MULTIVARIATE MALWARE DETECTION METHODS AND SYSTEMS

    公开(公告)号:US20220366047A1

    公开(公告)日:2022-11-17

    申请号:US17321280

    申请日:2021-05-14

    Abstract: Methods and systems for detecting whether an executable file comprises malware are disclosed. The methods and systems rely on various feature extraction and feature representation processes to allow patterns associated with Portable Executable (PE) files to be analyzed in an improved representation space. In one example, six different feature sets are extracted from a PE file and represented in six different feature spaces, before being input into a multivariate ensemble deep neural network-based model.

    System, method and apparatus for malicious software detection

    公开(公告)号:US11574054B2

    公开(公告)日:2023-02-07

    申请号:US17093882

    申请日:2020-11-10

    Abstract: The disclosed systems and methods are directed to a method for malicious software detection comprising: recognizing and extracting an EP section in an unrecognized PE file, collecting bytes in the EP section of the unrecognized PE file, converting the bytes to an array of integers, generating one or more n-grams from the array of integers, converting the one or more n-grams into b-MinHash, converting the bytes in an EP function included in the EP section to an array of assembly-based mnemonics; generating one or more n-grams from the array of assembly-based mnemonics and converting the one or more n-grams from the array of assembly-based mnemonics into a-MinHash, generating a similarity matrices, converting, the similarity matrices into a lower dimensionality code representation, and classifying the code as a PE benign or a malware file.

    Method and apparatus for evaluating impact of network operation, and device

    公开(公告)号:US12034627B2

    公开(公告)日:2024-07-09

    申请号:US18059674

    申请日:2022-11-29

    CPC classification number: H04L43/50 H04L41/145 H04L43/0811

    Abstract: A method includes: obtaining a service intent, where the service intent is used to indicate to perform a first network operation on the target network; obtaining a mirror simulation network corresponding to the target network; determining verification content, where the verification content is used to perform simulation verification on a running state of the mirror simulation network; performing the first network operation on the mirror simulation network based on the service intent; and performing, after the first network operation is performed on the mirror simulation network, simulation verification on the mirror simulation network based on the verification content, to obtain a first verification result, where the first verification result is used to evaluate impact of the first network operation on the target network.

    Wireless Data Transmission Method and Related Device Thereof

    公开(公告)号:US20230284319A1

    公开(公告)日:2023-09-07

    申请号:US18006513

    申请日:2021-07-26

    CPC classification number: H04W76/20 H04B17/328

    Abstract: The method includes: a first electronic device detects signal strength existing when the first electronic device communicates with a second electronic device, and determines whether the signal strength is less than a preset value; when the signal strength is less than the preset value, the first electronic device determines a current service state of the second electronic device, and determines, based on the current service state, working modes that respectively correspond to the first electronic device and the second electronic device and that are suitable for the current service state; and the first electronic device switches a working mode to the determined working mode that corresponds to the first electronic device and that is suitable for the current service state, and sends an instruction to indicate the second electronic device to switch a working mode to the determined working mode that corresponds to the second electronic device.

    Method and Apparatus for Evaluating Impact of Network Operation, and Device

    公开(公告)号:US20230087249A1

    公开(公告)日:2023-03-23

    申请号:US18059674

    申请日:2022-11-29

    Abstract: A method includes: obtaining a service intent, where the service intent is used to indicate to perform a first network operation on the target network; obtaining a mirror simulation network corresponding to the target network; determining verification content, where the verification content is used to perform simulation verification on a running state of the mirror simulation network; performing the first network operation on the mirror simulation network based on the service intent; and performing, after the first network operation is performed on the mirror simulation network, simulation verification on the mirror simulation network based on the verification content, to obtain a first verification result, where the first verification result is used to evaluate impact of the first network operation on the target network.

Patent Agency Ranking