Back to results
US 2023/0069731 A1Published application
Automatic network signature generation
AssigneePalo Alto Networks, Inc.
InventorsZhanhao Chen, Jun Wang, Wei Xu
Life of this patent
Estimating the term…
Abstract
Automatic generation of network signatures is disclosed. Network profiles for malware samples are generated. Network signature candidates are selected based on the network profiles. The network signature candidates are automatically evaluated to automatically generate a new set of network signatures. The new set of network signatures is distributed to a security device/service to enforce the new set of network signatures to detect malware.
Claims20
A system, comprising:
- a processor configured to:
- generate network profiles for malware samples;
- select network signature candidates based on the network profiles;
- automatically evaluate the network signature candidates to automatically generate a new set of network signatures;
- and
- distribute the new set of network signatures to a security device/service to enforce the new set of network signatures to detect malware;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
5 more elements
A method, comprising:
- generating network profiles for malware samples;
- selecting network signature candidates based on the network profiles;
- automatically evaluating the network signature candidates to automatically generate a new set of network signatures;
- and
- distributing the new set of network signatures to a security device/service to enforce the new set of network signatures to detect malware.
2 more elements
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- generating network profiles for malware samples;
- is selecting network signature candidates based on the network profiles;
- automatically evaluating the network signature candidates to automatically generate a new set of network signatures;
- and
- distributing the new set of network signatures to a security device/service to enforce the new set of network signatures to detect malware.
2 more elements
Dependencies are inferred from the claim text.