

Details Method of polymorphic detection Method of polymorphic detection

2005-03-30

2011-10-25

Reza, Mohammad W (Department: 2436)

Information security

Monitoring or scanning of software or data including attack...

Intrusion detection

C726S023000, C713S180000, C713S188000

Reexamination Certificate

active

08046834

ABSTRACT:
A computer program signature may be determined based on the function flow grammar for a given source code. The function flow grammar may be determined based on reduced control flow graphs generated based on control flow graphs for each function within the source code. A polymorph of a computer program may be detected by comparing the determined computer program signature with computer program signatures, which may be included in a database.

REFERENCES:
patent: 5684875 (1997-11-01), Ellenberger
patent: 5696822 (1997-12-01), Nachenberg
patent: 5826013 (1998-10-01), Nachenberg
patent: 5964889 (1999-10-01), Nachenberg
patent: 6067410 (2000-05-01), Nachenberg
patent: 6775780 (2004-08-01), Muttik
patent: 6851057 (2005-02-01), Nachenberg
patent: 6971019 (2005-11-01), Nachenberg
patent: 6973577 (2005-12-01), Kouznetsov
patent: 7502939 (2009-03-01), Radatti
patent: 2004/0083366 (2004-04-01), Nachenberg et al.
patent: 2004/0181687 (2004-09-01), Nachenberg et al.
patent: 2004/0236884 (2004-11-01), Beetz
patent: 2005/0028002 (2005-02-01), Christodorescu et al.
patent: 2005/0028146 (2005-02-01), Quick
patent: 2005/0086502 (2005-04-01), Rayes et al.
patent: 2005/0283838 (2005-12-01), Saito
Christodorescu, M. et al., “Semantics-Aware Malware Detection,” IEEE Symposium on Security and Privacy, May 9, 2005.
Halvar Flake, “Structural Comparison of Executable Objects”, AbsInt Angewandte Informatik BmbH. 2000.
Sanjay Goel, “Kolmogorov Compexity Estimates for Detection of Viruses in Biologically Inspired Security Systems: A Comparison With Traditional Approaches”, Complexity Journal, vol. 9, issue 2, Nov.-Dec. 2003, Special Issue, pp. 1-45.
Todd Sabin, “Comparing binaries with graph isomorphisms”, pp. 1-24 http://www.bindview.com/support/razor/papers/2004/comparing—binaries.cfm.
Understanding Heuristics: Symantec's Bloodhound Technology, Symantec White Paper Series, vol. XXXIV.
Understanding and Managing polymorphic Viruses, The Symantec Enterprise Papers, vol. XXX.
Péter Ször et al., “Hunting for Metamorphic”, Symantec Security Response, White Paper, pp. 1-24.

Affiliated with

Also associated with

Rating

Method of polymorphic detection does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with Method of polymorphic detection, we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and Method of polymorphic detection will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-4271245