Back to results
US 11,716,348 B2Granted
Malicious script detection
AssigneeBluVector, Inc.
InventorsStephen Egbert, Ryan Peters, Scott Miserendino
Life of this patent
Estimating the term…
Abstract
Systems and methods for detecting malicious or potenitally malicious script data are provided. Script data is extracted from a data stream at the network level and emulated in a controlled environment. Based upon a comparison of features extracted from emulation of the script to a set of heuristics, malicious script data can be identified for further analysis or processing.
Claims25
A method comprising:
- receiving, via a network, data comprising one or more scripts, wherein the data is intended for a user device;
- determining, based on execution of at least a portion of the one or more scripts, one or more features associated with the one or more scripts;
- determining, based on the one or more features, that the one or more scripts are associated with one or more malicious behaviors;
- and
- sending, based on the one or more malicious behaviors and to the user device, a message indicating that the data is associated with the one or more malicious behaviors.
2 more elements
A device comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the device to:
- receive, via a network, data comprising one or more scripts, wherein the data is intended for a user device;
- determine, based on execution of at least a portion of the one or more scripts, one or more features associated with the one or more scripts;
- determine, based on the one or more features, that the one or more scripts are associated with one or more malicious behaviors;
- and
- send, based on the one or more malicious behaviors and to the user device, a message indicating that the data is associated with the one or more malicious behaviors.
5 more elements
A non-transitory computer-readable medium storing instructions that, when executed, cause:
- receiving, via a network, data comprising one or more scripts, wherein the data is intended for a user device;
- determining, based on execution of at least a portion of the one or more scripts, one or more features associated with the one or more scripts;
- determining, based on the one or more features, that the one or more scripts are associated with one or more malicious behaviors;
- and
- sending, based on the one or more malicious behaviors and to the user device, a message indicating that the data is associated with the one or more malicious behaviors.
2 more elements
Dependencies are inferred from the claim text.