Loading patent…
AssigneeCisco Technology, Inc.
InventorsJiang Qian, Adam J. O'Donnell, Paul Frank, Patrick Mullen
Estimating the term…
Techniques are presented herein that combine a host-based analysis of an executable file on a host computer with a network-based analysis, i.e., an analysis of domain names to detect malware generated domain names that are used by the malicious executable files to establish malicious network connections. A server receives information from a host computer about an executable file that, when executed on the host computer, initiates a network connection. The server also receives information about the network connection itself. The server analyzes the information about the executable file to determine whether the executable file has a malicious disposition. Depending on a disposition of the executable file, the server analyzes the information about the network connection and determines whether the network connection is malicious.
A method comprising:
One or more computer readable storage media encoded with software comprising executable instructions and when the software is executed operable to:
An apparatus comprising:
Dependencies are inferred from the claim text.