利索-全球专利检索

  1. 登录
  2. 注册

搜索结果

7195 条记录 (耗时 0.034 秒)

    MACHINE LEARNING SYSTEM FOR AUTOMATED DETECTION OF SUSPICIOUS DIGITAL IDENTIFIERS
    3.
    发明公开
    MACHINE LEARNING SYSTEM FOR AUTOMATED DETECTION OF SUSPICIOUS DIGITAL IDENTIFIERS 审中-公开

    公开(公告)号：US20240340312A1

    公开(公告)日：2024-10-10

    申请号：US18295766

    申请日：2023-04-04

    申请人： Lookout, Inc.

    发明人： Aungon Nag Radon ,  Brian James Buck ,  Fatin Ridwan Haque

    IPC分类号： H04L9/40

    CPC分类号： H04L63/1483 ,  H04L63/1408

    摘要： A machine learning system for providing automated detection of suspicious digital identifiers is disclosed. The system receives a request to determine if an identifier associated with a resource attempting to be accessed by a device is suspicious. In response to the request, the system selects a machine learning model and loads or computes features associated with the address to facilitate determination regarding suspiciousness of the digital identifier. The system executes the machine learning model utilizing the features to determine whether the digital identifier is suspicious. The determination regarding suspiciousness of the digital identifier is provided to a phishing and content protection classifier to persist the response in a database. The determination may be verified by an expert and may be utilized to prevent access to the resource associated with the identifier and to train the machine learning model to enhance future determinations relating to suspiciousness of digital identifiers.

    System and method to detect domain generation algorithm malware and systems infected by such malware
    7.
    发明授权
    System and method to detect domain generation algorithm malware and systems infected by such malware 有权

    公开(公告)号：US12099603B2

    公开(公告)日：2024-09-24

    申请号：US16264667

    申请日：2019-01-31

    申请人： McAfee, LLC

    发明人： Neeraj Thakar ,  Praveen Kumar Amritaluru ,  Vikas Taneja

    IPC分类号： G06F21/56 ,  G06F21/55 ,  H04L9/40 ,  H04L61/4511

    CPC分类号： G06F21/56 ,  G06F21/554 ,  H04L61/4511 ,  H04L63/1408 ,  H04L63/1425 ,  H04L2463/144

    摘要： Systems and methods for detection of domain generated algorithms (DGA) and their command and control (C&C) servers are disclosed. In one embodiment, such an approach includes examining DNS queries for DNS resolution failures, and monitoring certain set of parameters such as number of levels, length of domain name, lexical complexity, and the like for each failed domain. These parameters may then be compared against certain thresholds to determine if the domain name is likely to be part of a DGA malware. Domain names identified as being part of a DGA malware may then be grouped together. Once a DGA domain name has been identified, activity from that domain name can be monitored to detect successful resolutions from the same source to see if any of the successful domain resolutions match these parameters. If they match specific thresholds, then the domain is determined to be a C&C server of the DGA malware and may be identified as such.

    Method and apparatus for dynamically creating encryption rules
    8.
    发明授权
    Method and apparatus for dynamically creating encryption rules 有权

    公开(公告)号：US12093406B2

    公开(公告)日：2024-09-17

    申请号：US17669344

    申请日：2022-02-10

    申请人： Nicira, Inc.

    发明人： Kiran Kumar Thota ,  Azeem Feroz ,  James C. Wiese

    IPC分类号： G06F21/60 ,  G06F9/455 ,  G06F9/54 ,  G06F21/56 ,  G06F21/62 ,  G09C1/00 ,  H04L9/14 ,  H04L9/40

    CPC分类号： G06F21/602 ,  G06F9/45558 ,  G06F9/542 ,  G06F21/56 ,  G06F21/568 ,  G06F21/6236 ,  G09C1/00 ,  H04L9/14 ,  H04L63/0428 ,  H04L63/123 ,  H04L63/1408 ,  H04L63/1441 ,  G06F2009/45587 ,  G06F2221/034 ,  H04L2209/24

    摘要： For a host that executes one or more guest virtual machines (GVMs), some embodiments provide a novel encryption method for encrypting the data messages sent by the GVMs. The method initially receives a data message to send for a GVM executing on the host. The method then determines whether it should encrypt the data message based on a set of one or more encryption rules. When the process determines that it should encrypt the received data message, it encrypts the data message and forwards the encrypted data message to its destination; otherwise, the method just forwards the received data message unencrypted to its destination. In some embodiments, the host encrypts differently the data messages for different GVMs that execute on the host. When two different GVMs are part of two different logical overlay networks that are implemented on common network fabric, the method in some embodiments encrypts the data messages exchanged between the GVMs of one logical network differently than the data messages exchanged between the GVMs of another logical network. In some embodiments, the method can also encrypt different types of data messages from the same GVM differently. Also, in some embodiments, the method can dynamically enforce encryption rules in response to dynamically detected events, such as malware infections.