The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Jan. 10, 2017

Filed:

Dec. 18, 2014
Applicant:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Inventors:

Ryan C. Salsamendi, San Jose, CA (US);

Wei Xu, Santa Clara, CA (US);

Assignee:

Palo Alto Networks, Inc., Santa Clara, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01); G08B 23/00 (2006.01); G06F 21/56 (2013.01); G06F 17/30 (2006.01); G06F 12/14 (2006.01);
U.S. Cl.
CPC ...
G06F 21/561 (2013.01); G06F 17/30156 (2013.01); G06F 2221/033 (2013.01);
Abstract

Detecting duplicate malware samples is disclosed. A first guest clock is set to a first value in a first virtual machine instance. A first malware sample is executed in the first virtual machine instance. A second guest clock value is set to the first value in a second virtual machine instance. A second malware sample is executed in the second virtual machine instance. A determination is made as to whether the first malware sample and the second malware sample are the same, based at least in part on performing a comparison of attempted external contacts generated by executing each of the respective first and second malware samples.


Find Patent Forward Citations

Loading…