Digital DNA sequence
AssigneeCounterTack, Inc.
InventorMichael Gregory Hoglund
Life of this patent
Estimating the term…
Abstract
In an embodiment of the invention, a method of classifying a data object includes: scanning the data object; evaluating contents of data objects base on at least one selected rule; and generating a digital DNA sequence that classifies at least some contents in the data object.
Claims28
A computer-implemented method, comprising:
- at an electronic device for generating a sequence that classifies a data object to determine whether the data object is a malicious object:
- applying to the data object a plurality of rules, each rule of the plurality of rules associated with a respective weight value and with a respective trait, to select expressed traits, wherein an expressed trait corresponds to a rule that matches the data object;
- generating a sequence comprising each of the weight values associated with the expressed traits, wherein each of the weight values corresponds to a likelihood of whether the data object belongs to a respective class of data objects;
- calculating a sequence weight based on the weight values associated with each of the expressed traits, wherein calculating a sequence weight comprises reducing a weight value of an expressed trait for a subsequent expression of the same trait, including:
- determining whether a first rule of the plurality of rules matches the data object for a first time;
- in accordance with determining that the first rule of the plurality of rules matches the data object for the first time, utilizing a first weight value in calculating the sequence weight;
- determining whether the first rule of the plurality of rules matches the data object for a second time that is subsequent to the first time;
- and
- in accordance with determining that the first rule of the plurality of rules matches the data object for the second time that is subsequent to the first time, utilizing a second weight value that is less than the first weight value in calculating the sequence weight;
- and
- storing the generated sequence in a selected target memory of the electronic device.
An electronic device for generating a sequence that classifies a data object to determine whether the data object is a malicious object, the device comprising:
- a memory;
- and
- a sequencing engine, wherein the sequencing engine is configured to be executed by one or more processors, the sequencing engine including instructions for:
- applying to the data object a plurality of rules, each rule of the plurality of rules associated with a respective weight value and with a respective trait, to select expressed traits, wherein an expressed trait corresponds to a rule that matches the data object;
- generating a sequence comprising each of the weight values associated with the expressed traits, wherein each of the weight values corresponds to a likelihood of whether the data object belongs to a respective class of data objects;
- calculating a sequence weight based on the weight values associated with each of the expressed traits, wherein calculating a sequence weight comprises reducing a weight value of an expressed trait for a subsequent expression of the same trait, including:
- determining whether a first rule of the plurality of rules matches the data object for a first time;
- in accordance with determining that the first rule of the plurality of rules matches the data object for the first time, utilizing a first weight value in calculating the sequence weight;
- determining whether the first rule of the plurality of rules matches the data object for a second time that is subsequent to the first time;
- and
- in accordance with determining that the first rule of the plurality of rules matches the data object for the second time that is subsequent to the first time, utilizing a second weight value that is less than the first weight value in calculating the sequence weight;
- and
- storing the generated sequence in a selected target memory.
A non-transitory computer-readable storage medium storing instructions for execution by an electronic device for generating a sequence that classifies a data object to determine whether the data object is a malicious object, the instructions comprising instructions for:
- applying to the data object a plurality of rules, each rule of the plurality of rules associated with a respective weight value and with a respective trait, to select expressed traits, wherein an expressed trait corresponds to a rule that matches the data object;
- generating a sequence comprising each of the weight values associated with the expressed traits, wherein each of the weight values corresponds to a likelihood of whether the data object belongs to a respective class of data objects;
- calculating a sequence weight based on the weight values associated with each of the expressed traits, wherein calculating a sequence weight comprises reducing a weight value of an expressed trait for a subsequent expression of the same trait, including:
- determining whether a first rule of the plurality of rules matches the data object for a first time;
- in accordance with determining that the first rule of the plurality of rules matches the data object for the first time, utilizing a first weight value in calculating the sequence weight;
- determining whether the first rule of the plurality of rules matches the data object for a second time that is subsequent to the first time;
- and
- in accordance with determining that the first rule of the plurality of rules matches the data object for the second time that is subsequent to the first time, utilizing a second weight value that is less than the first weight value in calculating the sequence weight;
- and
- storing the generated sequence in a selected target memory of the electronic device.
Dependencies are inferred from the claim text.