The patent badge is an abbreviated version of the USPTO patent document. The patent badge does contain a link to the full patent document.

The patent badge is an abbreviated version of the USPTO patent document. The patent badge covers the following: Patent number, Date patent was issued, Date patent was filed, Title of the patent, Applicant, Inventor, Assignee, Attorney firm, Primary examiner, Assistant examiner, CPCs, and Abstract. The patent badge does contain a link to the full patent document (in Adobe Acrobat format, aka pdf). To download or print any patent click here.

Date of Patent:
Apr. 17, 2018

Filed:

Aug. 12, 2016
Applicant:

Cylance Inc., Irvine, CA (US);

Inventors:

Michael Wojnowicz, Irvine, CA (US);

Glenn Chisholm, Irvine, CA (US);

Matthew Wolff, Newport Beach, CA (US);

Derek A. Soeder, Irvine, CA (US);

Xuan Zhao, Irvine, CA (US);

Assignee:

Cylance Inc., Irvine, CA (US);

Attorney:
Primary Examiner:
Int. Cl.
CPC ...
G06F 11/00 (2006.01); G06F 12/14 (2006.01); G06F 12/16 (2006.01); G08B 23/00 (2006.01); G06F 21/56 (2013.01); G06N 3/08 (2006.01);
U.S. Cl.
CPC ...
G06F 21/565 (2013.01); G06F 21/562 (2013.01); G06N 3/08 (2013.01); G06F 21/56 (2013.01); G06F 2221/034 (2013.01);
Abstract

A plurality of data files is received. Thereafter, each file is represented as an entropy time series that reflects an amount of entropy across locations in code for such file. A wavelet transform is applied, for each file, to the corresponding entropy time series to generate an energy spectrum characterizing, for the file, an amount of entropic energy at multiple scales of code resolution. It can then be determined, for each file, whether or not the file is likely to be malicious based on the energy spectrum. Related apparatus, systems, techniques and articles are also described.


Find Patent Forward Citations

Loading…