The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jul. 19, 2022

Filed:

Oct. 05, 2020
Applicant:

Mcafee, Llc, San Jose, CA (US);

Inventors:

Kunal Mehta, Hillsboro, OR (US);

Sherin Mary Mathews, Santa Clara, CA (US);

Carl D. Woodward, Santa Clara, CA (US);

Celeste R. Fralick, Lubbock, TX (US);

Jonathan B. King, Hillsboro, OR (US);

Assignee:

McAfee, LLC, San Jose, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 21/56 (2013.01); G06N 3/08 (2006.01);
U.S. Cl.
CPC ...
G06F 21/56 (2013.01); G06N 3/08 (2013.01); G06F 2221/034 (2013.01);
Abstract

There is disclosed in one example a computer-implemented anti-ransomware method, including: selecting a file for inspection; assigning the file to a type class according to a file type identifier; receiving an expected byte correlation for the type class; computing, according to a byte distribution of the file, a byte correlation for the file; comparing, via statistical analysis, the byte correlation to the expected byte correlation; and determining that the file has been compromised, including determining that the file has a byte correlation that deviates from the expected byte correlation by more than a threshold, taking a ransomware remediation action for the file.


Find Patent Forward Citations

Loading…