The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 10, 2019

Filed:

Mar. 08, 2017
Applicant:

Intel Corporation, Santa Clara, CA (US);

Inventors:

Li Chen, Hillsboro, OR (US);

Ravi L. Sahita, Beaverton, OR (US);

Assignee:

Intel Corporation, Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/55 (2013.01); G06F 21/52 (2013.01); G06F 21/56 (2013.01); G06F 11/36 (2006.01); G06F 16/901 (2019.01); G06F 11/28 (2006.01);
U.S. Cl.
CPC ...
G06F 21/562 (2013.01); G06F 11/3692 (2013.01); G06F 16/9024 (2019.01); G06F 21/52 (2013.01); G06F 21/552 (2013.01); G06F 21/566 (2013.01);
Abstract

In one embodiments, an apparatus includes: an execution circuit to execute a program; a monitor circuit to monitor the program execution to obtain information regarding a plurality of control transfers incurred during the execution of the program; a graph generation circuit, based on the information, to generate a plurality of control flow graphs each associated with a portion of the execution of the program; a statistic generation circuit to calculate a plurality of feature vectors each associated with one of the plurality of control flow graphs, each of the plurality of feature vectors including a plurality of graph statistics based on the associated control flow graph; and a comparison circuit to compare at least some of the plurality of graph statistics of one or more of the plurality of feature vectors to corresponding graph statistics of a statistical model of the execution of the program, to identify whether an anomaly has occurred in the execution of the program. Other embodiments are described and claimed.


Find Patent Forward Citations

Loading…