Back to results
US 2014/0237597 A1Published application
Automatic signature generation for malicious pdf files
AssigneePalo Alto Networks, Inc.
InventorLiang Zhang
Life of this patent
Estimating the term…
Abstract
In some embodiments, automatic signature generation for malicious PDF files includes: parsing a PDF file to extract script stream data embedded in the PDF file; determining whether the extracted script stream data within the PDF file is malicious; and automatically generating a signature for the PDF file.
Claims21
(canceled)
A system, comprising:
- a processor configured to:
- receive a Portable Document Format (PDF) file that is known to include malicious content;
- parse the PDF to identify a cross-reference table included in the PDF file;
- and
- generate a signature associated with the PDF file from at least the identified cross-reference table;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
4 more elements
A method, comprising:
- receiving a Portable Document Format (PDF) file that is known to include malicious content;
- parsing, using a processor, the PDF to identify a cross-reference table included in the PDF file;
- and
- generating a signature associated with the PDF file from at least the identified cross-reference table.
1 more element
A computer program product, the computer program being embodied in a non-transitory computer readable storage medium and comprising computer instructions for:
- receiving a Portable Document Format (PDF) file that is known to include malicious content;
- parsing the PDF to identify a cross-reference table included in the PDF file;
- and
- generating a signature associated with the PDF file from at least the identified cross-reference table.
1 more element
Dependencies are inferred from the claim text.