Dimensionality reduction of computer programs

A system, comprising:

• at least one data processor;
• and
• at least one memory storing instructions which, when executed by the at least one data processor, result in operations comprising:
• determining a sketch matrix that approximates a matrix representative of a reference dataset, the reference dataset including at least one computer program having a predetermined classification;
• determining, based on the sketch matrix, an orthonormal approximation of a range of the reference dataset;
• determining, based on the determined orthonormal approximation of the range of the reference dataset, an approximation of an intermediate dimensional feature space occupied by the reference dataset;
• determining, based on the intermediate dimensional feature space, an approximation of a basis of a feature space occupied by the reference dataset;
• generating, based on the basis of the feature space occupied by the reference dataset a reduced dimension representation of the reference dataset, the reduced dimension representation having a fewer quantity of features than the reference dataset;
• and
• classifying, based at least on the reduced dimension representation, a target computer program to determine whether the target computer program is malicious.

A method for implementation by one or more computers comprising:

• receiving data characterizing a target computer program;
• classifying, based at least on a reduced dimension representation, the target computer program to determine whether the target computer program is malicious;
• preventing execution or access of the target computer program based on a determination that the target computer program is malicious;
• or
• allowing execution or access of the target computer program based on a determination that the target computer program is not malicious;
• wherein the reduced dimension representation is generated by:
• determining a sketch matrix that approximates a matrix representative of a reference dataset, the reference dataset characterizing a plurality of computer programs having a predetermined classification indicating whether each such computer program is malicious or benign;
• and
• determining, based on the sketch matrix, an orthonormal approximation of a range of the reference dataset;
• determining, based on the determined orthonormal approximation of the range of the reference dataset, an approximation of an intermediate dimensional feature space occupied by the reference dataset;
• determining, based on the intermediate dimensional feature space, an approximation of a basis of a feature space occupied by the reference dataset;
• and
• generating, based on the basis of the feature space occupied by the reference dataset a reduced dimension representation of the reference dataset, the reduced dimension representation having a fewer quantity of features than the reference dataset.