The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Jul. 17, 2018
Filed:
Nov. 05, 2013
The Trustees of Columbia University IN the City of New York, New York, NY (US);
Lakshminarasimhan Sethumadhavan, New York, NY (US);
John Demme, New York, NY (US);
Jared Schmitz, New York, NY (US);
Adrian Tang, New York, NY (US);
Sal Stolfo, New York, NY (US);
Matthew Maycock, New York, NY (US);
Lakshminarasimhan Sethumadhavan, New York, NY (US);
John Demme, New York, NY (US);
Jared Schmitz, New York, NY (US);
Adrian Tang, New York, NY (US);
Sal Stolfo, New York, NY (US);
Matthew Maycock, New York, NY (US);
The Trustees of Columbia University in the City of New York, New York, NY (US);
Abstract
Disclosed are devices, systems, apparatus, methods, products, media and other implementations, including a method that includes obtaining hardware-based micro-architectural data, including hardware-based micro-architectural counter data, for a hardware device executing one or more processes, and determining based, at least in part, on the hardware-based micro-architectural data whether at least one of the one or more processes executing on the hardware device corresponds to a malicious process. In some embodiments, determining based on the hardware-based micro-architectural data whether the at least one of the one or more processes corresponds to a malicious process may include applying one or more machine-learning procedures to the hardware-based micro-architectural data to determine whether the at least one of the one or more processes corresponds to the malicious process.