System and method for mining execution traces with finite...

Details System and method for mining execution traces with finite... System and method for mining execution traces with finite...

2006-07-04

2006-07-04

Hirl, Joseph P. (Department: 2129)

Data processing: artificial intelligence

Knowledge processing system

C706S014000, C706S012000

Reexamination Certificate

active

07072876

ABSTRACT:
A system and method by which novel, malicious execution traces may be detected by applying a combination of finite automation and heuristic analysis techniques. Such execution traces may be obtained by instrumenting system-level operating system calls, as well as by other techniques, such as, but not limited to, reading error log files, such as Windows NT event logs. With proper instrumentation, known good and known malicious programs may be run and their execution traces monitored. From such monitoring, a model may be derived, which can indicate those execution traces typically associated with malicious software. With this information, novel malicious programs which invoke execution traces similar to known malicious traces may be detected, and such programs may be stopped before significant damage can occur.

REFERENCES:
patent: 6668249 (2003-12-01), Kase et al.
patent: 6742015 (2004-05-01), Bowman-Amuah
patent: 6751661 (2004-06-01), Geddes
patent: 6799169 (2004-09-01), Coffman et al.
patent: 2003/0121027 (2003-06-01), Hines

Affiliated with

Also associated with

Rating

System and method for mining execution traces with finite... does not yet have a rating. At this time, there are no reviews or comments for this patent.

If you have personal experience with System and method for mining execution traces with finite..., we encourage you to share that experience with our LandOfFree.com community. Your opinion is very important and System and method for mining execution traces with finite... will most certainly appreciate the feedback.

Rate now

Comments { 0 }

Profile ID: LFUS-PAI-O-3597153