Back to results
US 10,754,949 B1Granted
Using space-filling curves to fingerprint data
AssigneeSupport Intelligence, Inc.
InventorRick Holloman Wesson
Life of this patent
Estimating the term…
Abstract
A file is received. Contents of the file are transformed using a space-filling curve. One example of a space-filling curve that can be used for the transformation is a Hilbert curve. The result of the transformation is down-sampled. One example way of down-sampling is using a blur operation with anti-aliasing. A hashing operation is performed on the down-sampled result. One example of a hashing operation is locality sensitive hashing.
Claims19
A system, comprising:
- an interface configured to receive a potentially malicious file;
- a processor configured to:
- transform file contents of the potentially malicious file using a space-filling curve;
- perform a down-sample of the transformed file contents while preserving at least a portion of entropy associated with the transformed contents;
- and
- perform a hashing operation on the down-sampled result;
- and
- based at least in part on a result of the hashing operation, associate an indicator of maliciousness with the file;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
7 more elements
A method, comprising:
- receiving a potentially malicious file;
- transforming file contents of the potentially malicious file using a space-filling curve;
- performing a down-sampling of the transformed file contents while preserving at least a portion of entropy associated with the transformed contents;
- performing a hashing operation on the down-sampled result;
- and
- based at least in part on a result of the hashing operation, associating an indicator of maliciousness with the file.
3 more elements
A computer program product embodied in a non-transitory tangible computer readable storage medium and comprising computer instructions for:
- receiving a potentially malicious file;
- transforming file contents of the potentially malicious file using a space-filling curve;
- performing a down-sampling of the transformed file contents while preserving at least a portion of entropy associated with the transformed contents;
- performing a hashing operation on the down-sampled result;
- and
- based at least in part on a result of the hashing operation, associating an indicator of maliciousness with the file.
3 more elements
Dependencies are inferred from the claim text.