The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.
The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.
Patent No.:
Date of Patent:
Apr. 29, 2014
Filed:
Apr. 18, 2008
Taejoon Park, Seoul, KR;
Kang Geun Shin, Ann Arbor, MI (US);
Xin HU, Ann Arbor, MI (US);
Abhijit Bose, Ann Arbor, MI (US);
Taejoon Park, Seoul, KR;
Kang Geun Shin, Ann Arbor, MI (US);
Xin Hu, Ann Arbor, MI (US);
Abhijit Bose, Ann Arbor, MI (US);
Samsung Electronics Co., Ltd., Suwon-si, KR;
The Regents of the University of Michigan, Ann Arbor, MI (US);
Abstract
A method and apparatus for modeling a behavior of a computer program that is executed in a computer system is described. The method and apparatus for modeling a behavior of a computer program may be used to detect a malicious program based on the behavior of the computer program. A method includes collecting system use information about resources of the computer system the computer program uses; extracting a behavior signature of the computer program from the collected system use information; and encoding the extracted behavior signature to generate a behavior vector. As a result, behaviors of a particular computer program may be modeled to enable a malicious program detection program and to determine whether the computer program is either normal or malicious.