The Boeing Company

Shaun Kospiah

Matthew S Bialek

Timothy M Lemm

Terrance J Kirk

Scott G Thompson

Brian Christopher Grubel

Timothy Mark Aldrich

Aaron R Davis

Brett W Snare

Timothy M Aldrich

A particular method includes generating, at a device, a first digital identifier of a first software component. The method also includes performing a comparison of the first digital identifier to one or more second digital identifiers in a database. The method further includes generating first data indicating recommended procedures to analyze the first software component based on the comparison.

Systems and methods of analyzing a software component

A particular method includes detecting, at a detection module, an indicator corresponding to a suspicious software component, where the indicator is detected based on monitored network data of a network system and based on a plurality of network behavior profiles. At least one of the network behavior profiles includes an ordered sequence of network actions. The method further includes determining, at an identification module, whether the indicator corresponds to any of the plurality of network behavior profiles. The method further includes generating output data in response to a determination that the indicator corresponds to a particular network behavior profile of the plurality of network behavior profiles.

Software network behavior analysis and identification system

A particular method includes initiating, at an analyzer, execution of a software component at a first computing device. The first computing device includes hardware components and sensors. The sensors are external to the hardware components. A first hardware component of the hardware components is coupled to a second hardware component of the hardware components. A first sensor of the sensors is configured to monitor communications between the first hardware component and the second hardware component. The method also includes receiving monitoring data, from the first sensor, regarding a communication between the first hardware component and the second hardware component. The method further includes analyzing first effects of executing the software component on the first computing device based at least partially on the monitoring data.

A particular method includes receiving, at a device, a request to analyze a software component. The request indicates a target operating system. The method also includes generating a virtual machine at a computing device. The virtual machine implements the target operating system. The method further includes executing the software component in the target operating system on the virtual machine and generating data indicating effects of executing the software component on the virtual machine.

A particular method includes executing a software component on a virtual machine executing at a computing device. The method also includes monitoring kernel level events of an operating system executing on the virtual machine and monitoring application level events of the operating system. The method further includes analyzing effects of executing the software component on the virtual machine based on the kernel level events and the application level events.

Growing community of inventors

Laurel, MD, United States of America

Shaun Kospiah