Mandiant Corporation

Jay Gibble

Philip Tully

Michael Sikorski

Matthew Haigh

An automated system and method for analyzing a set of extracted strings from a binary is disclosed including processing the binary with a string-extraction logic that can locate strings within the binary and output an extracted string set for use in cybersecurity analysis. The logic retrieves a set of training data comprising a plurality of previously analyzed extracted string sets where each element of the previously analyzed extracted string set comprises at least one extracted string and a corresponding previously determined threat prediction score. A prediction model based upon the training data is generated and the extracted string set is processed by the prediction model to determine a threat prediction score for each string. Ranking of the located strings is based upon the determined threat prediction score, and an output of a ranked string list is generated.

Growing community of inventors

Leesburg, VA, United States of America

Jay Gibble