Back to results
US 2024/0121266 A1Published application
Malicious script detection
AssigneeBluVector, Inc.
InventorsStephen Egbert, Ryan Peters, Scott Miserendino
Life of this patent
Estimating the term…
Abstract
Systems and methods for detecting malicious or potentially malicious script data are provided. Script data is extracted from a data stream at the network level and emulated in a controlled environment. Based upon a comparison of features extracted from emulation of the script to a set of heuristics, malicious script data can be identified for further analysis or processing.
Claims20
A method comprising:
- receiving data, comprising code, intended for a user device;
- determining, based on execution of at least a portion of the code, one or more features associated with the code;
- and
- causing, based on a determination by a machine learning model that the one or more features are associated with one or more malicious behaviors, output of a message indicating that the data is associated with the one or more malicious behaviors.
1 more element
A device comprising:
- one or more processors;
- and
- memory storing instructions that, when executed by the one or more processors, cause the device to:
- receive data, comprising code, intended for a user device;
- determine, based on execution of at least a portion of the code, one or more features associated with the code;
- and
- cause, based on a determination by a machine learning model that the one or more features are associated with one or more malicious behaviors, output of a message indicating that the data is associated with the one or more malicious behaviors.
4 more elements
A non-transitory computer-readable medium storing instructions that, when executed, cause:
- receiving data, comprising code, intended for a user device;
- determining, based on execution of at least a portion of the code, one or more features associated with the code;
- and
- causing, based on a determination by a machine learning model that the one or more features are associated with one or more malicious behaviors, output of a message indicating that the data is associated with the one or more malicious behaviors.
1 more element
Dependencies are inferred from the claim text.