The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Oct. 15, 2013

Filed:

Sep. 30, 2011
Applicants:

Jui Pang Wang, Banciao, TW;

Ming-tai Chang, Xizhi, TW;

Jui-chieh Wu, Sindian, TW;

Inventors:

Jui Pang Wang, Banciao, TW;

Ming-Tai Chang, Xizhi, TW;

Jui-Chieh Wu, Sindian, TW;

Assignee:

Trend Micro, Inc., Tokyo, JP;

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
G06F 21/00 (2013.01);
U.S. Cl.
CPC ...
Abstract

Detection and prevention of botnet behavior is accomplished by monitoring access request in a network. Each request includes a domain of content to access and a path of content to access, and each path includes a file name and query string. Once obtained, the query strings for each of these requests are normalized. A signature is then created for each of the normalized query strings. The obtained requests can then be grouped by signature. Once the requests have been grouped by signature, each grouping is examined to identify suspicious signatures based on common botnet behavior. Suspicious requests are used in back-end and front-end defenses against botnets.


Find Patent Forward Citations

Wang, Jui. (2013). Command and control channel detection with query string signature (U.S. Patent No. 8561188). U.S. Patent and Trademark Office. https://idiyas.com/patent/badge/8561188

Data source: USPTO (United States Patent and Trademark Office) public patent records. Weekly synchronization. How IDiyas builds this profile

Loading…