The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Apr. 02, 2024

Filed:

Sep. 10, 2021
Applicant:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Inventors:

Jun Wang, Sunnyvale, CA (US);

Wei Xu, Cupertino, CA (US);

Assignee:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/56 (2013.01); H04L 9/40 (2022.01);
U.S. Cl.
CPC ...
H04L 63/1416 (2013.01); G06F 21/564 (2013.01); G06F 21/566 (2013.01); H04L 63/1425 (2013.01); H04L 63/145 (2013.01);
Abstract

A malware profile is received. The malware profile comprises a set of n-tuples of attributes that describe one or more activities associated with executing a copy of a known malicious application that is associated with the malware profile. A set of one or more log entries is analyzed for a set of entries that matches the malware profile. Based at least in part on identifying the set of entries matching the malware profile, a determination is made that a host was compromised. In response to determining that the host has been compromised, a remedial action is taken with respect to the host.


Find Patent Forward Citations

Loading…