中科微点-全球专利检索

  1. Login
  2. Sign Up

Search Results

8 records (took 0.014 seconds)

    SYSTEMS AND METHODS FOR DETECTING MALWARE ATTACKS
    1.
    发明申请
    SYSTEMS AND METHODS FOR DETECTING MALWARE ATTACKS 有权

    公开(公告)号：US20210409425A1

    公开(公告)日：2021-12-30

    申请号：US17062732

    申请日：2020-10-05

    Applicant: NetApp, Inc.

    Inventor： Prateeksha Varshney ,  Siddhartha Nandi ,  Jayanta Basak

    IPC: H04L29/06 ,  G06F21/60

    Abstract: A method, a computing device, and a non-transitory machine-readable medium for detecting malware attacks. In one example, an agent implemented in an operating system detects an overwrite in which an original data component is overwritten with a new data component. The agent computes a plurality of features associated with the overwrite, the plurality of features including an original entropy corresponding to the original data component, a new entropy corresponding to the new data component, an overwrite fraction, and a set of divergence features. The agent determines whether the new data component is encrypted using the plurality of features.

    SYSTEMS AND METHODS FOR DETECTING MALWARE ATTACKS
    2.
    发明公开
    SYSTEMS AND METHODS FOR DETECTING MALWARE ATTACKS 审中-公开

    公开(公告)号：US20240022597A1

    公开(公告)日：2024-01-18

    申请号：US18477879

    申请日：2023-09-29

    Applicant: NetApp Inc.

    Inventor： Prateeksha Varshney ,  Siddhartha Nandi ,  Jayanta Basak

    IPC: H04L9/40 ,  G06F21/60

    CPC classification number: H04L63/145 ,  H04L63/1416 ,  G06F21/602

    Abstract: A method, a computing device, and a non-transitory machine-readable medium for detecting malware attacks. In one example, an agent implemented in an operating system detects an overwrite in which an original data component is overwritten with a new data component. The agent computes a plurality of features associated with the overwrite, the plurality of features including an original entropy corresponding to the original data component, a new entropy corresponding to the new data component, an overwrite fraction, and a set of divergence features. The agent determines whether the new data component is encrypted using the plurality of features.

    Systems and methods for detecting malware attacks
    6.
    发明授权
    Systems and methods for detecting malware attacks 有权

    公开(公告)号：US11792223B2

    公开(公告)日：2023-10-17

    申请号：US17062732

    申请日：2020-10-05

    Applicant: NetApp, Inc.

    Inventor： Prateeksha Varshney ,  Siddhartha Nandi ,  Jayanta Basak

    IPC: H04L9/40 ,  G06F21/60

    CPC classification number: H04L63/145 ,  G06F21/602 ,  H04L63/1416

    Abstract: A method, a computing device, and a non-transitory machine-readable medium for detecting malware attacks. In one example, an agent implemented in an operating system detects an overwrite in which an original data component is overwritten with a new data component. The agent computes a plurality of features associated with the overwrite, the plurality of features including an original entropy corresponding to the original data component, a new entropy corresponding to the new data component, an overwrite fraction, and a set of divergence features. The agent determines whether the new data component is encrypted using the plurality of features.

    Systems and methods for protecting against malware attacks
    7.
    发明授权
    Systems and methods for protecting against malware attacks 有权

    公开(公告)号：US11475132B2

    公开(公告)日：2022-10-18

    申请号：US16942123

    申请日：2020-07-29

    Applicant: NetApp, Inc.

    Inventor： Jagadish Vasudeva ,  Prateeksha Varshney ,  Priya Sehgal ,  Mrinal K. Bhattacharjee ,  Amit Valjibhai Panara ,  Siddhartha Nandi

    IPC: G06F21/56 ,  G06F21/54 ,  G06F21/60 ,  G06F21/57

    Abstract: A method, computing device, and non-transitory machine-readable medium for detecting malware attacks and mitigating data loss. In various embodiments, an agent is implemented in the operating system of a storage node to provide protection at the bottommost level in a data write path. The agent intercepts write requests and observes file events over time to detect anomalous behavior. For example, the agent may monitor incoming write requests and, when an incoming write request is detected, determine whether the file is associated with a malware attack risk based on an analysis of an encryption state of data in the file. If the file is associated with a malware attack risk, an entry for the file is added to a file log. The agent may analyze the chi-square values for data written to the files, the file log, and the file format to determine whether a malware attack is underway.

    SYSTEMS AND METHODS FOR PROTECTING AGAINST MALWARE ATTACKS
    8.
    发明申请
    SYSTEMS AND METHODS FOR PROTECTING AGAINST MALWARE ATTACKS 有权

    公开(公告)号：US20210334374A1

    公开(公告)日：2021-10-28

    申请号：US16942123

    申请日：2020-07-29

    Applicant: NetApp, Inc.

    Inventor： Jagadish Vasudeva ,  Prateeksha Varshney ,  Priya Sehgal ,  Mrinal K. Bhattacharjee ,  Amit Valjibhai Panara ,  Siddhartha Nandi

    IPC: G06F21/56 ,  G06F21/54 ,  G06F21/57 ,  G06F21/60

    Abstract: A method, a computing device, and a non-transitory machine-readable medium for detecting malware attacks (e.g., ransomware attacks) and mitigating data loss. In one or more embodiments, an agent is implemented in the operating system of a storage node to provide protection at the bottommost level in a data write path. The agent intercepts write requests and observes file events over time to detect anomalous behavior. For example, the agent may monitor incoming write requests and, when an incoming write request is detected, determine whether the file is associated with a malware attack risk based on an analysis of an encryption state of data in the file. If the file associated with a malware attack risk, an entry for the file is added to a file log. The agent may analyze the chi-square values for data written to the files, the file log, and the file format to determine whether a malware attack is underway.

Patent Agency Ranking