US 2017/0250997 A1 · ALERTING AND TAGGING USING A MALWARE ANALYSIS PLATFORM FOR THREAT INTELLIGENCE MADE ACTIONABLE

Abstract

Techniques for alerting and tagging using a malware analysis platform for threat intelligence made actionable are disclosed. In some embodiments, a system, process, and/or computer program product for alerting and tagging using a malware analysis platform for threat intelligence made actionable includes receiving a plurality of samples for performing automated malware analysis to generate log files based on the automated malware analysis; processing the log files to extract artifacts associated with the log files; determining whether a tag matches any of the plurality of samples based on the artifacts; and performing an action based on whether the tag matches any of the plurality of samples.

Claims20

Dependent claims

A system, comprising:

a processor configured to:
receive a plurality of samples for performing automated malware analysis to generate log files based on the automated malware analysis;
process the log files to extract artifacts associated with the log files;
determine whether a tag matches any of the plurality of samples based on the artifacts;
and
perform an action based on whether the tag matches any of the plurality of samples;
and
a memory coupled to the processor and configured to provide the processor with instructions.

5 more elements

Dependencies are inferred from the claim text.

Facts

Application

15/056,981Filed 29 Feb 2016

Published

31 Aug 2017

Term ends

Not estimatedThe source records don’t support an estimate.

Classification8 codes

H04L 63/1416
By monitoring network traffic: event detection, e.g. attack signature detection
G06F 21/56
Detecting local intrusion or implementing counter-measures: computer malware detection or handling, e.g. anti-virus arrangements
H04L 63/1425
By monitoring network traffic: traffic logging, e.g. anomaly detection
H04L 63/145
Countermeasures against malicious traffic: the attack involving the propagation of malware through the network, e.g. viruses, trojans or worms

Alerting and tagging using a malware analysis platform for threat intelligence made actionable

Life of this patent

Alerting and tagging using a malware analysis platform for threat intelligence made actionable

Life of this patent

Abstract

Claims20