The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Mar. 22, 2016

Filed:

Mar. 05, 2014
Applicant:

Sandia Corporation, Albuquerque, NM (US);

Inventors:

Ken Chiang, San Francisco, CA (US);

Levi Lloyd, Livermore, CA (US);

Jonathan Crussell, Pleasanton, CA (US);

Benjamin Sanders, Dublin, CA (US);

Jeremy Lee Erickson, Fremont, CA (US);

David Jakob Fritz, Fort Collins, CO (US);

Assignee:

Sandia Corporation, Albuquerque, NM (US);

Attorney:
Primary Examiner:
Assistant Examiner:
Int. Cl.
CPC ...
H04L 29/06 (2006.01);
U.S. Cl.
CPC ...
H04L 63/14 (2013.01);
Abstract

Embodiments of the invention describe systems and methods for malicious software detection and analysis. A binary executable comprising obfuscated malware on a host device may be received, and incident data indicating a time when the binary executable was received and identifying processes operating on the host device may be recorded. The binary executable is analyzed via a scalable plurality of execution environments, including one or more non-virtual execution environments and one or more virtual execution environments, to generate runtime data and deobfuscation data attributable to the binary executable. At least some of the runtime data and deobfuscation data attributable to the binary executable is stored in a shared database, while at least some of the incident data is stored in a private, non-shared database.


Find Patent Forward Citations

Loading…