Fast policy matching with runtime signature update
AssigneePalo Alto Networks, Inc.
InventorChunqing Cai
Life of this patent
Estimating the term…
Abstract
Techniques for fast policy matching with runtime signature update are disclosed. In some embodiments, a system/process/computer program product for fast policy matching with runtime signature update includes receiving a plurality of rules for malware signatures; compiling the plurality of rules for a fast policy matching engine that detects malware using the malware signatures; and executing the compiled plurality of rules using the fast policy matching engine to detect malware using at least one of the malware signatures.
Claims20
A system, comprising:
- a processor configured to:
- receive a plurality of rules for malware signatures;
- compile the plurality of rules for a fast policy matching engine that detects malware using the malware signatures;
- and
- execute the compiled plurality of rules using the fast policy matching engine to detect malware using at least one of the malware signatures;
- and
- a memory coupled to the processor and configured to provide the processor with instructions.
A method, comprising:
- receiving a plurality of rules for malware signatures;
- compiling the plurality of rules for a fast policy matching engine that detects malware using the malware signatures;
- and
- executing the compiled plurality of rules using the fast policy matching engine to detect malware using at least one of the malware signatures.
A computer program product embodied in a non-transitory computer readable medium and comprising computer instructions for:
- receiving a plurality of rules for malware signatures;
- compiling the plurality of rules for a fast policy matching engine that detects malware using the malware signatures;
- and
- executing the compiled plurality of rules using the fast policy matching engine to detect malware using at least one of the malware signatures.
Dependencies are inferred from the claim text.