US 2021/0232677 A1 · Automated Detection of User Device Security Risks Related to Process Threads and Corresponding Activity

Abstract

Methods, apparatus, and processor-readable storage media for automated detection of user device security risks related to process threads and corresponding activity are provided herein. An example computer-implemented method includes obtaining information pertaining to processes running on a user device; obtaining information pertaining to images loaded into at least one memory associated with at least one of the processes running on the user device; obtaining information pertaining to threads created in connection with at least one of the processes running on the user device; automatically identifying at least one of the threads as a security risk by processing the information pertaining to the images and the information pertaining to the threads; and performing at least one automated action based on the identification of at least one of the one or more threads as a security risk.

Claims20

Dependent claims

A computer-implemented method comprising:

obtaining information pertaining to one or more processes running on a user device;
obtaining information pertaining to one or more images loaded into at least one memory associated with at least one of the one or more processes running on the user device;
obtaining information pertaining to one or more threads created in connection with at least one of the one or more processes running on the user device;
automatically identifying at least one of the one or more threads as a security risk by processing the information pertaining to the one or more images and the information pertaining to the one or more threads;
and
performing at least one automated action based at least in part on the identification of at least one of the one or more threads as a security risk;
wherein the method is performed by at least one processing device comprising a processor coupled to a memory.

4 more elements

A non-transitory processor-readable storage medium having stored therein program code of one or more software programs, wherein the program code when executed by at least one processing device causes the at least one processing device:

to obtain information pertaining to one or more processes running on a user device;
to obtain information pertaining to one or more images loaded into at least one memory associated with at least one of the one or more processes running on the user device;
to obtain information pertaining to one or more threads created in connection with at least one of the one or more processes running on the user device;
to automatically identify at least one of the one or more threads as a security risk by processing the information pertaining to the one or more images and the information pertaining to the one or more threads;
and
to perform at least one automated action based at least in part on the identification of at least one of the one or more threads as a security risk.

3 more elements

An apparatus comprising:

at least one processing device comprising a processor coupled to a memory;
the at least one processing device being configured:
to obtain information pertaining to one or more processes running on a user device;
to obtain information pertaining to one or more images loaded into at least one memory associated with at least one of the one or more processes running on the user device;
to obtain information pertaining to one or more threads created in connection with at least one of the one or more processes running on the user device;
to automatically identify at least one of the one or more threads as a security risk by processing the information pertaining to the one or more images and the information pertaining to the one or more threads;
and
to perform at least one automated action based at least in part on the identification of at least one of the one or more threads as a security risk.

5 more elements

Dependencies are inferred from the claim text.

Automated Detection of User Device Security Risks Related to Process Threads and Corresponding Activity

Life of this patent

Automated Detection of User Device Security Risks Related to Process Threads and Corresponding Activity

Life of this patent

Abstract

Claims20