公开(公告)号：US20210004499A1

公开(公告)日：2021-01-07

申请号：US16502668

申请日：2019-07-03

Applicant: NXP B.V.

Inventor： NIKITA VESHCHIKOV ,  VENTZISLAV NIKOV

IPC: G06F21/76 ,  G06N20/10 ,  G06K9/62 ,  G06N3/08 ,  G06F21/56

Abstract: A method and data processing system are provided for detecting a malicious component in a data processing system. The malicious component may be of any type, such as a hardware trojan, malware, or ransomware. In the method, a plurality of counters is used to count events in the data processing system during operation, where each event has a counter associated therewith. A machine learning model is trained a normal pattern of behavior of the data processing system using the event counts. After training, an operation of the data processing system is monitored using the machine learning model. Current occurrences of events in the data processing system are compared to the normal pattern of behavior. If a different pattern of behavior is detected, an indication, such as a flag, of the different pattern of behavior is provided.