The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 24, 2019

Filed:

Oct. 23, 2015
Applicant:

Fireeye, Inc., Milpitas, CA (US);

Inventors:

Michael Vincent, Sunnyvale, CA (US);

Ali Mesdaq, San Jose, CA (US);

Emmanuel Thioux, Santa Cruz, CA (US);

Abhishek Singh, Morgan Hill, CA (US);

Sal Vashisht, Union City, CA (US);

Assignee:

FireEye, Inc., Milpitas, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 12/14 (2006.01); G06F 11/30 (2006.01); G06F 21/56 (2013.01); H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
G06F 21/566 (2013.01); G06F 21/562 (2013.01); H04L 63/145 (2013.01); H04L 63/1416 (2013.01); G06F 2221/034 (2013.01);
Abstract

According to one embodiment, a system of detecting malware in a specimen of computer content or network traffic comprises a processor and a memory. The memory includes a first analysis logic and a second analysis logic that may be executed by the processor. Upon execution, the first analysis logic performs a static analysis in accordance with an analysis plan to identify one or more suspicious indicators associated with malware and one or more characteristics related to processing of the specimen. The second analysis logic performs a second analysis in accordance with the analysis plan by processing of the specimen in a virtual machine and monitoring for one or more unexpected behaviors during virtual processing of the specimen in the virtual machine. The analysis plan may be altered based on the results of one of the analyzes.


Find Patent Forward Citations

Loading…