The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Dec. 15, 2015

Filed:

Aug. 23, 2012
Applicants:

Moheeb Abu Rajab, Santa Clara, CA (US);

Xin Zhao, Palo Alto, CA (US);

Niels Provos, Mountain View, CA (US);

Inventors:

Moheeb Abu Rajab, Santa Clara, CA (US);

Xin Zhao, Palo Alto, CA (US);

Niels Provos, Mountain View, CA (US);

Assignee:

Google Inc., Mountain View, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01); G06F 21/56 (2013.01); G06F 21/57 (2013.01); G06F 21/55 (2013.01); G06F 21/50 (2013.01);
U.S. Cl.
CPC ...
H04L 63/1433 (2013.01); G06F 21/50 (2013.01); G06F 21/552 (2013.01); G06F 21/56 (2013.01); G06F 21/57 (2013.01); G06F 21/577 (2013.01); H04L 63/145 (2013.01); H04L 63/1491 (2013.01);
Abstract

Systems and methods for automatically analyzing and predicting behavior of binary executable programs are provided. A virtual machine receives a URL or content based feature corresponding to a binary executable program and the virtual machine analyzes the behavior of the binary executable program. The safety information of the binary executable program is determined based on the analysis report generated by the virtual machine and its impact on the virtual machine. A binary explorer selects a URL or content based feature corresponding to the binary executable program to be analyzed. A binary analyzer automatically records the behavior of the binary executable program to generate a report containing safety information describing the interaction occurred between the binary executable program and the analysis virtual machine. A result interpreter determines and predicts whether the binary executable program is safe based on the information generated by the binary analyzer.


Find Patent Forward Citations

Loading…