Palo Alto Networks, Inc.

Jin Chen

Bo Qu

Taojie Wang

Tao Yan

Stefan Achleitner

Yu Fu

Zhibin Zhang

Lei Xu

Mengying Hu

Yue Guan

Various techniques for detecting obfuscated web skimmers based on encoding and hooking are disclosed. In some embodiments, a system/process/computer program product for detecting obfuscated web skimmers based on encoding and hooking includes receiving a sample; performing static analysis on the sample using encoded web skimmer detection rules (e.g., encoded using a plurality of encoding methods); performing dynamic analysis on the sample using hooking; and detecting an obfuscated web skimmer based on results of the static analysis using the encoded web skimmer detection rules and/or the dynamic analysis using hooking.

Detecting obfuscated web skimmers based on encoding and hooking

The present application discloses a method, system, and computer system for detecting malicious SQL or command injection strings. The method includes obtaining an SQL or command injection string and determining whether the command injection string is malicious based at least in part on a machine learning model.

Network attack detection with targeted feature extraction from exploit tools

Detection of malicious JavaScript based on automated user interaction emulation is disclosed. A malware sample is executed in an instrumented virtual environment. Dynamic behavior is triggered based on emulated user interactions.

Malicious JS detection based on automated user interaction emulation

Growing community of inventors

San Jose, CA, United States of America

Jin Chen