Methods and apparatus to create malware detection rules
AssigneeMcAfee, Inc.
InventorNicholas T. Smith
Life of this patent
Estimating the term…
Abstract
Methods, apparatus, systems and articles of manufacture to create malware detection rules are disclosed. An example apparatus includes a rule generator to generate an augmented rule set based on a first training data set. A matrix generator is to create a matrix using the augmented rule set and a second training data set. A rule regulator to apply regularization to the augmented rule set based on the matrix to remove any number of rules from the augmented rule set, the rule regulator to create a reduced rule set. A reduced rule set checker to validate the reduced rule set.
Claims22
An apparatus to generate a rule set for detecting malware, the apparatus comprising:
- a rule generator to generate an augmented rule set based on a first training data set;
- a matrix generator to create a matrix using the augmented rule set and a second training data set;
- a rule regulator to apply regularization to the augmented rule set based on the matrix to remove any number of rules from the augmented rule set, the rule regulator to create a reduced rule set;
- and
- a reduced rule set checker to validate the reduced rule set.
At least one non-transitory computer readable medium comprising instructions that, when executed, cause at least one processor to at least:
- generate an augmented rule set based on a first training data set;
- process a second training data set using the augmented rule set to create a matrix;
- apply regularization to the augmented rule set based on the matrix to form a reduced rule set, the regularization to remove rules from the augmented rule set;
- and
- validate the reduced rule set.
A method of generating a rule set for detecting malware, the method comprising:
- generating, by executing an instruction with a processor, an augmented rule set based on a first training data set;
- processing, by executing an instruction with the processor, a second training data set using the augmented rule set to create a matrix;
- applying regularization, by executing an instruction with the processor, to the augmented rule set based on the matrix to form a reduced rule set, the regularization to remove rules from the augmented rule set;
- and
- validating, by executing an instruction with the processor, the reduced rule set.
Dependencies are inferred from the claim text.