The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jul. 20, 2021

Filed:

Mar. 01, 2019
Applicant:

Acronis International Gmbh, Schaffhausen, CH;

Inventors:

Alexey Kostyushko, Moscow, RU;

Vladimir Strogov, Moscow, RU;

Serguei Beloussov, Costa del Sol, SG;

Stanislav Protasov, Moscow, RU;

Anastasia Pereberina, Moscow, RU;

Nikolay Grebennikov, Moscow, RU;

Assignee:

ACRONIS INTERNATIONAL GMBH, Schaffhausen, CH;

Attorneys:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/56 (2013.01); G06F 21/53 (2013.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); G06F 21/53 (2013.01); G06F 21/562 (2013.01); G06F 21/566 (2013.01);
Abstract

Disclosed herein are systems and method for correlating malware detections by endpoint devices and servers. In one aspect, an exemplary method comprises receiving, by a correlator, from one or more servers, one or more events collected without invasive techniques, one or more events collected using one or more invasive techniques, and one or more final verdicts, correlating the one or more events collected without invasive techniques with one or more events collected using the one or more invasive techniques, creating a suspicious pattern when an event of the one or more events collected without invasive techniques is correlated with an event of the one or more events collected using the one or more invasive techniques, and the event of the one or more events collected using one or more invasive techniques is used to detect a malware, and updating databases of one or more endpoint devices with created suspicious patterns.


Find Patent Forward Citations

Loading…