PROTECTING AGAINST MALWARE VARIANTS USING RECONSTRUCTED CODE OF MALWARE

David Tolpin; Yuri Shafet; Shlomi Boutnaru

PROTECTING AGAINST MALWARE VARIANTS USING RECONSTRUCTED CODE OF MALWARE

David Tolpin (Inventor), Yuri Shafet (Inventor), Shlomi Boutnaru (Inventor)

Department of Computer Science

Research output: Patent

Abstract

A system for discovering programming variants. The system analyzes system calls from executing a program to generate programming code or executable for a particular OS and/or CPU that would perform the same or similar actions as the program. The code that is generated is then mutated, augmented, and/or changed to create variations of the program which still functions and/or obtains the same objectives as the original code.

Original language	English
Patent number	US2017032120
IPC	G06F 21/ 56 A I
Priority date	5/08/16
State	Published - 2 Feb 2017

Cite this

@misc{841a9b8276454b9ab3f4a1da22959d58,

title = "PROTECTING AGAINST MALWARE VARIANTS USING RECONSTRUCTED CODE OF MALWARE",

abstract = "A system for discovering programming variants. The system analyzes system calls from executing a program to generate programming code or executable for a particular OS and/or CPU that would perform the same or similar actions as the program. The code that is generated is then mutated, augmented, and/or changed to create variations of the program which still functions and/or obtains the same objectives as the original code.",

author = "David Tolpin and Yuri Shafet and Shlomi Boutnaru",

year = "2017",

month = feb,

day = "2",

language = "English",

type = "Patent",

note = "US2017032120; G06F 21/ 56 A I",

}

TY - PAT

T1 - PROTECTING AGAINST MALWARE VARIANTS USING RECONSTRUCTED CODE OF MALWARE

AU - Tolpin, David

AU - Shafet, Yuri

AU - Boutnaru, Shlomi

PY - 2017/2/2

Y1 - 2017/2/2

N2 - A system for discovering programming variants. The system analyzes system calls from executing a program to generate programming code or executable for a particular OS and/or CPU that would perform the same or similar actions as the program. The code that is generated is then mutated, augmented, and/or changed to create variations of the program which still functions and/or obtains the same objectives as the original code.

AB - A system for discovering programming variants. The system analyzes system calls from executing a program to generate programming code or executable for a particular OS and/or CPU that would perform the same or similar actions as the program. The code that is generated is then mutated, augmented, and/or changed to create variations of the program which still functions and/or obtains the same objectives as the original code.

M3 - Patent

M1 - US2017032120

ER -

PROTECTING AGAINST MALWARE VARIANTS USING RECONSTRUCTED CODE OF MALWARE

Abstract

Fingerprint

Cite this