Back to results
US 2019/0294790 A1Published application
Malicious program detection
AssigneeDiDi Research America, LLC
InventorYinhong CHANG
Life of this patent
Estimating the term…
Abstract
Malicious programs may be detected by obtaining program information of a program. A control flow graph may be generated based on the program information. The program may be identified as being potentially malicious based on one or more portions of the control flow graph.
Claims20
A system for detecting malicious programs, the system comprising:
- one or more processors;
- and
- a memory storing instructions that, when executed by the one or more processors, cause the system to perform:
- obtaining program information of a program;
- generating an abstract syntax tree based on the program information;
- generating a control flow graph based on the abstract syntax tree;
- identifying a sensitive function within the control flow graph, the sensitive function associated with one or more arguments;
- performing a backward data flow trace of the one or more arguments of the sensitive function;
- and
- identifying the program as being potentially malicious based on the backward data flow trace.
7 more elements
A system for detecting malicious programs, the system comprising:
- one or more processors;
- and
- a memory storing instructions that, when executed by the one or more processors, cause the system to perform:
- obtaining program information of a program;
- generating a control flow graph based on the program information;
- and
- identifying the program as being potentially malicious based on one or more portions of the control flow graph.
4 more elements
A method for detecting malicious programs, the method implemented by a computing system including one or more processors and non-transitory storage media storing machine-readable instructions, the method comprising:
- obtaining program information of a program;
- generating a control flow graph based on the program information;
- and
- identifying the program as being potentially malicious based on one or more portions of the control flow graph.
1 more element
Dependencies are inferred from the claim text.